This is a joint post from Nomadic Labs, TriliTech, and Functori.
We have recently received responsible disclosure of two vulnerabilities affecting Etherlink mainnet and its associated infrastructure, through our security bug bounty platform.
These vulnerabilities have not been exploited so far—we have not witnessed any attempts to exploit them either.
We have prepared a bugfix kernel upgrade addressing these issues swiftly, Etherlink 6.3, which has already been submitted to Etherlink’s Fast governance mechanism earlier today.
Should the governance process be successful, the kernel upgrade will activate on Etherlink mainnet on Saturday, 16 May 2026.
We will publish a full post-mortem report upon a successful activation of Etherlink 6.3
Thank you for your continued support for Etherlink.
We’d like to also thank the security researchers that reported these vulnerabilities through our bug bounty platform.
CTA: Tezos bakers! Please upvote Etherlink 6.3
We need your support to ensure these fixes are swiftly deployed. The kernel upgrade proposal (0005d2c53f57df68b2027ecf592169cf8ce0ee7b3a6ecc215d58e42733c6eed131) has already been injected in the current proposal period.
-
Proposal period vote: fast governance period 1231, spanning between L1 levels #13,199,089 (May 14 13:55 UTC) and #13,202,688 (May 14 19:55 UTC).
-
Promotion period vote: fast governance period 1232], spanning between L1 levels #13,202,689 (May 14 19:55 UTC) and #13,206,288 (May 15 01:55 UTC).
Remember that Etherlink fast governance periods last ~6 hours, which means bakers would need to vote up to two times within 12 hours to participate in both votes.
Bakers can cast their votes in a few clicks with Etherink’s governance explorer UI, or using TezGov. We provide further voting instructions to vote with Octez CLI below.
Don’t hesitate to reach out if you need our help to make sure you can cast your votes in time.