kona-host/v1.6.0

⚠️ This release is a critical security fix and is a required update for users.

Overview

This is a required release of kona-host. It fixes a fault-proof soundness bug (BLOBBASEFEE on post-Jovian blocks) and a host witness-fetch reliability bug, plus verifier hardening and interop proof groundwork. All operators should upgrade.

This release is required for Upgrade 19, the OP Stack upgrade that promotes kona-client to the primary fault proof program.

What's Changed

Soundness fix (required)

• Pin BLOBBASEFEE to 1 post-Jovian (#21328): the executor derived the EIP-4844 blob env from the parent header, but post-Jovian blobGasUsed carries the DA footprint — yielding BLOBBASEFEE > 1 once the parent footprint exceeded ~4.26M and diverging from the canonical chain (op-geth/op-reth pin it to 1), breaking dispute-game soundness. Now pinned to {excess_blob_gas: 0, blob_gasprice: 1} for Ecotone+.

Reliability

• Retry high-level witness fetches (#21269): debug_executePayload / optimistic re-execution hints are now serviced through the get_preimage retry loop instead of being fetched once and falling back to debug_dbGet (unimplemented by op-reth) — so a transient error is retried instead of being terminal.

Hardening

• Bound pre-refund EVM gas per block (#21250): caps the pre-refund sum of evm_gas_used at MAX_GAS_LIMIT (500M) in OpBlockExecutor, which the fault proof verifies through.
• Reject zero elasticity in EIP-1559 params (#21292): rejects a zero elasticity/denominator in block extraData, matching op-geth/op-reth validation.
• Embed superchain-registry dependency sets (#20837): interop proofs now embed real depsets instead of an empty list that forced an "insecure in production" host-preimage fallback.

Interop / SDM proof support

• Validate SDM PostExec in native single-chain proofs (#21034).
• Interop activation as an L2CM bundle (#20723): interop hardfork activation in proofs now applies the L2CM NUT bundle instead of hardcoded deployment txs.

Other

• Align spec/fork resolution across kona/op-revm/alloy (#21291): consistent Granite/Karst/Lagoon(Interop) spec resolution with conformance guards. Does not affect execution for currently-proven chains.
• Lagoon hardfork rename (#21105) — no wire-format change.
• Generic receipt builder (#21275) — executor generic over OpReceiptBuilder; OP path byte-for-byte identical.
• Embedded superchain-registry config bump (#21095).

Full Changelog: kona-host/v1.5.2...kona-host/v1.6.0

🚢 Docker Image:

• https://us-docker.pkg.dev/oplabs-tools-artifacts/images/kona-host:v1.6.0