T2 Network Upgrade for Testnet (Moderato) and Mainnet (Presto)
Important
This release is required for the T2 network upgrade scheduled for testnet and mainnet. Node operators must update their nodes, otherwise your nodes will fall out of sync with the network.
Update Priority
This table provides priorities for which classes of users should update to this release.
| User Class | Priority |
|---|---|
| Validators | High |
| RPC Nodes | High |
Nodes that are not updated will fall out of sync at the T2 activation timestamp.
Activation Times
| Network | Date | Timestamp |
|---|---|---|
| Moderato (testnet) | Thursday, Mar 26th 2026 16:00 CET | 1774537200
|
| Presto (mainnet) | Tuesday, Mar 31st 2026 16:00 CEST | 1774965600
|
TIPs
The T2 network upgrade implements four TIPs:
TIP-1015: Compound Transfer Policies — Extends TIP-403 with compound policies that specify different authorization rules for senders, recipients, and mint recipients. Enables use cases like vendor credits, asymmetric compliance, and sender/recipient-specific restrictions.
TIP-1017: Validator Config V2 — New precompile for managing consensus participants with self-service ingress/egress configuration and validator rotation.
TIP-1036: T2 Hardfork Bug Fixes — Meta TIP collecting 14 audit-driven bug fixes and security hardening changes, including: requiring tx.origin for AccountKeychain admin ops, rejecting self-sponsored fee payer signatures, enforcing token pause in DEX balance swaps, correcting built-in policy type data, nonce key gas repricing, and reserved liquidity transient storage guards.
TIP-1004: Permit for TIP-20 — Adds EIP-2612 compatible permit() functionality to TIP-20 tokens, enabling gasless approvals via off-chain signatures. Allows single-transaction approve + action flows and token sweeps from addresses that have never transacted.
Breaking Changes
Operators
ValidatorConfig V2 migration: No action is needed from node operators, existing validators will be upgraded from v1 to v2. Self-service actions become active after the upgrade is complete.
Developers
AccountKeychain admin ops require tx.origin: authorizeKey, revokeKey, and updateSpendingLimit now require direct owner calls — indirect contract-call paths are blocked post-T2. (#3202)
Self-sponsored fee payer signatures rejected: AA transactions where the fee payer resolves to the sender are now rejected. (#3200)
- Legacy invalid policy types rejected: Policy types that were previously silently accepted are now rejected during validation. (#3188)
What’s changed
Reth bumped to latest (2a94eed): #3216, #3241
Consensus: Validator CLI commands for add/rotate (#2841), --consensus.enable-subblocks flag (#3045)
Alloy SDK: NonceKeyFiller for 2D nonce management (#3022), account keychain provider helpers (#3133)
tempoup: Fixed install path to ~/.tempo/bin and shell PATH configuration (#3154), bash 3.3 compatibility (#3174)
CLI extensions: Introduced tempo add for CLI extensions (#3042)
Full Changelog: v1.1.1...v1.5.0