To publicly communicate advisories about serious bugs in CosmWasm
This repository maintains a public index of security advisories for CosmWasm, a framework for building smart contracts on blockchain systems. The project documents serious bugs discovered in CosmWasm's core components—including the virtual machine that executes contracts, the integration layer into blockchain nodes, and the standard libraries used by contracts—organizing them by year and severity level with cross-references to official security channels. The advisories cover the CosmWasm ecosystem built in Rust, encompassing projects like cosmwasm-vm, wasmvm, wasmd, and related libraries, and the repository serves as an authorized communication channel to inform blockchain projects running these systems about critical issues before public disclosure.