⚠️ This release is a critical security fix and is a required update for users.
Overview
This is a required release of kona-host. It fixes a fault-proof soundness bug (BLOBBASEFEE on post-Jovian blocks) and a host witness-fetch reliability bug, plus verifier hardening and interop proof groundwork. All operators should upgrade.
This release is required for Upgrade 19, the OP Stack upgrade that promotes kona-client to the primary fault proof program.
What's Changed
Soundness fix (required)
- Pin
BLOBBASEFEEto 1 post-Jovian (#21328): the executor derived the EIP-4844 blob env from the parent header, but post-JovianblobGasUsedcarries the DA footprint — yieldingBLOBBASEFEE > 1once the parent footprint exceeded ~4.26M and diverging from the canonical chain (op-geth/op-reth pin it to 1), breaking dispute-game soundness. Now pinned to{excess_blob_gas: 0, blob_gasprice: 1}for Ecotone+.
Reliability
- Retry high-level witness fetches (#21269):
debug_executePayload/ optimistic re-execution hints are now serviced through theget_preimageretry loop instead of being fetched once and falling back todebug_dbGet(unimplemented by op-reth) — so a transient error is retried instead of being terminal.
Hardening
- Bound pre-refund EVM gas per block (#21250): caps the pre-refund sum of
evm_gas_usedatMAX_GAS_LIMIT(500M) inOpBlockExecutor, which the fault proof verifies through. - Reject zero elasticity in EIP-1559 params (#21292): rejects a zero elasticity/denominator in block
extraData, matching op-geth/op-reth validation. - Embed superchain-registry dependency sets (#20837): interop proofs now embed real depsets instead of an empty list that forced an "insecure in production" host-preimage fallback.
Interop / SDM proof support
- Validate SDM PostExec in native single-chain proofs (#21034).
- Interop activation as an L2CM bundle (#20723): interop hardfork activation in proofs now applies the L2CM NUT bundle instead of hardcoded deployment txs.
Other
- Align spec/fork resolution across kona/op-revm/alloy (#21291): consistent Granite/Karst/Lagoon(Interop) spec resolution with conformance guards. Does not affect execution for currently-proven chains.
- Lagoon hardfork rename (#21105) — no wire-format change.
- Generic receipt builder (#21275) — executor generic over
OpReceiptBuilder; OP path byte-for-byte identical. - Embedded superchain-registry config bump (#21095).
Full Changelog: kona-host/v1.5.2...kona-host/v1.6.0
🚢 Docker Image: