wormhole-foundation / native-token-transfers

Open, flexible, and composable framework for transferring tokens across blockchains without liquidity pools
Other
22 stars 40 forks source link

solana: Warn when the upgrade authority is not revoked following deployment #441

Open johnsaigle opened 7 months ago

johnsaigle commented 7 months ago

Some NTT implementations may wish to make the program immutable, for example in the case of a governance program that itself can update an NTT deployment.

To do this, the upgrade authority of the Solana contract should be revoked (set to None).

The configuration-verification tooling should warn when that he upgrade authority should be revoked. If an integrator wants a mutable program, they can ignore the warning.