Ratatoskr Core v1.0.5
Security & stability hardening release. Recommended for all users. This is not a hard fork and changes no consensus rules — it is fully compatible with v1.0.3 and v1.0.4, so upgraded and non-upgraded nodes stay on the same chain. Upgrade whenever convenient; there is no block deadline.
v1.0.5 supersedes v1.0.4 and v1.0.3 for all platforms (Linux, Windows, macOS Intel + Apple Silicon).
Should I upgrade?
- Masternode, seed, and full-node operators — yes, please upgrade. This release closes a number of remote denial-of-service and memory-exhaustion vectors that matter most for always-on, publicly reachable nodes.
- Miners & regular wallet users — recommended, no urgency. Includes a fix for a 100% CPU condition plus general stability improvements.
Because there is no consensus change, no reindex and no re-registration is required.
What's changed
Networking & CPU
- Fixed a 100% CPU busy-loop in the socket handler that could occur when a peer's receive buffer was paused — the root cause behind high idle-CPU reports on some nodes.
- Penalize peers that send oversized
notfoundmessages; throttle abusive governance-sync requests.
Denial-of-service / memory hardening (LLMQ · DKG · governance · sporks)
A broad sweep that bounds untrusted network input so a malicious peer can no longer drive a node into excessive memory or CPU use:
- Bounded the pending recovered-signature queue (remote out-of-memory protection).
- Hardened DKG message intake against unauthenticated retention and crashes; bounded contribution-blob size.
- Capped per-peer signing-share sessions and corrected session accounting and expiry.
- Early bail-out on oversized
QSIGSHARESINV/QGETSIGSHARES; de-duplicatedQRINFObase blocks. - Bounded the governance-sync bloom-filter hash count and spork signature-vector allocation.
- Added bounded-vector deserialization primitives used across the above fixes.
- Fixed a signed-integer overflow in CoinJoin priority/timeout, and a debug-log loop bound in commitment checking.
ChainLocks
- Skip collecting block txids during initial block download to prevent unbounded memory growth.
- Serialize chain-tip signing to remove a concurrent-signing race.
Masternodes
- IPv6 masternodes now operate end-to-end (carried from v1.0.4): active-MN address validation accepts IPv6. IPv4 masternodes are unaffected.
- Ratatoskr-Qt → Masternodes tab: the collateral column now shows the correct 7,500 (Regular) / 30,000 (Evo) amounts.
- New —
contrib/masternode/mn-self-revive.sh(v3): an optional watchdog that automatically revives a PoSe-banned masternode using the node's own operator key (which never leaves the box). It auto-detects Regular vs Evo, self-corrects, and watches for crash-loops and stalls. See the README in that directory.
Peer discovery
- Added additional IPv4 and IPv6 seed nodes for more reliable bootstrapping on fresh installs.
Upgrade instructions
- Stop your wallet / daemon (
ratatoskr-cli stop, or quit Ratatoskr-Qt). - Replace the binaries with the v1.0.5 build for your platform.
- Restart. No reindex or re-registration is needed.
Masternode operators: a plain binary swap is sufficient — your registration and collateral are unaffected.
Downloads
| Platform | File |
|---|---|
| Linux x86_64 | ratatoskr-1.0.5-x86_64-linux-gnu.tar.gz |
| Windows 64-bit | ratatoskr-1.0.5-win64.zip (+ setup installer) |
| macOS (Intel) | ratatoskr-1.0.5-x86_64-apple-darwin.tar.gz |
| macOS (Apple Silicon) | ratatoskr-1.0.5-arm64-apple-darwin.tar.gz |
Verify your download
sha256sum -c SHA256SUMS
gpg --verify SHA256SUMS.asc SHA256SUMS
All binaries are reproducibly built with GNU Guix and the checksums are signed with the releases@enchantedforestdefi.com key.