⏱️ Timelocked-Upgrades | Mandatory 48-Hour Delay Window on WASM Replacement

[Sadeequ]

Impact Severity: High

Module: stellarflow-contracts/upgrades/timelock.rs

Description:

Enforce a 48-hour time-lock delay between proposing a WASM upgrade hash and executing the code replacement.

Technical Requirements:

• Register WASM hash and execution timestamp during propose_upgrade()

• Revert execute_upgrade() if 48 hours have not elapsed since proposal

[Ofuree]

@Ofuree has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi Chief Maintainer, I'd like to take this on if it's still unassigned.

I've read through the issue description and the linked discussion, and I have a clear picture of what the change involves. My plan would be to start by reproducing the current behavior locally so I'm working from evidence rather than assumption, then trace it back to the source.

From there I'd implement the change in the smallest reasonable scope, avoiding unrelated cleanup that would make the diff harder to review. I'll add tests covering both the described case and the obvious edge cases around it, and update the documentation if the change affects anything user-facing.

I'll follow the contribution guidelines in the repo and post an update here if I hit anything that changes my approach. If you'd prefer I outline the implementation before writing code, I'm happy to do that instead.

Let me know if I should go ahead.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Ofuree to this issue.

[drips-wave]

Congratulations, @Ofuree! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @Ofuree: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