stacks-network/stacks-core 2.0.8

Release 2.0.8

on GitHub

Upgrade priority: high for miners; medium for everyone else.

This hotfix repairs a denial-of-service vulnerability in the way the Stacks node processes smart contracts. A buggy or malicious smart contract transaction can cause the node to crash while processing it. Node operators should upgrade to this release as soon as possible.

If your node crashes due to this bug, you will need to restart with a new working directory. The denial-of-service bug, if executed, will corrupt the chainstate database. If you restart your node yourself, then you do not need to re-sync.

This is a hotfix release for improved handling of static analysis storage and
improved at-block behavior. The chainstate directory of 2.0.8 is compatible with
the 2.0.7 chainstate.

Fixed

• Improved static analysis storage
• at-block behavior in clarity-cli and unit tests (no changes in stacks-node
  behavior).