Skip to content

Security: Block Size Resource Protection#2956

Closed
MichaelSovereign wants to merge 95 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/block-size-limit
Closed

Security: Block Size Resource Protection#2956
MichaelSovereign wants to merge 95 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/block-size-limit

Conversation

@MichaelSovereign
Copy link
Copy Markdown
Contributor

Summary

This PR hardens the block production process by enforcing a maximum size limit on the block body.

Changes

  1. Size Enforcement: Implemented a 2MB limit on the serialized JSON body of newly produced blocks. This prevents the creation of oversized blocks that could lead to memory exhaustion, slow synchronization, or disk space exhaustion across the network nodes.
  2. Fail-Fast Logic: If a block exceeds the size limit (due to too many transactions or attestations), production is aborted with a clear error log, allowing the node operator to investigate the cause.

Closes #6460

@MichaelSovereign MichaelSovereign requested a review from Scottcjn as a code owner May 2, 2026 06:09
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related tests Test suite changes size/XL PR: 500+ lines labels May 2, 2026
@Scottcjn
Copy link
Copy Markdown
Owner

Scottcjn commented May 3, 2026

Closing as part of Tier 0 hard-ban cleanup — see #3074 / #3104 / #3169 for the documented incident chain. All MichaelSovereign PRs are closed unread per the Tier 0 contract. No review path; no future PRs from this account will be processed. (See feedback_michaelsovereign_tier0_2026-05-02.md.)

@Scottcjn Scottcjn closed this May 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related size/XL PR: 500+ lines tests Test suite changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants