Overview
Important
This is a recommended release for all op-challenger operators. It fixes list-games against factories containing super permissioned games, tightens transaction decoding in the bundled kona-host, and updates the container base image to clear a reported CVE.
What's Changed
Bug fixes
list-gamesno longer aborts against a factory containing both standard and super permissioned games. Super permissioned games from the simplified contract do not exposeclaimDataLen, so the claim count query is now skipped for type-5 games and reported as zero (#22841)- The bundled kona-host now rejects bare RLP bodies for Deposit and PostExec transactions. Both are EIP-2718 typed transactions with no untyped wire form, so a missing
0x7Eor0x7Dtype byte could previously slip past derivation's leading-byte transaction gates (#22778)
Security
- The container image now ships zlib 1.3.2-r7, clearing
CVE-2026-85091
Full Changelog: op-challenger/v1.9.5...op-challenger/v1.9.6
🚢 Docker Image: