Release Candidate 2026.1.0 (dev -> main) aka ChronoGuard by mur-me · Pull Request #5053 · harmony-one/harmony

mur-me · 2026-06-05T12:01:40Z

Mainnet Release v2026.1.0

TODO: The dedicated hardfork PR will document the final activation epoch/block, operator deadline, and hardfork-specific compatibility notes.

Attention mainnet node operators. There will be a mandatory upgrade as a hardfork will occur at:

epoch TBD
block TBD
approximately on TBD

Validator and Explorer/RPC nodes are strongly encouraged to upgrade, because this release contains a significant amount of code changes across p2p startup, stream sync, consensus timestamp handling, RPC/tracing, EVM compatibility, node configuration.

Caution

Validator operators must configure Chrony before running this release, follow the official validator Chrony setup guide: https://docs.harmony.one/home/network/validators/node-setup/0.-recommended-chrony-setup-for-validator-nodes.

The released version: v2026.1.0-0-g<commit>

Set of changes:

Consensus Timestamp Safety

Adds stricter block timestamp validation rules behind chain configuration.
Ensures new block timestamps are strictly greater than the parent block timestamp.
Adds future-time bounds to reduce acceptance of blocks with excessive local-clock skew.
Updates proposal flow to pass the current local time explicitly into block creation.
Fixes cascading block-time skew by capping proposer waiting behavior when local time is behind the parent block timestamp.
Prevents validators from hanging indefinitely while waiting for local wall-clock time to catch up.
Improves view-change behavior when timestamp skew would otherwise stall proposal flow.
Adds tests covering strict parent timestamp checks, future timestamp bounds, catch-up behavior, and view-change safety.

Important

This is a consensus-safety and liveness improvement. Validators should upgrade because this release improves timestamp validation and prevents proposer stalls caused by block-time skew.

Time Synchronization / Mandatory Chrony Setup

Validator nodes must use accurate system time to avoid block timestamp skew and proposer stalls.
Operators are required to configure Chrony on validator nodes before upgrading.
Chrony setup is mandatory for validators because this release improves timestamp validation and relies on correct local system time.
Follow the official validator Chrony setup guide: https://docs.harmony.one/home/network/validators/node-setup/0.-recommended-chrony-setup-for-validator-nodes

Important

Chrony setup is mandatory for validator nodes. Incorrect local time may cause block proposal delays, future-block validation failures, or view-change instability.

Stream Sync & P2P Startup Reliability

Adds SetEnoughStreamsCallback support to StreamManager, allowing the sync pipeline to leave startup mode as soon as enough valid streams are available.
Improves startup-mode behavior by reducing unnecessary waiting during peer discovery.
Optimizes peer discovery timing, DHT request limits, and target valid peer thresholds.
Adds deterministic and race-safe startup-mode state handling.
Adds a stream discovery watchdog to prevent nodes from waiting indefinitely when not enough streams are discovered.
Adds recovery logic to reset stream-manager runtime state without resetting staged sync progress.
Improves stream lifecycle cleanup and reduces aggressive stream removal in recoverable cases.
Adds and updates test coverage for startup mode, advertise behavior, stream discovery, DHT request limits, and watchdog recovery.

Important

This improves node startup and sync recovery behavior. It does not require a hardfork activation by itself.

RPC, Tracer & Explorer Compatibility

Reorganizes block tracer code for readability and maintainability.
Moves Parity block tracer implementation into the native tracer package.
Removes deprecated block_tracer.go and block_tracer_storage.go files.
Renames tracer tests for package consistency.
Adds JavaScript callTracer implementation with asset loading.
Updates tracer gas context handling to use the dynamic gas value instead of the original gas limit.
Removes debug output from tracer execution paths.
Improves legacy structLog JSON encoding compatibility.
Improves trace-result encoding compatibility for older clients and explorer tooling.
Adds sentinel error handling for ABI event signature mismatches.
Verifies event signature topics before unpacking ABI logs.
Adds rate limiting support for auth trace APIs.
Adds rate-limiter guard logic so invalid non-positive limits do not break RPC startup.
Separates auth HTTP and WebSocket server tracking.
Caches method-filter regex compilation for auth RPC filtering.

Important

Explorer/RPC operators should upgrade because this release includes trace API compatibility fixes and rate-limiting safeguards for expensive RPC paths.

EVM / Ethereum Compatibility Groundwork

Adds EIP-7939 CLZ opcode support and chain-rule plumbing.
Adds EIP-5656 MCOPY opcode support and rule checks.
Adds EIP-6780 SELFDESTRUCT behavior rule plumbing.
Adds EIP-3860 initcode size limit and initcode gas-metering support.
Adds EIP-3855 PUSH0 opcode support.
Adds Prague fork configuration and rule plumbing.
Adds EIP-2935 block hash history support under Prague-related rules.
Adds EIP-8024 support, including new stack-manipulation opcode plumbing.
Adds automatic epoch-based EIP activation checks where applicable.
Adds tests for EIP activation boundaries, disabled-rule behavior, gas accounting, opcode availability, and fork-rule configuration.

Important

This section documents code support and EVM compatibility groundwork.
Mainnet hardfork activation details are intentionally not included here and should be added by the dedicated hardfork PR.

Node Configuration, BLS Keys & Runtime Safety

Updates default BLSKeys.MaxKeys from 10 to 11.
Bumps config handling for the new BLS key limit.
Uses read locks for decider read paths to reduce unnecessary lock contention.
Improves method-filter handling for authenticated RPC servers.
Improves startup and shutdown behavior in stream and RPC-related services.
Adds tests for config migration, decider access, RPC auth server behavior, and rate-limiter edge cases.

Important

Hardfork activation is intentionally not documented in this changelog.

A separate hardfork PR should add:

activation epoch / block details
validator upgrade deadline
explorer/RPC operator upgrade deadline
hardfork-specific mandatory-upgrade wording
compatibility notes for old nodes
any rollback or monitoring instructions required for the activation window

PR / commit list:

refactor(tracers): clean up and reorganize block tracer code for improved readability and maintainability by @Frozen
refactor(tests): rename block_tracer_test.go to parity_test.go for consistency in package naming by @Frozen
removed block_tracer.go and block_tracer_storage.go by @Frozen
feat: add SetEnoughStreamsCallback to StreamManager interface by @GheisMohammadi
feat: optimize peer discovery timing and limits by @GheisMohammadi
fix: prevent startup mode race condition with early exit callback by @GheisMohammadi
fix: add stream discovery watchdog to prevent infinite waiting by @GheisMohammadi
fix: make startup mode deterministic and race-safe by @GheisMohammadi
chore(config): update BLS keys max limit to 11 by @mur-me in refactor(config): update default BLSKeys MaxKeys to 11 #5015
fix(consensus): use read lock for decider read paths by @GheisMohammadi in consensus: reduce decider lock contention with RLock #5023
fix(rpc): separate auth HTTP and WS servers and cache method filters by @GheisMohammadi in fix(rpc): track auth HTTP/WS servers separately; cache method-filter … #5024
fix(rpc): guard rate limiter initialization for invalid limits by @GheisMohammadi
feat(rpc): add rate limiting to auth trace APIs by @GheisMohammadi
fix(rpc): update rate limiter config handling by @GheisMohammadi in Fix RPC rate limiter configuration handling #5025
fix(consensus): add timestamp validation for future and parent block time checks by @GheisMohammadi in Add timestamp checks for block header validation #5020
fix(sync): add stream discovery watchdog recovery reset by @GheisMohammadi in sync: add stream watchdog recovery reset #5011
fix(abi): add sentinel error for event signature mismatch by @GheisMohammadi in add sentinel error for event signature mismatches #5032
feat(evm): add EIP-7939 CLZ opcode/rule plumbing by @GheisMohammadi in EIP-7939: CLZ opcode #4997
feat(evm): add EIP-5656 MCOPY opcode/rule plumbing by @GheisMohammadi in EIP-5656: MCOPY opcode support #4991
feat(evm): add EIP-6780 SELFDESTRUCT behavior rule plumbing by @GheisMohammadi in EIP-6780: SELFDESTRUCT only in same transaction #4994
fix(tracers): improve legacy structLog and trace-result encoding compatibility by @GheisMohammadi in fix legacy structLog JSON encoding #5031
feat(evm): add EIP-3860 initcode limit and gas-metering support by @GheisMohammadi in EIP-3860: Limit and meter initcode #4993
feat(evm): add EIP-3855 PUSH0 support by @GheisMohammadi in EIP-3855: Add PUSH0 OpCode #4975
feat(evm): add Prague fork and EIP-2935 block hash history support by @GheisMohammadi in EIP-2935: Block Hash History #4970
feat(evm): add EIP-8024 support and opcode/rule plumbing by @GheisMohammadi in Eip-8024: Backward compatible SWAPN, DUPN, EXCHANGE #4998
feat(tracers): add call tracer JS implementation by @Frozen in Add call tracer js implementation #5022
feat(evm): auto-enable EIP-3855, EIP-3860, and EIP-8024 by epoch by @GheisMohammadi
test(evm): add EIP activation and boundary tests by @GheisMohammadi
chore(testnet): set testnet activation epoch for EIP-related rules by @Frozen in Testnet activation epoch #5045
consensus: fix cascading block-time skew with stall-safe timestamp caps by @GheisMohammadi in consensus: fix cascading block-time skew with stall-safe timestamp caps #5048

Full Changelog: main...dev

…oved readability and maintainability

…nsistency in package naming

- Add SetEnoughStreamsCallback method to Operator interface - Implement SetEnoughStreamsCallback in streamManager struct - Add enoughStreamsCallback field to streamManager - Call callback when softHaveEnoughStreams() is true - Enables early exit from startup mode when enough streams are found

- Add startup mode with faster timings for initial peer discovery - Centralize all timing constants in const.go - Add network-specific DHT request limits and target valid peer counts - Align target valid peers with stream sync configuration requirements - Improve adaptive sleep logic with SleepDecreaseRatio - Add comprehensive timing constants for startup vs normal modes

- Add startup mode with faster timings for initial peer discovery - Implement early exit from startup mode when enough streams found - Add network-specific peer discovery limits and validation - Improve advertise() function with better error handling and logging - Add isValidPeer() stub for future peer validation logic - Use configurable DHT request limits instead of hardcoded values - Add target valid peer counting and filtering - Improve advertiseLoop() with adaptive timing based on discovery success

- Add TestProtocol_Advertise with mock discovery and proper setup - Add TestProtocol_AdvertiseLoop with timing validation - Add TestProtocol_ExitStartupMode for startup mode functionality - Add TestProtocol_GetDHTRequestLimit for network-specific limits - Add TestProtocol_GetTargetValidPeers for target peer validation - Fix interface compilation errors by adding SetEnoughStreamsCallback stubs - Add mockDiscovery struct to properly mock discovery interface - Update tests to handle nil pointer scenarios and proper initialization

… - 194*6%==11 bls keys and we already have validators in the mainnet using this (#5015)

…regexes (#5024)

* Add block timestamp validation * test(chain): fix timestamp validation tests by seeding parent header

* Move TLOAD/TSTORE to Ethereum addresses (0x5c/0x5d) * initial version of eip-5656

* feat(ntp): update NTP offset every minute and use it for block timestamps - Add NTPTime interface and periodic offset refresh (every 1 minute) via Run() - Store NTP time provider in Registry with Now() accessor - Pass NTP-corrected time to Worker.UpdateCurrent() when proposing blocks - Fix consensus_block_proposing.go to use registry.Now() for block timestamp - Wire NTP provider in main.go with go impl.Run(ctx, time.Minute) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat(ntp): add NTPEpoch activation epoch (disabled, set to EpochTBD) - Add NTPEpoch field to ChainConfig with EpochTBD in all network configs - Add IsNTP(epoch) helper method - Use NTP-corrected time in ProposeNewBlock only when IsNTP is active Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * docs(ntp): add comments to NTP time provider and block proposing Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(ntp): update NTPEpoch and TimestampValidationEpoch to 47170 * refactor(config): reorder TimestampValidationEpoch in configuration

