Cross-Chain (IBC) randomness
An example of how to use Secret VRF to fetch random numbers via IBC between Secret and Juno testnet
This documentation serves as a demo on how to send cross-chain random numbers from Secret Network testnet to Juno testnet via IBC. The demo repository can be cloned here.
The design system we’ll be using consists of one Secret contract and two Juno contracts:
- Secret Proxy Contract: A Secret contract that requests a random number and specifies the callback information for the response.
- Juno Proxy Contract: A Juno contract that sends an IBC message to fetch the random number from the Secret Network proxy contract.
- Juno Consumer Contract: A Juno contract that consumes the random numbers generated by the Secret proxy contract.
The Secret proxy contract will produce a different, non-predictable number for each request it receives. You can read more about random numbers on Secret Network in the technical specification of this feature.
See here for a diagram of the system architecture:

Secret VRF IBC smart contract architecture
There are two steps to configuring your environment:
- 1.Upload and instantiate the three smart contracts
- 2.Configure an IBC relayer to properly relay packets between your chains of choice (for this demo we will use Hermes).
To begin, let's upload and instantiate the Secret Network proxy smart contract with Secret.js. Clone the repository, then
cd
into node
. Run npm i
to install the dependencies. Then, update the file index_secret.js
to include your wallet mnemonic like so:const wallet = new Wallet("your wallet words go here");
Next, upload and instantiate the smart contract. If you need guidance doing so, refer to the docs here. Or, simply use the Secret smart contract that has already been instantiated here:
secret1rmccmgwf6zf2kawrv7h5faq3tx883epz7ty6tj
Now that we have our Secret proxy contract, let's upload and instantiate the two Juno smart contracts.
You can configure the consumer contracts for any IBC-compatible chain of your choosing. However, for this demo will be uploading and instantiating our contracts on Juno.
First, download the wasm files for the two Juno contracts:
To upload the contracts to Juno testnet, you need Juno testnet tokens in your wallet. Visit faucet.reece.sh/uni-6/<your Juno address> to get a payment
To add a wallet to junod, run the following your terminal:
junod keys add <your wallet name>
Upon successful upload, you will see a success message, along with a transaction hash and code ID. Note the code ID for both contracts, as you will need this to instantiate the smart contracts on Juno.
Next, instantiate the Juno proxy contract by running the following:
junod tx wasm instantiate <codeId> '{"init": {}' --label 'juno-proxy' --no-admin --from <your juno wallet> --gas 200000 -y --chain-id uni-6 --node https://uni-rpc.reece.sh:443 --gas-prices 0.025ujunox
Then, to query that the instantiation was successful and find the contract address, query the returned
txHash
with:junod q tx <txHash> --node https://uni-rpc.reece.sh:443
You should see the
contract_address
variable. Mine is juno1ecl4r6dhhlluz56jqm24t6ss7s9gr6d0pu2lumvpwnnk56gnw7gqpz8m6c
🙌Now, simply repeat the process for the Juno Consumer contract. The only difference is that the instantiation message is slightly modified because it needs to include the other Juno contract address that we just instantiated as a pointer:
junod tx wasm instantiate <your code id> '{"init": {"rand_provider": { "address": <your juno contract address>, "code_hash": ""}}}' --label 'juno-consumer' --no-admin --from <your wallet name> --gas 300000 -y --chain-id uni-6 --node https://uni-rpc.reece.sh:443 --gas-prices 0.025ujunox
My contract address is
juno1z4n39vfckeuv6udx6f4e6h8d5mt3xucuwdjs6lk2ets60ejruseqnpt00k
🙌Now that you have successfully uploaded and instantiated the three smart contracts, let's configure Hermes Relayer to relay packets between Secret test and Juno testnet.
Then, configure Hermes by navigating to the folder
.hermes
and opening the config.toml
file.If you're on a Mac, you may need to press
Command + Shift + Period
to see hidden files, such as the .hermes
folder.To relay packets between Secret Network testnet and Juno testnet, update the
config.toml
file with the configuration seen here.Next, configure Gaiad Manager by navigating to the folder
.gm
, and then update the gm.toml file with the configuration seen here.If you are using Hermes Relayer, make sure your paths are set up correctly in both the
config.toml and gm.toml
. See the image below for reference:
gm.toml configuration paths
Now let's relay packets! 🎉
Now it's time to execute our IBC smart contracts and relay packets between Juno testnet and Secret testnet. If you run into any issues at this step, refer to the hermes docs for guidance, and also ask questions in the Secret Network developer discord chat!
- 1.Start Gaiad Manager
gm start
- 2.Create clients
hermes create client --host-chain pulsar-3 --reference-chain uni-6
hermes create client --host-chain uni-6 --reference-chain pulsar-3
- 3.Create connections
hermes create connection --a-chain uni-6 --a-client 07-tendermint-468 --b-client 07-tendermint-235
In place of
07-tendermint-235 and 07-tendermint-468
, use the client IDs returned to you in your terminal.Upon success, you should see a message like so:

