Runtime Upgrade 1504 - Moonriver Network

Democracy

4yrs ago

2 Comments

Tabled

Content

AI Summary

Following the discovery of a security issue submitted through Moonbeam's Immunefi bug bounty program, the Moonbeam Council proposes to upgrade the Moonbeam's runtime to version 1504.

Runtime 1504 release note :

https://github.com/PureStake/moonbeam/releases/tag/runtime-1504

The fix aims to re-established DELEGATECALL for Ethereum standard precompiles and for smart contracts (while keeping it disabled for custom precompiles)

More information on the security issue can be found in the following announcement :
https://moonbeam.network/blog/urgent-security-patch-for-custom-precompiles/

To learn more about Moonbeams bug bounties, visit the link below.
Immunefi Bug Bounty Program:
https://immunefi.com/bounty/moonbeamnetwork/

Verification

Blake2_256 Hash: 0xadf9d791567b5170326a535af19d2fec6b8d3931cca1083a625b6aeb58e75c0d
If you want to apply the best practices and verify the hash of the proposal, we advise you to use srtool

Moonbeam Runtime Upgrade to Version 1504

Security Issue: A security problem was found and reported through Moonbeam's Immunefi bug bounty program.
Upgrade Proposal: The Moonbeam Council suggests upgrading to runtime version 1504 to fix the issue.
Fix Details: The upgrade will restore DELEGATECALL for Ethereum standard precompiles and smart contracts, but keep it disabled for custom precompiles.
Release Note: More information about the upgrade can be found in the release note on GitHub.
Security Announcement: Detailed information about the security issue is available in a blog post.
Bug Bounty Program: Learn more about Moonbeam's bug bounty program on Immunefi.
Verification: The Blake2_256 Hash for the proposal is 0xadf9d791567b5170326a535af19d2fec6b8d3931cca1083a625b6aeb58e75c0d.