Reth team ships emergency patch for state root calculation bug

Submit
@gakonst
@gakonst

PSA on today's Reth / OP Reth releases A fix went out across the Reth ecosystem ensuring that all Reth-based nodes, DeFi bridges and state-proof backed systems are all safe. If you depend on Reth, please update to v.2.10.0, OP Reth v2.8.1, and Base version v1.5.3. We appreciate how quickly everyone moved to patch. This bug was identified by the Tempo team's fuzzing process, and Tempo is also patched. Reth’s legacy state root code had an edge case. For certain smart contract storage layouts, a carefully crafted transaction could make it produce the wrong state root. Reth’s block builder uses this legacy trie calculator on lower-end hardware and on OP Stack chains, so those setups were exposed. L2s like OP Stack chains or Base are unaffected because this could not impact their withdrawals system. Ecosystem bridges do not use state roots, they use receipt roots or multisignatures, so they are unaffected by this. Reth is critical infrastructure for the entire EVM ecosystem. We take it very seriously. And we are sorry for the inconvenience caused.

x.com

Reth team ships emergency patch for state root calculation bug

AI summary of the linked article

Reth and OP Reth released patches fixing a bug in the legacy state root code that could produce incorrect state roots. The article says the bug was found through the Tempo team's fuzzing process and that Tempo is also patched. Users are asked to update to Reth v2.10.0, OP Reth v2.8.1, and Base v1.5.3. The article states that for certain smart contract storage layouts, a crafted transaction could trigger the wrong state root, and that the block builder's use of this code on lower-end hardware and OP Stack chains left those setups exposed. It also says L2s such as Base and OP Stack chains are unaffected, since the bug could not impact their withdrawals system, and that ecosystem bridges are unaffected because they use receipt roots or multisignatures.

Recommended by 1 curator
No comments yetWhat caught your eye? Start the discussion.