x/ibcratelimiterext adds an independent, governance-managed operator whitelist for IBC rate-limiter operations. Packet enforcement remains the same as upstream ratelimiting middleware. The extension stores its own whitelist, lets governance update that whitelist through MsgUpdateParams, and lets whitelisted operators call rate-limiter mutation APIs.

​
Operation authorization

An address can operate the rate limiter if it can execute:
  • MsgAddRateLimit
  • MsgUpdateRateLimit
  • MsgRemoveRateLimit
  • MsgResetRateLimit
Authorization passes when either:
  1. The signer is the ratelimiting authority, normally governance authority.
  2. The signer is in the ibcratelimiterext whitelist.
Authority authorization is evaluated on the canonical decoded bech32 address, not raw input string casing.

​
Architecture

AreaBehavior
Independent whitelist modulex/ibcratelimiterext owns Params.whitelist, MsgUpdateParams, and QueryWhitelist.
Ratelimiter service overrideKeeps ratelimiting data plane, queries, and genesis, but overrides ratelimit.v1.Msg authorization.
Middleware stack v1transfer -> erc20 -> callbacks -> ratelimiting -> channel
Middleware stack v2transferv2 -> erc20v2 -> ratelimitingv2

​
Default genesis

{
  "ibcratelimiterext": {
    "params": {
      "whitelist": []
    }
  }
}
params.whitelist contains bech32 account addresses allowed to execute rate-limiter write operations through this extension. Default is empty, so only ratelimiter authority can operate those commands until whitelist entries are added. The upstream ratelimiting module has its own separate genesis in app_state.ratelimiting, including hour_epoch. ibcratelimiterext does not store or initialize those ratelimiting fields.

​
Query CLI

ctmd query ibcratelimiterext whitelist --node <rpc> --chain-id <chain-id>
ctmd query ibcratelimiterext list-rate-limits --node <rpc> --chain-id <chain-id>
ctmd query ibcratelimiterext rate-limit channel-0 --denom ibc/ABCDEF123 --node <rpc> --chain-id <chain-id>
ctmd query ibcratelimiterext rate-limits-by-chain osmosis-1 --node <rpc> --chain-id <chain-id>
ctmd query ibcratelimiterext list-blacklisted-denoms --node <rpc> --chain-id <chain-id>
ctmd query ibcratelimiterext list-whitelisted-addresses --node <rpc> --chain-id <chain-id>

​
Transaction CLI

Whitelist updates are authority-only: 
ctmd tx ibcratelimiterext update-params \
  --whitelist "c8...,c8..." \
  --from <gov-authority-wallet> \
  --chain-id <chain-id> \
  --node <rpc> \
  --gas auto --gas-adjustment 1.4 \
  --fees 5000ctm
Rate-limit write commands require either governance authority or a whitelisted operator: 
ctmd tx ibcratelimiterext add-rate-limit channel-0 ibc/ABCDEF123 \
  --max-percent-send 10 \
  --max-percent-recv 20 \
  --duration-hours 24 \
  --from <operator-wallet> \
  --chain-id <chain-id> \
  --node <rpc> \
  --gas auto --gas-adjustment 1.4 \
  --fees 5000ctm

ctmd tx ibcratelimiterext update-rate-limit channel-0 ibc/ABCDEF123 \
  --max-percent-send 15 \
  --max-percent-recv 25 \
  --duration-hours 24 \
  --from <operator-wallet> \
  --chain-id <chain-id> \
  --node <rpc> \
  --gas auto --gas-adjustment 1.4 \
  --fees 5000ctm

ctmd tx ibcratelimiterext remove-rate-limit channel-0 ibc/ABCDEF123 \
  --from <operator-wallet> \
  --chain-id <chain-id> \
  --node <rpc> \
  --gas auto --gas-adjustment 1.4 \
  --fees 5000ctm

ctmd tx ibcratelimiterext reset-rate-limit channel-0 ibc/ABCDEF123 \
  --from <operator-wallet> \
  --chain-id <chain-id> \
  --node <rpc> \
  --gas auto --gas-adjustment 1.4 \
  --fees 5000ctm