馃敀 CL8Y Guardian Protocol Upgrades AccessManager for Better Security Auditing

馃攼 Guardian Gets Upgrade

By CZodiac
Dec 1, 2025, 2:19 PM
twitter

CL8Y's Guardian Protocol has upgraded its AccessManager to AccessManagerEnumerable for improved security auditing.​

Key Changes:

  • Additional blockchain storage of account roles and target permissions
  • Enhanced reliability over event-based data access
  • Minimal gas cost increase (pennies) for significantly better auditability

Recent Security Improvements:

  • 60 roles revoked from inactive contracts and old admin wallets
  • Annual key rotation completed
  • Legacy permissions system audit finished

What's Next:

  • Two remaining security tasks before resuming CL8Y bridge development
  • Potential dashboard upgrade for auditing newer AccessManager systems
  • Initial CMM version may cause brief development pause

The upgrade prioritizes security and auditability over gas optimization, reflecting best practices for protocol management.​

Sources

After an audit of ecosystem permissions using the legacy "access enumerable" permissioning system, 60 roles have been revoked. These primarily fit into two categories: (1) Old contracts/dapps that are no longer active and (2) Previous manager/admin wallets that are no longer in

2
Reply

CL8Y's Guardian Protocol has had its AccessManager upgraded to a more easily auditable AccessManagerEnumerable. The main difference is additional storage in blockchain state of what accounts have been granted what roles, and which targets have roles assigned to their methods.

8
Reply
Read more about CZodiac

馃敡 Technical Discovery Delays CL8Y Bridge V1 Launch

The CL8Y Bridge V1 release faces a 1-2 day delay due to a critical technical discovery during end-to-end testing. **Key Technical Challenge:** - Crosschain address encoding proved problematic with ASCII encoding causing storage byte size errors - Team discovered lack of quality multichain libraries supporting both USTC and EVM chains **Solution Implemented:** - New `multichain-rs` package added to handle address encoding across any chain - Package integrated across operators, cancelers, and E2E tests - Improves code quality and behavioral consistency project-wide **Testing Improvements:** - E2E testing migrated from scripts to Rust for local devnet terraclassic鈫旓笍EVM transfers - Migration addresses increasing complexity and crosschain hashing integration needs - Results: faster testing cycles and rapid bug discovery on devnet The delay represents a necessary technical foundation for reliable crosschain operations.

馃 TerraClassic Bridge Testing Migrates to Rust

馃 TerraClassic Bridge Testing Migrates to Rust

**TerraClassic<>EVM bridge development progresses with technical refinements** E2E testing for local devnet transfers between TerraClassic and EVM chains has been migrated from scripts to Rust. The migration addresses increasing complexity as developers uncovered unexpected technical issues during testing. **Key improvements:** - Faster E2E testing execution - Accelerated bug discovery on devnet - Enhanced integration tests for crosschain hashing **Current status:** Both Operator and Canceler services are functioning correctly on local devnet, properly releasing valid transfers and flagging invalid ones. **Next steps:** - Expand E2E test scenarios - Implement Prometheus and Grafana monitoring - Conduct red team tests and internal audits - Release to testnet The Rust migration represents a technical pivot to handle the bridge's growing complexity as it moves toward production readiness.

USTRIX Community Donates 2% of Supply to UST1CMM Treasury

USTRIX Community Donates 2% of Supply to UST1CMM Treasury

The USTRIX community has made a significant contribution to support USTR by donating 2% of the total USTRIX token supply to the UST1CMM treasury at [UST1CMM.com/treasury](http://UST1CMM.com/treasury). **Key Details:** - Donation facilitated by @BurnixToken - Represents community backing for USTR initiative - Follows milestone of 1M+ $USTC preregistrations on BSC and Terra Classic This donation demonstrates growing community support for the CMM (Community Market Maker) initiative and the goal of reaching $1 parity.

馃敡 CL8Y Bridge Gets Automated Testing Infrastructure

**Automated Testing Framework Deployed** Developer CF has released a new testing infrastructure for the CL8Y bridge that enables: - **LLM-written security tests** that automatically verify bridge functionality - **Red team attack simulations** including fuzz testing with thousands of attack vectors - **Fast deployment cycles** using a custom Terra Classic image The tool is now available at [github.com/PlasticDigits/localterra-cl8y](http://github.com/PlasticDigits/localterra-cl8y) and is being used in the cl8y-bridge-monorepo. **Testing Progress Update** While implementation moved ahead of schedule, testing and integration are currently behind. CF continues identifying and fixing bugs during end-to-end testing, particularly around operator transfer detection and activation. If testing isn't completed soon, the team may reduce features and shift to manual testing workflows. However, completing full E2E testing now will significantly accelerate future updates like bridge v2, which will include automatic token swaps and registration.

馃攳 CZodiac Treasury Dashboard Goes Live with Full Transparency

馃攳 CZodiac Treasury Dashboard Goes Live with Full Transparency

CZodiac has launched its [treasury dashboard](https://ust1cmm.com/treasury), providing real-time visibility into key financial metrics. **What's Available:** - USTR token issuance data - Complete treasury asset holdings - Smart contract addresses - Asset ratios and allocations The dashboard builds on the project's commitment to transparency, following their July 2025 Treasury Report which detailed assets, earnings, and treasury activity. Users can now independently verify the protocol's financial health and token backing through the public interface.

NFTDeFiFarmingStakingExchangesYield