Summary
⚠️ Lighthouse v8.1.3 is a high-priority patch release with further security-critical fixes atop v8.1.2.
This is a mandatory upgrade for all users running any prior version. All prior Lighthouse releases including v8.1.2 are affected by vulnerabilities. All Lighthouse beacon nodes should be upgraded as soon as possible. There will be CVEs announced for these vulnerabilities in the coming days. For the CVEs patched in v8.1.1 and v8.1.2, please see the Previous Security Advisories section later in these release notes.
We greatly appreciate your diligence in keeping Ethereum secure.
Other Changes
- 🎉 Set the Fulu fork epoch for Gnosis Chain. Slot 27435008, Tue Apr 14 2026 12:06:20 UTC. All Gnosis users must update BN+VC before this time.
- Optimised state root computation to address a performance regression causing 10x slowdowns: #9017. Block processing times are a lot smoother in v8.1.3, which helps with attestation performance.
Breaking Changes
There are no breaking changes in this release. If you are upgrading from prior to v8.1.0 we recommend reading the release notes for v8.1.0, v8.1.1 and v8.1.2.
Update Priority
This release contains several security fixes. All users running prior versions of Lighthouse BN should upgrade immediately.
| User Class | Beacon Node | Validator Client |
|---|---|---|
| Staking Users | High | High for Gnosis, Low otherwise |
| Non-Staking Users | High | --- |
See Update Priorities for more information about this table.
Previous Security Advisories
We can now reveal the vulnerabilities that were patched in Lighthouse v8.1.1 and v8.1.2:
rust-yamux(v8.1.1): GHSA-4w32-2493-32g7rust-yamux(v8.1.2): GHSA-vxx9-2994-q338rust-libp2p(v8.1.2): GHSA-gc42-3jg7-rxr2quinn-proto(v8.1.2): GHSA-6xvm-j4wr-6v98
All Changes
- Release v8.1.3
- Bump c-kzg
- Bump libp2p
- Bump yamux
- Bump quinn
- Schedule Fulu fork for Gnosis mainnet (#9007)
- Use BTreeMap for state.validators pending updates (#9017)
- Scrap redundant docker builds on releases (#8999)
- Bump rustls and ignore unpatched version due to Warp (#9010)
Binaries
See pre-built binaries documentation.
The binaries are signed with Sigma Prime's PGP key: 15E66D941F697E28F49381F426416DC3F30674B0
| System | Architecture | Binary | PGP Signature |
|---|---|---|---|
| | aarch64 | lighthouse-v8.1.3-aarch64-apple-darwin.tar.gz | PGP Signature |
| | x86_64 | lighthouse-v8.1.3-x86_64-unknown-linux-gnu.tar.gz | PGP Signature |
| | aarch64 | lighthouse-v8.1.3-aarch64-unknown-linux-gnu.tar.gz | PGP Signature |
| System | Option | - | Resource |
| | Docker | v8.1.3 | sigp/lighthouse |