OffchainLabs/prysm v6.0.1

on GitHub

v6.0.1

This release fixes two bugs related to the payload_attributes event stream. If you are using or planning to use this endpoint, upgrading to version 6.0.1 is mandatory.
(H/t IBribe2Much for flagging the payload attribute issue and working with the team on testing and helped uncover another bug too)

Also, a reminder: like other Beacon API endpoints, when a node is syncing, it may return historical data as finalized or head. Until the node is fully synced to the head of the chain, you should avoid using this data, depending on your application's needs.

We currently recommend against using the --enable-beacon-rest-api flag on Mainnet. As you may have noticed, we put a deprecation notice on our gRPC code, in particular on gRPC-related flags. The reason for this is that we want to eventually remove gRPC and have REST HTTP as the standard way of communication between the validator client and the beacon node. That being said, the REST option is still unstable and thus marked as experimental in the flag's description (the flag is --enable-beacon-rest-api). Therefore we encourage everyone to keep using gRPC, which is currently the default. It is fine to test the REST option on testnets, but doing it on Mainnet can lead to missing attestations and even missing blocks.

Updating to v6.0.0 or later is required for Pectra Mainnet!

This patch release has a few important fixes from v6.0.0. Updating to this release is encouraged.

Added

• UpgradeToFulu spectests. [PR]
• PeerDAS related KZG wrappers. [PR]
• Add light client p2p broadcaster functions. [PR]
• Added immediate broadcasting of proposer slashings when equivocating blocks are detected during block processing. [PR]
• Added 2 new errors: HeadStateErr and ErrCouldNotVerifyBlockHeader. [PR]
• Implement pending consolidations Beacon API endpoint. [PR]
• PeerDAS: Add needed proto files and corresponding generated code. [PR]
• Add light client p2p validator and subscriber functions. [PR]

Changed

• Refactored internal function reValidateSubscriptions to pruneSubscriptions in beacon-chain/sync/subscriber.go for improved clarity, addressing a TODO comment. [PR]
• Updated geth to v1.15.9. [PR]
• Removed the slot from UpdateDuties. [PR]
• Update hoodie bootnodes. [PR]

Fixed

• avoid nondeterministic default fork value when generate genesis. [PR]
• UpgradeToFulu. [PR]
• fixed underflow with balances in leaking edge case with expected withdrawals. [PR]
• Fixes our generated ssz files to have the correct package name. [PR]
• Fixes our blob sidecar by root request lists for electra. [PR]
• Ensure that the payload_attributes event has a consistent view of the head state by passing the head block in the event and using stategen to retrieve the corresponding state. [PR]
• Pass parent context to update duties when dependent roots change. [PR]
• Process slots across epoch for payload attribute event. [PR]
• extend the payload attribute computation deadline to the beginning of the proposal slot. [PR]

Security

• Fix CVE-2025-22869. [PR]
• Fix CVE-2025-22870. [PR]
• Fix CVE-2025-22872. [PR]
• Fix CVE-2025-30204. [PR]