v1.8.2

Release Note

v1.8.2 fixes a problem in the app-side mempool (mempool.type = app). A specially crafted transaction could disrupt nodes running that mempool. It could also cause node operators to disagree about the result of a block that contains such a transaction.

Who is affected

• Validators and full nodes running the app-side mempool are directly exposed.
• All validators must upgrade, because the fix includes a change to how block transaction results are computed.

What changed

• The mempool's transaction admission, gossip, and recheck paths are hardened so that one malformed transaction can no longer affect the node.
• Block execution results no longer depend on each node's local mempool configuration.
• New telemetry counters (cronos_mempool_panic_*) and rate-limited error logs flag any recovered failure in the mempool.

Upgrade instructions

This is a rolling upgrade. You don't need a governance proposal or an upgrade height, and you don't need to change your config or migrate your store.

1. Download the v1.8.2 binary, or build it from the v1.8.2 tag.
2. Stop cronosd.
3. Replace the binary.
4. Start cronosd.
5. Check that the node is signing blocks and keeping up with the chain. cronosd version should print v1.8.2.