Submitted by berndartmueller, also found by 0xAlix2
H-06: https://code4rena.com/audits/2025-02-initia-cosmos/submissions/F-11
In the new mitigation, a gas limit must be provided when calling execute_cosmos or execute_cosmos_with_options in Solidity. This gas limit is pre-charged in the precompile, which makes sure that theres sufficient gas.
During message dispatching, this gas limit is used in a local gas meter to restrict the messages gas.
However, this local gas meter (ctx) is only used by the main handler call. The callback EVM call is still using the parentCtx (see here) which is not using the local gas meter, rather the parent gas meter.
This was mentioned in the original F-11 submission.
context.go#L600
