Skip to content

v4.5.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Jun 10:22
v4.5.0
5092099
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v4.5.0 is a security-hardening and stability release. All node operators and wallet users should upgrade promptly.

⚠️ Wallet users — one important one-time step

After upgrading, unlock your wallet once. This completes an important one-time security upgrade to how your wallet protects its data at rest. Upgrading the software alone is not enough — the one-time unlock is what applies the protection to an existing wallet.

If you have any reason to believe the machine holding your wallet may have been exposed (shared computer, cloud-synced wallet folder, lost/stolen device), consider moving your funds to a fresh wallet on a trusted machine after upgrading.

Seed / relay node operators

This release includes an additional one-time key-file step for seed operators. See the upgrade notes below.

What's new

Stability

  • Fixes a memory-growth issue that could cause DilV miner/user nodes to shut down on their own after ~1–2 days. Affected nodes grew in memory usage over time until the operating system stopped them. v4.5.0 removes the root cause. If you run a DilV miner or node, this release is strongly recommended. (The same fix is applied to DIL as good hygiene.)
  • Until you upgrade, running your node under an auto-restart supervisor (e.g. systemd Restart=always) keeps it available.

Wallet

  • Hardened how wallets protect sensitive data at rest. Encrypted wallets now apply stronger protection to their underlying secrets. Existing encrypted wallets complete this upgrade the first time you unlock after updating (see the one-time step above).
  • Browser / hosted wallet hardening — the web wallet applies the same stronger at-rest protection and tightens its handling of wallet data.
  • The DilV node-served wallet page now connects correctly (a fix carried forward from the prior hotfix line).

Network / node hardening

  • Consensus validation hardening for transaction signature checking under concurrent load.
  • --public-api operators: hardened the public HTTP surface (request handling, rate-limiting, and which pages are served) so a publicly-exposed node is more robust against abuse.
  • Seed operators: hardened how the seed-attestation key is stored and handled, with a one-time key-file step on first run after upgrade.

Upgrade notes

Everyone

  1. Download the v4.5.0 package for your platform (see assets below).
  2. Replace your existing binary / package and restart your node.

Wallet users

  1. Unlock your wallet once after upgrading to apply the one-time at-rest security upgrade.

Seed / relay node operators

  1. On first run after upgrade, the node performs a one-time seed-attestation key-file step automatically. No action is required beyond a normal restart; review your node log on first start to confirm a clean startup.
  2. Roll restarts one node at a time, keeping at least 3 of 4 seeds up at all times.

Platforms

v4.5.0 ships both chains (DIL + DilV) across Linux x64, macOS (x64 + arm64), and Windows x64 — see the attached assets below.

Thanks

Thank you to the security review process and reviewers whose work produced the hardening in this release. A full technical write-up will follow after the upgrade window.

Assets 10
Loading