Validating System Contracts

Validating System Contracts

System Contracts are proposed as MultiSigs to be executed with eosio authority. At a high level the verification steps are as follows

1. Build the right version of CDT

• Checkout with the appropriate tag
• Follow instructions under antelopeio/cdt

2. Get the source code for the system contracts.

• Look on github under VaultaFoundation/system-contracts
• Checkout with the appropriate tag
• Follow the README instructures to build

3. Run sha256sum

• Run on *.wasm and *.abi
• Verify with posted hash numbers in upgrade message
• Verify with sha256sum on data from setcode action in proposed action

4. Optional double check ABI

• Create ABI with dry-run command and create hash from output
• Pull ABI from proposed MSIG and verify sha256sum matches

Version Specific Instructions

• Technical Guide to Review and Approve System Contract v3.8.0