neox-rs v2.7.0 merges 185 Reth upstream commits, closes nine vulnerabilities
Alongside the Reth merge, the Neo X Geth oracle was synced to its newest baseline, and each MainNet and TestNet genesis recordsdata had been verified to match canonical bytes, preserving genesis block hashes. The replace ships with Linux and Home windows x86_64 binaries, every revealed with SHA-256 checksums. aarch64 artifacts weren’t constructed for this launch.
Safety remediation
9 cargo audit vulnerabilities had been resolved by means of dependency updates to quinn-proto 0.11.18 and rustls 0.23.46. The mission now reviews zero identified vulnerabilities from cargo audit.
The safety evaluate was carried out by an agent-authorized course of quite than an unbiased third-party audit, a distinction famous within the launch as a recorded danger acceptance.
DKG lifecycle hardening
4 modifications goal reliability within the DKG validator lifecycle, addressing failure modes noticed throughout prolonged validation runs:
- DKG preparations now survive canonical head advances, stopping beforehand stranded states.
- Rejected Submit operations restore the validator to Prepared state as a substitute of leaving the ready job orphaned.
- Share matching now makes use of spherical and combination international key collectively, eliminating false epoch-mismatch failures throughout regular block development.
- Signer shares are not re-installed on each block; the system hashes settled canonical inputs as a substitute of the canonical head.
These fixes deal with edge instances the place DKG state may turn out to be inconsistent throughout block boundaries, eventualities that will floor throughout sustained multi-round validation.
Validation and testing
The discharge candidate was validated by means of a 1,402-block G8 gate spanning heights 2,404 to three,805. The gate confirmed DKG spherical development from spherical one to 2, maintained an identical 128-byte combination dedication all through, and recorded zero reorgs and 0 transient RPC errors.
Envelope decryption was verified in each current-epoch and cross-epoch eventualities, with a saved round-one envelope efficiently decrypted and mined after the chain superior to spherical two. Fault testing included 60-second prover delays, pressured course of restarts, and missing-receipt share alternative. All 427 Neo X checks go, together with clear clippy and formatting checks.
Datadir compatibility was additionally confirmed. A v2.7.0 information listing and DKG keystore opened efficiently beneath v2.5.2, and the discharge binary loaded an current MainNet archive datadir.
Wanting forward
Full clean-datadir MainNet sync from genesis stays in progress following the discharge, although peer connection and the headers pipeline have been verified. neox-rs continues to function an unbiased Rust implementation of the Neo X protocol, offering shopper range alongside the Go-based Neo X Geth maintained by Bane Labs.
The discharge web page could be discovered on the hyperlink beneath:
https://github.com/R3E-Community/neox-rs/releases/tag/neox-v2.7.0
