v0.15.2 — validator parity, sync stability, defensive hardening

[oskarszoon]

v0.15.2 — validator parity, sync stability, defensive hardening

Released: 2026-06-15
GitHub: https://github.com/bsv-blockchain/teranode/releases/tag/v0.15.2
Container: ghcr.io/bsv-blockchain/teranode:v0.15.2

Upgrade priority

Recommended for all operators — large patch with MVP-4632 validator parity (alignment with sv-node finality semantics), significant legacy-sync stability fixes, defensive guards across blockassembly/UTXO/subtree paths, and security/dependency cleanup.

Highlights

Consensus correctness

• MVP-4632 pt.1 + pt.2: validator parity with sv-node — nLockTime / BIP68 / candidate-MTP finality alignment, fee/consolidation migrated to BDK, RPC absurd-fee guard (validator: align finality with sv-node (nLockTime/BIP68/candidate-MTP) + migrate fee/consolidation to BDK [MVP-4632 pt.1] #975, Feature/MvP-4632: validator parity + RPC absurd-fee guard #1013)
• Merkle proof + coinbase BUMP construction fixes for legacy blocks (Fix merkle proof calculation with proper coinbase replacement #993, Properly construct coinbase BUMP for legacy blocks with 2+ subtrees #952)
• Subtree NewIncompleteTreeByLeafCount allocation capped at policy max (fix(subtreevalidation): cap NewIncompleteTreeByLeafCount allocation at policy max #773)
• Reject duplicate spend claims inside UTXO store batches; non-pow2 final subtree allowed; OP_NUM2BIN constant correction (carried across the cycle)

Legacy sync stability

• Sync stalls from backpressure-triggered peer rotation + dropped orphan continuation fixed (fix(legacy): prevent sync stalls from backpressure-triggered peer rotation and dropped orphan continuation #1067)
• Block-originated transactions no longer announced to legacy peers (fix(legacy): never announce block-originated transactions to legacy peers #1073)
• In-block parent resolution at candidate height during legacy subtree validation (fix(legacy): resolve in-block parents at candidate height during legacy subtree validation #1065)
• Phantom-id sync wedge: idempotent block-id assignment per hash (fix(blockchain): assign block ids idempotently per hash to prevent phantom-id sync wedge #1043)
• Duplicate peer registration that can wedge sync removed (fix(legacy): remove duplicate peer registration that can wedge sync #946)
• Auto-detect v2 txmeta wire format for compatibility (fix(legacy/netsync): auto-detect v2 txmeta wire format #954)

Performance

• Aerospike client metrics stopped enabling by default (fix(aerospike): stop enabling client metrics (#1001) #1003)
• UTXO encode-side allocations eliminated in store Create path (perf(utxo): eliminate encode-side allocations in the store Create path (#1002) #1011)
• SQL fast-path for GetBlockInChainByHeightHash on on_main_chain (perf(blockchain/sql): fast-path GetBlockInChainByHeightHash on on_main_chain (#1018) #1022)
• BDK script validation skipped for trusted legacy IBD blocks (perf(validator): skip BDK script validation for trusted legacy IBD blocks #951)
• Subtree-validation hot-path allocations reduced; pointer-backed txmetacache backend (perf(subtree-validation): cut hot-path allocations on cache miss and meta serialization #902, perf(txmetacache): pointer-backed cache backend + interface dispatch #915)
• Blockassembly: pooled subtree leaf buffer + DoS-bound deserializer; reorg parallel bulk ops (perf(blockassembly): pool subtree leaf buffer + DoS-bound the deserializer #959, perf(subtreeprocessor): optimize reorg with parallel bulk operations #526)
• Kafka producer no longer waits up to 1s/message on busy topics (p99 7s → 22ms) (fix(kafka): stop producer waiting up to 1s per message on busy topics (p99 7s → 22ms) #894)
• Blockchain SQL main-chain fast-path for block locator builder (perf(blockchain): main-chain fast-path for block locator builder (#1021) #1023)
• Pruner cuckoo filter skips already-pruned parent updates (perf(pruner): skip already-pruned parent updates using an in-memory cuckoo filter #875)

