Mainnet consensus-safety update
Gravity v1.8.1 is a consensus-sensitive hotfix for an EIP-7702 nonce interaction that can halt block execution. Mainnet operators should deploy v1.8.1 instead of v1.8.0 and keep the mixed-version rollout window as short as possible.
The Alpha hardfork schedule is unchanged:
- Beijing: 2026-07-27 13:00:00 UTC+08:00
- UTC: 2026-07-27 05:00:00 UTC
- Unix timestamp:
1785128400 - Mainnet chain ID:
127001
This release does not change alphaTime, pragueTime, or the other Alpha execution rules introduced in v1.8.0.
What's changed
Temporary EIP-7702 lockdown
The bundled gravity-reth revision moves from b49b4864aeaa3c35c6871a77d7133bb9486edbf1 to 807c161584b5c785b692946e53d31ddc89599086.
This revision enables the compile-time EIP7702_LOCKDOWN consensus switch. While it is active, the deterministic pre-execution transaction filter drops:
- Every EIP-7702 type-4 (
SetCode) transaction. - Every transaction sent from an account that is already delegated through EIP-7702.
- Every transaction sent to an account that is already delegated through EIP-7702.
The lockdown prevents a delegated account's execution-time CREATE nonce increment from leaving a later transaction in the same ordered block with a stale nonce and reaching the executor as NonceTooLow. Filtered transactions use the existing deterministic invalid-transaction path, so all upgraded nodes exclude the same transactions before execution. Transactions that do not involve EIP-7702 delegated accounts are unaffected.
Validation
- Adds unit coverage for all three lockdown rules in both enabled and disabled modes.
- Adds regression coverage for the audit #838 same-block nonce-halt shape.
- Adds a full pipeline test proving that the filtered block survives both serial and grevm execution.
- Keeps positive EIP-7702 delegation tests disabled while the lockdown ships.
Compatibility and operator notes
- Coordinated upgrade required: v1.8.0 and v1.8.1 can execute an affected ordered block differently. Validators and full nodes should not remain on mixed versions beyond the controlled rollout window.
- EIP-7702 is temporarily unavailable: new delegations are rejected, and transactions from or to existing delegated accounts are filtered while the lockdown is active.
- No runtime override: the switch is compiled into the binary because it changes consensus-visible execution. It cannot be changed independently with a CLI flag or environment variable.
- Future re-enable: EIP-7702 should only be re-enabled by a later coordinated release after the durable deterministic executor-skip path is ready.
- Alpha remains scheduled: all v1.8.0 Alpha hardfork behavior and the mainnet activation timestamp remain in effect.
Docker image
The release pipeline publishes:
docker pull ghcr.io/galxe/gravity_node:v1.8.1Dependency revision
gravity-reth:b49b4864aeaa3c35c6871a77d7133bb9486edbf1->807c161584b5c785b692946e53d31ddc89599086gravity-aptos: unchanged atb1f68dc85781ef0d28a568d9d64604b153be9d9e