Skip to content

Ratatoskr Core v1.0.5

Latest

Choose a tag to compare

@NexusAther NexusAther released this 19 Jul 19:08

Ratatoskr Core v1.0.5

Security & stability hardening release. Recommended for all users. This is not a hard fork and changes no consensus rules — it is fully compatible with v1.0.3 and v1.0.4, so upgraded and non-upgraded nodes stay on the same chain. Upgrade whenever convenient; there is no block deadline.

v1.0.5 supersedes v1.0.4 and v1.0.3 for all platforms (Linux, Windows, macOS Intel + Apple Silicon).

Should I upgrade?

  • Masternode, seed, and full-node operators — yes, please upgrade. This release closes a number of remote denial-of-service and memory-exhaustion vectors that matter most for always-on, publicly reachable nodes.
  • Miners & regular wallet users — recommended, no urgency. Includes a fix for a 100% CPU condition plus general stability improvements.

Because there is no consensus change, no reindex and no re-registration is required.

What's changed

Networking & CPU

  • Fixed a 100% CPU busy-loop in the socket handler that could occur when a peer's receive buffer was paused — the root cause behind high idle-CPU reports on some nodes.
  • Penalize peers that send oversized notfound messages; throttle abusive governance-sync requests.

Denial-of-service / memory hardening (LLMQ · DKG · governance · sporks)

A broad sweep that bounds untrusted network input so a malicious peer can no longer drive a node into excessive memory or CPU use:

  • Bounded the pending recovered-signature queue (remote out-of-memory protection).
  • Hardened DKG message intake against unauthenticated retention and crashes; bounded contribution-blob size.
  • Capped per-peer signing-share sessions and corrected session accounting and expiry.
  • Early bail-out on oversized QSIGSHARESINV / QGETSIGSHARES; de-duplicated QRINFO base blocks.
  • Bounded the governance-sync bloom-filter hash count and spork signature-vector allocation.
  • Added bounded-vector deserialization primitives used across the above fixes.
  • Fixed a signed-integer overflow in CoinJoin priority/timeout, and a debug-log loop bound in commitment checking.

ChainLocks

  • Skip collecting block txids during initial block download to prevent unbounded memory growth.
  • Serialize chain-tip signing to remove a concurrent-signing race.

Masternodes

  • IPv6 masternodes now operate end-to-end (carried from v1.0.4): active-MN address validation accepts IPv6. IPv4 masternodes are unaffected.
  • Ratatoskr-Qt → Masternodes tab: the collateral column now shows the correct 7,500 (Regular) / 30,000 (Evo) amounts.
  • New — contrib/masternode/mn-self-revive.sh (v3): an optional watchdog that automatically revives a PoSe-banned masternode using the node's own operator key (which never leaves the box). It auto-detects Regular vs Evo, self-corrects, and watches for crash-loops and stalls. See the README in that directory.

Peer discovery

  • Added additional IPv4 and IPv6 seed nodes for more reliable bootstrapping on fresh installs.

Upgrade instructions

  1. Stop your wallet / daemon (ratatoskr-cli stop, or quit Ratatoskr-Qt).
  2. Replace the binaries with the v1.0.5 build for your platform.
  3. Restart. No reindex or re-registration is needed.

Masternode operators: a plain binary swap is sufficient — your registration and collateral are unaffected.

Downloads

Platform File
Linux x86_64 ratatoskr-1.0.5-x86_64-linux-gnu.tar.gz
Windows 64-bit ratatoskr-1.0.5-win64.zip (+ setup installer)
macOS (Intel) ratatoskr-1.0.5-x86_64-apple-darwin.tar.gz
macOS (Apple Silicon) ratatoskr-1.0.5-arm64-apple-darwin.tar.gz

Verify your download

sha256sum -c SHA256SUMS
gpg --verify SHA256SUMS.asc SHA256SUMS

All binaries are reproducibly built with GNU Guix and the checksums are signed with the releases@enchantedforestdefi.com key.