Stability / defensive

• Block-assembly hang prevention (Start, GetTransactionHashes, ErrChan shutdown deadlock) (blockassembly: prevent Start hanging on pre-ready gRPC failures #940, blockassembly: make GetTransactionHashes context-aware and prevent hanging GetBlockAssemblyTxs #939, fix(blockassembly): guard subtree worker ErrChan send against shutdown deadlock #1028)
• Race / atomicity fixes (DiskTxMap.bytesWritten, currentSubtree.Load, subtreeprocessor newSubtreeChan) (fix(blockassembly): make DiskTxMap.bytesWritten access atomic #1029, fix: replace unsafe currentSubtree.Load().Length() with channel-synce… #641)
• Kafka final-batch drain on producer Stop; per-partition fan-out + sticky-partitioner producer keys (fix(kafka): drain the final buffered batch on async producer Stop #1027, fix(kafka): per-partition fan-out + sticky-partitioner producer keys #895)
• UTXO/aerospike: clear locked flag on pagination records when mining; stop caller-side goroutine/connection leak in batchers (fix(utxo/aerospike): clear locked flag on pagination records when mining (#1037) #1039, fix(utxo/aerospike): stop caller-side goroutine/connection leak in batchers #1025)
• P2P broadcast goroutines capped with bounded semaphore (fix(p2p): cap broadcast goroutines with bounded semaphore #775)
• Untrusted-input bounds: UTXO count/script length, subtree-list allocation, both with fuzz coverage (fix(utxopersister): bound allocations on untrusted UTXO count/script length + fuzz #1004, fix(model): bound subtree-list allocation on untrusted block parse + fuzz #1005)
• Catchup transient errors treated as incomplete, not invalid (fix(blockvalidation): treat transient catchup errors as incomplete, not invalid (#1031) #1036)

Features

• Asset service rate limiting + peer authentication + request visibility (feat: add asset service rate limiting, peer authentication and request visibility #643)
• Asset HTTP bulk UTXO lookup (POST /api/v1/utxos) (feat(asset/http): POST /api/v1/utxos bulk lookup + drop redundant tx fetch on GetUTXO #950)
• Asset on-demand subtree-data admission control + 503/Retry-After (feat(asset): on-demand subtree-data admission control + 503/Retry-After #896)
• Adaptivefetch subtreeData fetch gate, armed on FSM RUNNING (feat(adaptivefetch): subtreeData fetch gate, armed on FSM RUNNING #745)
• P2P advertises fee policy in node_status (feat(p2p): advertise fee policy in node_status message #943)
• Rewind blockchain CLI (Added rewind blockchain CLI #728)
• Pruner drain mode for outpoint batcher (off by default) (Add opt-in drain mode for the outpoint batcher (off by default) #865)
• Dashboard: light theme, Network Transactions chart presets, peer catchup row data, raw miner tag toggle (Light Theme #790, feat(dashboard): add "All" preset + range-based bucketing for Network Transactions chart #913, fix(dashboard): peer catchup row-data lookup + FSM transitions single source (#982) #1015, toggle to allow raw display of miner tag as per WOC #441)

Security

• Credentials redacted in Settings and aerospike debug logs (fix(security): redact credentials in Settings and aerospike debug logs #927)
• CodeQL code-scanning alerts resolved (fix(security): resolve open CodeQL code-scanning alerts #1016)
• Dependency bumps for vulnerabilities (svelte v5 + kit 2.61.x, s3, containerd/v2, moby/buildkit, minor versions) (chore(deps): bump svelte to v5 + kit to 2.61.x for vulnerability fixes #968, chore(deps): bump s3 to v1.97.3 + containerd/v2 to v2.2.4 #984, deps: moby/buildkit v0.28+ upgrade via testcontainers-go v0.42 migration (closes #64, #65) #935, chore(deps): bump minor versions for vulnerability fixes #925)

Known issues

None.

Full changelog