Keryx-Labs/keryx-node v1.5.7-PoM

Keryx-node-v1.5.7-PoM

on GitHub

Mandatory upgrade. Two consensus activations ship in this release:

• H10 — PoM walk-seed derivation at DAA 87 360 000 (≈ 2026-08-30 18:00 UTC). Every miner must be on keryx-miner ≥ v0.5.3, every node on v1.5.7.
• H11 — service-ledger snapshots at DAA 89 120 000 (≈ 2026-09-01 18:00 UTC). Every node on v1.5.7.

H10 — PoM walk seed

The seed that starts the PoM memory walk is now derived from the block header by a one-way function (pom_block_seed_h10). Proof format (v4), tier roots, the walk itself and the re-walk verifier are unchanged — only the seed derivation moves. Node and miner are in lockstep: from DAA 87 360 000 on, a block mined by a miner older than v0.5.3 is rejected.

Found by Texonja and verified against the full archival history before shipping.

H11 — service-ledger snapshots

The service-bond ledger (escrows, strikes, suspensions, standing) is snapshotted at every pruning sample, committed in serviceStateHash, and transferred verified to a syncing node together with its pruning point (p2p protocol v12). This replaces the unverified handoff band that caused the sealed-state divergences of 28–29 August. Every node reaches the same state; no more blind resyncs.

• Headers committing to a pruning point older than any snapshot a node holds are skipped; newer missing ones are an error (MissingServiceLedgerSnapshot).
• Nodes that serve miners (pools, solo) must be on v1.5.7 before Sunday morning UTC so they hold the snapshot H11 will require; a node upgraded later may be unable to build templates for a few hours after the gate.
• In-place upgrade; no datadir reset. v11/v10 peers are still served.

Also in this release

• Coinbase pays a body synced without its proof by the tier committed in its header (header.pom_tier), fixing COINBASE MISMATCH on fresh IBD nodes.
• Ratio debug dump runs again inside the trust window (window floor clamped instead of panicking).
• Connection manager: dial exclusion by (ip, port), DNS-seed rate limiting, ping/pong nonce window fix (PRs #36/#37 by fearke85).
• Naked recent blocks logged at debug (re-proof is automatic).
• Testnet: reduced depths for fast pruning, genesis kept ahead of every PoM gate, service_burnable_window_daa parameterized.
• New consensus params: h10_activation, service_ledger_activation, H10_ACTIVATION_DAA, H11_ACTIVATION_DAA.

Credits

• @Texonja — found the PoM walk-seed issue, produced the analysis and the block-level evidence that made H10 possible within the day.
• @fearke85 — connection-manager hardening (PR #36) and the dial-exclusion / DNS-seed / ping-nonce fixes (PR #37).