Release build for the v1.5 upgrade. This builds on top of the v1.5.0 pre-release: everything in v1.5.0 is included, and the bulk of the upgrade is still the cosmos-sdk v0.53 / ibc-go v10 / wasmd v0.60 migration (#2349), so read the v1.5.0 notes for that. v1.5.0 itself is not intended for network deployment. Networks that have not yet run the v1.5 upgrade should use this build.
v1.5.1 and v1.5.2 were tagged but not released separately, so everything in them is folded in below.
Security and hardening fixes since v1.5.0
- #2388 The EVM vote handler's
HandleResultresolves the source chain from the poll metadata instead of the voter-supplied result, and rejects a result whose chain does not match the poll's.vote.VoteHandler.HandleResultnow takes the poll rather than the result - #2389
SubmitPubKeyverifies the proof of public key ownership only after the cheaper keygen-session checks and charges a fixed 200,000 gas for it, so the expensive verification is no longer reachable unmetered.GetPermissionRoleis memoized per message type - #2376 The completed-poll chain is resolved from the poll metadata instead of the vote result, so a result naming an unregistered chain can no longer permanently stall the
x/voteEndBlocker - #2375 The missing-vote penalty is skipped when an EVM poll expires with zero votes, so an expired poll no longer marks every maintainer missing and clears their rewards
- #2373 The nexus EVM processing-message queue is ordered by insertion sequence (FIFO) rather than by message ID, so delivery order can no longer be influenced by grinding message IDs
- #2371 The cumulative burned-fee tracker is guarded against overflow, rolling back the tracker update for that denomination instead of failing the block
- #2381 Creating an EVM chain reuses an already registered param subspace instead of panicking on the re-registration attempt
Other changes since v1.5.0
- #2370 Transaction fees are limited to a single denomination, taken from a governance-controlled allowlist held by the new
x/feepolicymodule (default["uaxl"]) - #2384 The v1.5 upgrade handler seeds the
x/feepolicyallowed fee denoms from the staking bond denom, instead of leaving the default allowlist ofuaxlon chains that bond a different denom - #2378 Messages whose destination route needs the original payload are no longer queued, since the nexus
EndBlockercannot supply it
Full list in CHANGELOG.md.
Full Changelog: v1.5.0...v1.5.3