feat: adding ibc quota v2

app/upgrades.go

@@ -125,6 +125,16 @@ func (app *UmeeApp) registerUpgrade6_2(upgradeInfo upgradetypes.Plan) {
 			govParams := app.GovKeeper.GetParams(ctx)
 			govParams.MinInitialDepositRatio = sdk.NewDecWithPrec(1, 1).String()
 			err = app.GovKeeper.SetParams(ctx, govParams)
+			if err != nil {
+				return fromVM, err
+			}
+
+			// uibc migrations
+			uIBCKeeper := app.UIbcQuotaKeeperB.Keeper(&ctx)
+			// migrating outflow
+			uIBCKeeper.MigrateTotalOutflowSum()
+			// uibc params
+			err = uIBCKeeper.SetParams(uibc.DefaultParams())
 			return fromVM, err
 		},
 	)

proto/umee/uibc/v1/genesis.proto

@@ -17,7 +17,6 @@ message GenesisState {
     (gogoproto.castrepeated) = "github.com/cosmos/cosmos-sdk/types.DecCoins",
     (gogoproto.nullable)     = false
   ];
-
   // total_outflow_sum defines the total outflow sum of ibc-transfer in USD.
   string total_outflow_sum = 3 [
     (cosmos_proto.scalar)  = "cosmos.Dec",
@@ -31,4 +30,15 @@ message GenesisState {
     (gogoproto.jsontag)  = "quota_duration,omitempty",
     (gogoproto.moretags) = "yaml:\"quota_expires\""
   ];
+  // inflows tracks IBC inflow transfers (in USD) for each denom during quota period.
+  repeated cosmos.base.v1beta1.DecCoin inflows = 5 [
+    (gogoproto.castrepeated) = "github.com/cosmos/cosmos-sdk/types.DecCoins",
+    (gogoproto.nullable)     = false
+  ];
+  // total_inflow_sum defines tracks total sum of IBC inflow transfers (in USD) during quota period.
+  string total_inflow_sum = 6 [
+    (cosmos_proto.scalar)  = "cosmos.Dec",
+    (gogoproto.customtype) = "github.com/cosmos/cosmos-sdk/types.Dec",
+    (gogoproto.nullable)   = false
+  ];
 }

proto/umee/uibc/v1/quota.proto

@@ -30,6 +30,24 @@ message Params {
     (gogoproto.jsontag)     = "quota_duration,omitempty",
     (gogoproto.moretags)    = "yaml:\"quota_duration\""
   ];
+  // inflow_outflow_quota_base defines the inflow outflow quota base of ibc-transfer in USD
+  string inflow_outflow_quota_base = 5 [
+    (cosmos_proto.scalar)  = "cosmos.Dec",
+    (gogoproto.customtype) = "github.com/cosmos/cosmos-sdk/types.Dec",
+    (gogoproto.nullable)   = false
+  ];
+  // inflow_outflow_quota_rate defines the rate of total inflows
+  string inflow_outflow_quota_rate = 6 [
+    (cosmos_proto.scalar)  = "cosmos.Dec",
+    (gogoproto.customtype) = "github.com/cosmos/cosmos-sdk/types.Dec",
+    (gogoproto.nullable)   = false
+  ];
+  // inflow_outflow_quota_token_base defines the inflow outflow quota base for token
+  string inflow_outflow_quota_token_base = 7 [
+    (cosmos_proto.scalar)  = "cosmos.Dec",
+    (gogoproto.customtype) = "github.com/cosmos/cosmos-sdk/types.Dec",
+    (gogoproto.nullable)   = false
+  ];
 }
 
 // IBCTransferStatus status of ibc-transfer quota check for inflow and outflow

tests/e2e/e2e_ibc_test.go

@@ -169,8 +169,8 @@ func (s *E2ETest) TestIBCTokenTransfer() {
 		// supply will be not be decreased because sending more than total quota from umee to gaia
 		s.checkSupply(umeeAPIEndpoint, uatomIBCHash, atomFromGaia.Amount)
 
-		// ✅ << BELOW TOKEN QUTOA 5$ but ATOM_QUOTA (5$)+ UMEE_QUOTA(90$) <= TOTAL QUOTA (120$) >>
-		// send $15 ATOM from umee to gaia
+		// ✅ << BELOW TOKEN QUTOA 5$ but ATOM_QUOTA (5$)+ UMEE_QUOTA(90$) <= TOTAL QUOTA (120$)
+		// send $5 ATOM from umee to gaia
 		sendAtom := mulCoin(atomQuota, "0.05")
 		s.SendIBC(s.Chain.ID, setup.GaiaChainID, "", sendAtom, false, "below both quotas")
 		// remaing supply decreased uatom on umee

util/store/store.go

@@ -15,6 +15,7 @@
 	"time"
 