* EIP-2935 initial version * refactor EIP-2935 implementation * remove unused method: newPraugeInstructionSet * eip-2935: update contract code & addr * expose EVM Config * core: fix ProcessParentBlockHash ringIndex calculation * Fix EIP-2935 implementation to match Ethereum specification - Add ProcessBlockHashHistory function that properly populates the entire history buffer - Fix ProcessParentBlockHash function signature and implementation - Implement correct ring buffer logic for 8192-block history window - Handle transition from old 256-block window to new 8192-block window - Ensure proper parameter ordering and function calls - Fix test compilation issues * Fix TestProcessBlockHashHistory test compilation issues - Simplify test to use direct state database creation instead of complex test environment - Remove debug panic statements that were added for troubleshooting - Add proper imports for rawdb and state packages - Ensure test can run without nil pointer dereference errors * fix conflicts and issues after rebase with new ethereum upgrade * fix: correct EIP-2935 implementation - Fix ProcessBlockHashHistory fork block detection logic - Update BLOCKHASH opcode to support history storage contract (8192 blocks) - Add IsPrague flag to Rules struct for EVM chain rules * fix: correct EIP-2935 blockhash history implementation - Fix opBlockhash to exclude 256-block window from history lookup - Fix ProcessBlockHashHistory to store correct block hashes - Add nil check for genesis block case

* remove(ntp): eliminate NTP-related configurations and functionality * refactor(consensus): pass current time to ProposeNewBlock for accurate timestamp handling

* feat(tracers): add call tracer implementation with asset loading * refactor(tracers): remove unnecessary log statement from call tracer registration * refactor(tracers): remove init function for call tracer registration * fix(goja): update gas context value to use dynamic gas variable * refactor(tracers): remove debug print statement from ParityBlockTracer

* update(config): set specific epochs for EIP7939, EIP5656, EIP3855, EIP3860, and EIP8024 * feat(config): set specific epochs for EIP7939, EIP5656, EIP3855, EIP3860, and EIP8024 to 7163 * feat(config): set TimestampValidationEpoch on the testnet to the 7170 * feat(config): set EIP6780Epoch for devnet and testnet * fix(tests): remove NTPEpoch from tests --------- Co-authored-by: Uladzislau Muraveika <uladzislau.muraveika@protofire.io>

…ps (#5048)

mur-me · 2026-06-05T12:02:51Z

Hello @Frozen and @GheisMohammadi, let's together agree on the epoch/dates for the hardfork 🙏

Please also review the description, I'll reuse into the release

* fix: gate duplicate beacon slash evidence behind fork epoch * fix slashes check for dublicate entries * add regression tests for Slash Evidence Uniqueness * fix goimporrts issue

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

* core: Fix slash group ordering with canonical sort * test: add slash group state order tests

* slash: reject double-sign evidence with epoch-height mismatch * add double sign rebind tests * fix goimports issue * fix double sign tests * fix slash group tests

* feat(config): add CXReceiptStateRollbackEpoch for cross-shard receipt handling * refactor(interpreter): improve EIP activation by using a copy of the JumpTable

* feat(engine): reject shard state on non-last blocks and add corresponding test * update shard state verification to reject empty states and adjust corresponding tests

…5058)

mur-me and others added 30 commits March 3, 2026 10:41

refactor(ci): remove discontinued macos-13 (#5012)

96856fa

refactor(tracers): clean up and reorganize block tracer code for impr…

0aca399

…oved readability and maintainability

refactor(tests): rename block_tracer_test.go to parity_test.go for co…

8572cdd

…nsistency in package naming

removed block_tracer.go and block_tracer_storage.go

f194146

fix: make sync startup mode deterministic and race-safe

0d238a7

refactor(config): update default BLSKeys MaxKeys to 11, justification…

1c3b7ac

… - 194*6%==11 bls keys and we already have validators in the mainnet using this (#5015)

consensus: use RLock for decider read paths (#5023)

9242321

fix(rpc): track auth HTTP/WS servers separately; cache method-filter …

83b4424

…regexes (#5024)

Fix RPC rate limiter configuration handling

b061811

Add RPC rate limiter to auth trace APIs

9900550

Fix RPC rate limiter configuration handling (#5025)

12c263c

Add timestamp checks for block header validation (#5020)

71d0864

* Add block timestamp validation * test(chain): fix timestamp validation tests by seeding parent header

sync: add stream watchdog recovery reset (#5011)

4d26f2e

add sentinel error for event signature mismatches (#5032)

e490665

Initial version of EIP-7939 Implementation (#4997)

e8eca85

EIP-5656: MCOPY opcode support (#4991)

6e170cc

* Move TLOAD/TSTORE to Ethereum addresses (0x5c/0x5d) * initial version of eip-5656

initial version of EIP-6780 (#4994)

