v1.3.3

Version 1.3.3 of the blocklist client requires configuration changes. Operators MUST update the blocklist client before June 1st.

Update: Chainalysis has recently extended the deprecation date for its sanctions API from June 1st to July 31st. Therefore, sBTC operators now have additional time to upgrade to this release.

Highlights • Images • Upgrade Instructions

✨ Highlights

• Add support for running sanctions checks against a file that is periodically polled in the blocklist client
• We now cap reclaim script lengths to 2048 bytes

🐳 Images:

Important

Always use immutable image tags - the image digests are provided below. Verify the attestation of these images using this guide.

We publish our images on GitHub Container Registry.

sBTC Signer

ghcr.io/stacks-sbtc/sbtc:signer-v1.3.3@sha256:955a9ee0d28466c0fc2c88c7ba74f69c7121e8679ff7142469da552e565421b7

• 🏷️ stacks-sbtc/sbtc:signer-v1.3.3
• 🔒 sha256:955a9ee0d28466c0fc2c88c7ba74f69c7121e8679ff7142469da552e565421b7

Blocklist Client

ghcr.io/stacks-sbtc/sbtc:blocklist-client-v1.3.3@sha256:c11ead728f25796498ca8f5a35185f2491020fb219f020998fa381d7503df363

• 🏷️ stacks-sbtc/sbtc:blocklist-client-v1.3.3
• 🔒 sha256:c11ead728f25796498ca8f5a35185f2491020fb219f020998fa381d7503df363

🛠️ Upgrade Instructions:

1. Stop your sBTC signer
2. Update your sBTC and blocklist client images as specified above
3. Update your blocklist client configuration in the compose file (or equivalent):
   • Remove from the blocklist client environments BLOCKLIST_CLIENT_RISK_ANALYSIS__API_KEY, BLOCKLIST_CLIENT_RISK_ANALYSIS__API_URL and BLOCKLIST_CLIENT_RISK_ANALYSIS__ASSESSMENT_METHOD
   • Add the new sanctions file config to the blocklist client environments:

     BLOCKLIST_CLIENT_SANCTIONS__LOCAL_PATH: "/etc/blocklist-client/sanctions.txt"
     BLOCKLIST_CLIENT_SANCTIONS__URL: "https://sbtc-emily.com/sanctions"
     BLOCKLIST_CLIENT_SANCTIONS__HEADER__KEY: "x-api-key"
     BLOCKLIST_CLIENT_SANCTIONS__HEADER__VALUE: *EMILY_API_KEY
     

     The local path is for a file already baked into the blocklist image.
4. Restart your sBTC signer and blocklist client

📝 What's Changed

Local Breaking Changes ⚠️

• feat: add sanction file config to blocklist client by @matteojug-stacks in #2051

Other Changes

• fix: validate for op successx opcodes in reclaim scripts by @djordon-stacks in #2028
• feat: cap reclaim script length by @djordon-stacks in #2030
• chore: bump contract dependencies by @matteojug-stacks in #2026
• chore: bump python dependencies by @matteojug-stacks in #2024
• chore: update the PR description template by @djordon-stacks in #2034
• chore: bump stacking dependencies by @matteojug-stacks in #2031
• feat: emily to return deposits with any max fee by @djordon-stacks in #2033
• fix: reject bogus bitcoin fee rates by @djordon-stacks in #2023
• feat: no more panicking polynomial commitments by @djordon in #1968
• feat: add file-based sanctions to blocklist client by @matteojug-stacks in #2052
• feat: emily sanctions passthru by @matteojug-stacks in #2053
• feat: bake sanctions file in nightly build by @matteojug-stacks in #2062
• feat: bake sanctions file in release blocklist client by @matteojug-stacks in #2063

Full Changelog: v1.3.2...v1.3.3