 	sdkmath "cosmossdk.io/math"
+	db "github.com/cometbft/cometbft-db"
 	"github.com/cosmos/cosmos-sdk/codec"
 	sdk "github.com/cosmos/cosmos-sdk/types"
 )
@@ -26,7 +27,7 @@
 	if bz := store.Get(key); len(bz) > 0 {
 		var c TPtr = new(T)
 		if err := c.Unmarshal(bz); err != nil {
 			panic(fmt.Sprintf("error unmarshaling %s into %T: %s", errField, c, err))
 		}
 		return c
 	}
@@ -39,7 +40,7 @@
 func SetValue[T Marshalable](store sdk.KVStore, key []byte, value T, errField string) error {
 	bz, err := value.Marshal()
 	if err != nil {
 		return fmt.Errorf("can't marshal %s: %s", errField, err)
 	}
 	store.Set(key, bz)
 	return nil
@@ -47,26 +48,26 @@
 
 // GetBinValue is similar to GetValue (loads value in the store),
 // but uses UnmarshalBinary interface instead of protobuf
 func GetBinValue[TPtr PtrBinMarshalable[T], T any](store sdk.KVStore, key []byte, errField string) (TPtr, error) {
 	if bz := store.Get(key); len(bz) > 0 {
 		var c TPtr = new(T)
 		if err := c.UnmarshalBinary(bz); err != nil {
 			return nil, fmt.Errorf("error unmarshaling %s into %T: %s", errField, c, err)
 		}
 		return c, nil
 	}
 	return nil, nil
 }
 
 // SetBinValue is similar to SetValue (stores value in the store),
 // but uses UnmarshalBinary interface instead of protobuf
 func SetBinValue[T BinMarshalable](store sdk.KVStore, key []byte, value T, errField string) error {
 	bz, err := value.MarshalBinary()
 	if err != nil {
 		return fmt.Errorf("can't marshal %s: %s", errField, err)
 	}
 	store.Set(key, bz)
 	return nil
 }
 
 // GetValueCdc is similar to GetValue, but uses codec for marshaling. For Protobuf objects the
@@ -74,24 +75,24 @@
 // instead of GetValue.
 // Returns a boolean indicating whether any data was found. If the return is false, the object
 // is not changed by this function.
 func GetValueCdc(store sdk.KVStore, cdc codec.Codec, key []byte, object codec.ProtoMarshaler, errField string) bool {
 	if bz := store.Get(key); len(bz) > 0 {
 		err := cdc.Unmarshal(bz, object)
 		if err != nil {
 			panic(errField + " could not be unmarshaled: " + err.Error())
 		}
 		return true
 	}
 	return false
 }
 
 // SetValueCdc is similar to the SetValue, but uses codec for marshaling. For Protobuf objects the
 // result is the same, unless codec.Any is used. In the latter case this function MUST be used,
 // instead of SetValue.
 func SetValueCdc(store sdk.KVStore, cdc codec.Codec, key []byte, object codec.ProtoMarshaler, errField string) error {
 	bz, err := cdc.Marshal(object)
 	if err != nil {
 		return fmt.Errorf("failed to encode %s, %s", errField, err.Error())
 	}
 	store.Set(key, bz)
 	return nil
@@ -114,7 +115,7 @@
 func SetInt(store sdk.KVStore, key []byte, val sdkmath.Int, errField string) error {
 	if val.IsNil() || val.IsZero() {
 		store.Delete(key)
 		return nil
 	}
 	return SetValue(store, key, &val, errField)
 }
@@ -135,7 +136,7 @@
 func SetDec(store sdk.KVStore, key []byte, val sdk.Dec, errField string) error {
 	if val.IsNil() || val.IsZero() {
 		store.Delete(key)
 		return nil
 	}
 	return SetValue(store, key, &val, errField)
 }
@@ -155,7 +156,7 @@
 func SetAddress(store sdk.KVStore, key []byte, val sdk.AccAddress) {
 	if val == nil || val.Empty() {
 		store.Delete(key)
 		return
 	}
 	store.Set(key, val)
 }
@@ -187,8 +188,8 @@
 	case uint32:
 		bz = make([]byte, 4)
 		binary.LittleEndian.PutUint32(bz, v)
 	case byte:
 		bz = []byte{v}
 	}
 	store.Set(key, bz)
 }
@@ -204,8 +205,15 @@
 		return T(binary.LittleEndian.Uint64(bz)), true
 	case int32, uint32:
 		return T(binary.LittleEndian.Uint32(bz)), true
 	case byte:
 		return T(bz[0]), true
 	}
 	panic("not possible: all types must be covered above")
 }
+
+func DeleteByIterator(store sdk.KVStore, iter db.Iterator) {
+	defer iter.Close()
+	for ; iter.Valid(); iter.Next() {
+		store.Delete(iter.Key())
+	}
+}

x/uibc/README.md

@@ -4,26 +4,12 @@
 
 The `x/uibc` is a Cosmos Module providing:
 
-- IBC Denom Metadata Tracker for [ICS-20](https://github.com/cosmos/ibc/tree/main/spec/app/ics-020-fungible-token-transfer) transferred tokens to backfill denom metadata into the x/bank standard Cosmos SDK module.
 - IBC Quota is an ICS-4 middleware for the ICS-20 token transfer app to apply quota mechanism.
 