43c09d5

fix legacy structLog JSON encoding (#5031)

252b46d

Activate ntp time on devnet (#5034)

e97d243

* feat(ntp): update NTPEpoch and TimestampValidationEpoch to 47170 * refactor(config): reorder TimestampValidationEpoch in configuration

fix(ntp): move activation epoch to the 47190 epoch (#5036)

cfe1254

implement EIP-3860: Limit and meter initcode (#4993)

a64fb32

core/vm: EIP-3855 (PUSH0) (#4975)

5cd8851

Eip-8024: Backward compatible SWAPN, DUPN, EXCHANGE (#4998)

a0b10a3

Remove NTP configurations and functionality (#5042)

464655f

* remove(ntp): eliminate NTP-related configurations and functionality * refactor(consensus): pass current time to ProposeNewBlock for accurate timestamp handling

Frozen and others added 5 commits May 20, 2026 13:07

vm: auto-enable EIP-3855/3860/8024 by epoch

0c5373b

Add test for EIP activations

2749ec2

consensus: fix cascading block-time skew with stall-safe timestamp ca…

b3f8b56

…ps (#5048)

mur-me requested review from Frozen and GheisMohammadi June 5, 2026 12:01

GheisMohammadi approved these changes Jun 5, 2026

View reviewed changes

Frozen and others added 17 commits June 12, 2026 19:36

ci: Migrate CI from Travis to GitHub Actions (#5029)

27267ba

core: tighten cross-shard receipt proof consistency checks (#5039)

b4dd6cd

beacon: tighten cross-link validation and epoch-gate rollout (#5040)

43ccc5a

core: beacon slash header validation (#5041)

f922c43

* fix: gate duplicate beacon slash evidence behind fork epoch * fix slashes check for dublicate entries * add regression tests for Slash Evidence Uniqueness * fix goimporrts issue

core: include shard ID in verified signature cache key (#5043)

1766b5d

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

core: reject duplicate shard cross-links in beacon headers (#5046)

1775547

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

slash: snapshot-based external slash denom (#5050)

f9f3561

staking: bind validator wrapper address to account (#5051)

11429d7

core: Canonical slash group ordering for beacon finalization (#5054)

7743e81

* core: Fix slash group ordering with canonical sort * test: add slash group state order tests

slash: bind double-sign evidence epoch to block height (#5055)

f067593

* slash: reject double-sign evidence with epoch-height mismatch * add double sign rebind tests * fix goimports issue * fix double sign tests * fix slash group tests

staking: bind BLS proof-of-possession to validator address (#5059)

a514e8a

Add CXReceiptStateRollbackEpoch for cross-shard receipt handling (#5063)

a7330c5

* feat(config): add CXReceiptStateRollbackEpoch for cross-shard receipt handling * refactor(interpreter): improve EIP activation by using a copy of the JumpTable

Fix slash verification to use double-sign key intersection only (#5065)

176a0d1

refactor(github_ci): enhance release flow (#5061)

d36c2fd

Reject shard state on non-last blocks and add tests (#5064)

d2a049d

* feat(engine): reject shard state on non-last blocks and add corresponding test * update shard state verification to reject empty states and adjust corresponding tests

Verify beacon header slash records during block processing (#5068)

f590000

feat(github_ci): speed up test runs with one binary build (#5067)

d8a1904

mur-me requested a review from GheisMohammadi June 26, 2026 14:38

Frozen and others added 3 commits June 29, 2026 13:38

Refactor configuration to update epoch values for features and fixes (#…

cc889ee

…5058)

update epoch values for testnet parameters (#5069)

41918dc

feat(github_ci): enable pyhmy tests on arm architecture (#5070)

f02e629

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Release Candidate 2026.1.0 (dev -> main) aka ChronoGuard#5053

Release Candidate 2026.1.0 (dev -> main) aka ChronoGuard#5053
mur-me wants to merge 55 commits into
mainfrom
dev

mur-me commented Jun 5, 2026

Uh oh!

mur-me commented Jun 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

mur-me commented Jun 5, 2026

Mainnet Release v2026.1.0

Set of changes:

Important

PR / commit list:

Uh oh!

mur-me commented Jun 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

mur-me commented Jun 5, 2026 •

edited

Loading