Summary
Critical hard fork for all Berachain mainnet operators. Prague3 prevents the Balancer exploiter of Nov 3 2025 from stealing user funds and freezes use of BEX vaults.
Update Priority
This table provides priorities for which classes of users should update particular components.
| User Class | Mainnet |
|---|---|
| Payload Builders | Required |
| Non-Payload Builders | Required |
All Changes
- chore: nit fixes around prague3 docs
- prague3 (#10)
Binaries
| System | Architecture | Binary | PGP Signature | Notes |
|---|---|---|---|---|
| amd64 | bera-geth-linux-amd64-v1.011602.6-212ab4aa.tar.gz | Signature | Most Linux systems | |
| arm64 | bera-geth-linux-arm64-v1.011602.6-212ab4aa.tar.gz | Signature | 64-bit ARM systems | |
| amd64 | bera-geth-alltools-linux-amd64-v1.011602.6-212ab4aa.tar.gz | Signature | All tools bundle (amd64) | |
| arm64 | bera-geth-alltools-linux-arm64-v1.011602.6-212ab4aa.tar.gz | Signature | All tools bundle (arm64) | |
| System | Option | - | Resource | |
| Docker | ghcr.io/berachain/bera-geth |
Verifying Binary Signatures
All release binaries are signed with PGP. To verify:
- Download the public key
- Import the key:
gpg --import release.asc - Verify the signature:
gpg --verify <filename>.asc <filename>
Docker Images
Docker images are available at ghcr.io/berachain/bera-geth and are signed with Cosign using keyless signing from GitHub Actions OIDC.
To verify a specific release image (recommended: by digest):
cosign verify \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
--certificate-identity-regexp "^https://github.com/berachain/bera-geth/.github/workflows/docker.yml@.+" \
ghcr.io/berachain/bera-geth@$(docker buildx imagetools inspect ghcr.io/berachain/bera-geth:v1.011602.6 | awk '/^Digest:/ {print $2; exit}')To verify the latest unstable image instead (not recommended; tags can move):
cosign verify \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
--certificate-identity-regexp "^https://github.com/berachain/bera-geth/.github/workflows/docker.yml@.+" \
ghcr.io/berachain/bera-geth@$(docker buildx imagetools inspect ghcr.io/berachain/bera-geth:latest | awk '/^Digest:/ {print $2; exit}')Installation
The archives contain the geth binary and license file. Extract and run:
tar -xzf bera-geth-linux-amd64-v1.011602.6-212ab4aa.tar.gz
./gethThe alltools archives additionally contain:
abigen- Source code generator for Ethereum contractsevm- Developer utility for the Ethereum Virtual Machinerlpdump- Developer utility for RLP dataclef- Ethereum account management tool