 ## Content
 
-- [IBC Denom Metadata Tracker](#ibc-denom-metadata-tracker)
 - [IBC Quota](#ibc-quota)
 
-## IBC Denom Metadata Tracker
-
-`x/bank.types.Metadata` is a structure which provides essential information about denom, such as display denom name, description, symbol, list of units (unit name and decimal exponent), and the default unit (`Base`).
-
-ICS-20 is a x/bank token transfer protocol over IBC.
-The core implementation doesn't create bank `Metadata` when a new token is transferred for the very first time. It's worth to note that token received through IBC is identified by the port ID, channel ID and the source denom ID.
-The purpose of the `x/uibc/ics20` module is to wrap the core IBC module and create a denom `Metadata` whenever it is missing. Look at the [`TrackDenomMetadata`](ics20/keeper/keeper.go) function for more details.
-
-### Considerations
-
-The IBC ICS-20 doesn't carry any metadata information, so we only fill up the base denom. Importantly, we don't know about the `Exponent`, and we set `Exponent := 0`. In many cases this is wrong, and should be overwritten by chain governance.
-
 ## IBC Quota
 
 Hack or lending abuse is impossible to stop once the funds leave the chain. One mitigation is to limit the IBC inflows and outflows and be able to stop a chain and recover the funds with a migration.
@@ -43,9 +29,9 @@ All outflows are measured in token average USD value using our x/oracle `AvgKeep
 
 We define 2 Quotas for ICS-20 transfers. Each quota only tracks tokens x/leverage Token Registry.
 
-- `Params.TokenQuota`: upper limit of a sum of all outflows per token. Initially it's set to 0.6m USD per token. It limits the outflows value for each token.
+- `Params.TokenQuota`: upper limit of a sum of all outflows per token. Initially it's set to 0.9M USD per token. It limits the outflows value for each token.
   NOTE: we measure per token as defined in the x/leverage, not the IBC Denom Path (there can be multiple paths). Since creating a channel is permission less, we want to use same quota token.
-- `Params.TotalQuota`: upper limit of a sum of all token outflows combined. Initially it's set to 1m USD. Example of IBC outflows reaching the total quota: 300k USD worth of ATOM, 200k USD worth of STATOM, 250k USD worth of UMEE and 250k USD worth JUNO.
+- `Params.TotalQuota`: upper limit of a sum of all token outflows combined. Initially it's set to 1.6M USD. Example of IBC outflows reaching the total quota: 600k USD worth of ATOM, 500k USD worth of STATOM, 250k USD worth of UMEE and 250k USD worth JUNO.
 
 If a quota parameter is set to zero then we consider it as unlimited.
 
@@ -57,7 +43,11 @@ Transfer of tokens, which are not registered in the x/leverage Token Registry ar
 
 #### Inflows
 
-We only allow inflows of tokens registered in x/leverage Token Registry. Other inflow transfers will be rejected.
+All inflows are measured in token average USD value using our x/oracle `AvgKeeper`. The `AvgKeeper` aggregates TVWAP prices over 16h window.
+We are only tracking inflows for tokens which are registered in x/leverage Token Registry.
+
+- `Genesis.TotalInflowSum` : Sum of all inflows per token which are registered in x/leverage Token Registry
+- `Genesis.Inflows`: Inflows of registered tokens.
 
 #### ICS-20 Quota control
 

x/uibc/genesis.go

@@ -18,8 +18,10 @@ func NewGenesisState(params Params, outflows sdk.DecCoins, outflowSum sdk.Dec) *
 func DefaultGenesisState() *GenesisState {
 	return &GenesisState{
 		Params:          DefaultParams(),
+		Inflows:         nil,
 		Outflows:        nil,
 		TotalOutflowSum: sdk.NewDec(0),
+		TotalInflowSum:  sdk.NewDec(0),
 	}
 }
 
@@ -38,9 +40,22 @@ func (gs GenesisState) Validate() error {
 		}
 	}
 
+	for _, o := range gs.Inflows {
+		if o.Amount.IsNil() {
+			return sdkerrors.ErrInvalidRequest.Wrap("ibc denom inflow must be defined")
+		}
+		if err := o.Validate(); err != nil {
+			return err
+		}
+	}
+
 	if gs.TotalOutflowSum.IsNegative() {
 		return fmt.Errorf("total outflow sum cannot be negative : %s ", gs.TotalOutflowSum.String())
 	}
 
+	if gs.TotalInflowSum.IsNegative() {
+		return fmt.Errorf("total inflow sum cannot be negative : %s ", gs.TotalInflowSum.String())
+	}
+
 	return nil
 }