Now that a channel is established, let's create a channel identifier, which links the Juno proxy contract to the Secret proxy contract. Note that the ports listed below are the addresses of the Juno and Secret proxy contracts which we instantiated earlier.
- 4.Create channel identifier
hermes create channel --a-chain uni-6 --a-connection connection-612 --a-port wasm.juno1ecl4r6dhhlluz56jqm24t6ss7s9gr6d0pu2lumvpwnnk56gnw7gqpz8m6c --b-port wasm.secret1rmccmgwf6zf2kawrv7h5faq3tx883epz7ty6tj
After successfully creating a channel identifier, we can relay packets! Let's start Hermes and then execute the Juno consumer contract to send a random network from Secret Network to Juno 🤯
- 5.Start Hermes (open a new terminal window and then run the following)
hermes start
Hermes will scan the chain for all clients, connections and channels. This might take some time, which is normal. If you want to specify which channels it scans, update the hermes config file to include the following at the end of the chain configuration (but with your channel info):
[chains.packet_filter]
policy = 'allow'
list = [
['transfer', 'channel-495'],
]
After Hermes has started running, execute the Juno consumer contract to return a random number from Secret via IBC:
junod tx wasm execute --from <your wallet name> juno1z4n39vfckeuv6udx6f4e6h8d5mt3xucuwdjs6lk2ets60ejruseqnpt00k '{"do_something": {}}' --gas 300000 -y --chain-id uni-6 --node https://uni-rpc.reece.sh:443 --gas-prices 0.025ujunox
Then, query the smart contract to see if it returned the random number:
junod query wasm contract-state smart juno1z4n39vfckeuv6udx6f4e6h8d5mt3xucuwdjs6lk2ets60ejruseqnpt00k '{"last_random": {}}' --chain-id uni-6 --node https://uni-rpc.reece.sh:443
Upon successful execution, a random number will be returned:

Congrats! You now have the tools to implement cross-chain random number generation via IBC. By following these steps, you can facilitate and execute smart contracts and relay packets between Juno and Secret, as well as any other IBC-compatible chain, expanding the possibilities for blockchain interoperability and fostering new avenues for decentralized application development.
If you are brand new to IBC, here is a quick crash course!
To connect two CosmWasm contracts over IBC you must establish an IBC channel between them. The IBC channel establishment process uses a four way handshake. Here is a summary of the steps:
- 1.
OpenInit
Hello chain B, here is information that you can use to verify I am chain A. Do you have information I can use? - 2.
OpenTry
Hello chain A, I have verified that you are who you say you are. Here is my verification information. - 3.
OpenAck
Hello chain B. Thank you for that information I have verified you are who you say you are. I am now ready to talk. - 4.
OpenConfirm
Hello chain A. I am also now ready to talk.
Once the handshake has been completed a channel will be established that the ibc messages may be sent over. In order to do a handshake and receive IBC messages your contract must implement the following entry points (which are implemented in our proxy contract):
- 1.
ibc_channel_open
- Handles theOpenInit
andOpenTry
handshake steps. - 2.
ibc_channel_connect
- Handles theOpenAck
andOpenConfirm
handshake steps. - 3.
ibc_channel_close
- Handles the closing of an IBC channel by the counterparty. - 4.
ibc_packet_receive
- Handles receiving IBC packets from the counter-party. - 5.
ibc_packet_ack
- Handles ACK messages from the counter-party. - 6.
ibc_packet_timeout
- Handles packet timeouts.
Last modified 27d ago