Upgrade Notice
This release is intended for Corto and is built from the v11.x release branch. It is an emergency release cut from v10.x that introduces app version 11, which requires a coordinated upgrade. All validators must install it and signal for version 11.
App version 11 restricts a fixed list of accounts whose keys were exposed in the Keplr/Web3Auth social-login incident: from v11, these accounts can only move funds to one whitehat recovery address. On Corto the list holds three test accounts. App version 11 also shortens Corto's unbonding time to 10 minutes so that unbonding can be tested end to end.
Upgrade existing nodes
Download the celestia-app archive for your platform and verify it against checksums.txt. Validators should also download the matching fibre archive. Source builds use Go 1.26.10; the Makefile now downloads it when another Go version is installed. The multiplexer embeds v10.6.0 to serve heights before the upgrade.
Stop the node and, for validators, Fibre. Replace both binaries and restart with the existing homes and database. The node keeps running app version 10 until the upgrade activates.
Activating v11
Each validator signals for version 11:
celestia-appd tx signal signal 11 <plus transaction flags>Once at least 5/6 of the voting power has signalled, anyone can submit:
celestia-appd tx signal try-upgrade <plus transaction flags>The upgrade activates 33,231 blocks later (about 25 hours at Corto's current block time).
Configuration
No configuration changes are required.
Notable changes
See docs/release-notes/release-notes.md for breaking changes.
Supported operating systems
See the canonical matrix in the release README.
- Tested in CI: Ubuntu 24.04 LTS (Noble Numbat) on x86_64.
- Prebuilt binaries provided: Linux (
amd64,arm64), macOS (amd64,arm64), including the separate Fibre server. arm64 binaries are cross-compiled and are not executed in CI. - Minimum glibc: 2.38 for Linux multiplexer builds. Ubuntu 22.04 and older are unsupported for these builds. The separate Fibre binary requires glibc 2.34.
- Changes since v10.6.0: none.
What's Changed
- fix(proof): [medium] validate proof query requests before decoding the block (backport #8532) by @mergify[bot] in #8537
- fix(grpc): [medium] bound TxStatusBatch tx ids while decoding (backport #8534) by @mergify[bot] in #8538
- fix(app): [high] bound MsgModuleQuerySafe requests at mempool admission (v10.x) by @rootulp in #8535
- fix(multiplexer): [high] answer ABCI Info from the previous app until the new app commits (backport #8530) by @mergify[bot] in #8555
- build: [high] build with -trimpath and a pinned Go toolchain everywhere (backport #8630) by @rootulp in #8637
- feat!: [high] bump v10.x to app version 11 (emergency release) by @rach-id in #8617
- feat!: [high] restrict accounts with exposed keys to a whitehat address from v11 by @rach-id in #8618
- feat!: [high] shorten corto unbonding to 10 minutes at v11 by @rach-id in #8621
Full Changelog: v10.6.0-corto...v11.0.0-corto