Announcing Etherlink 6.5: a security bugfix for Farfadet

Project Updates
1

This is a joint post from Nomadic Labs, TriliTech, and Functori.

Yesterday, we received responsible disclosure of a critical vulnerability affecting Etherlink mainnet through the Tezos Foundation’s security bug bounty platform.

This vulnerability has not been exploited so far—we have not witnessed any attempts to exploit them either.

We have prepared a bugfix kernel upgrade addressing this issue, Etherlink 6.5, which has already been submitted to Etherlink’s Fast governance mechanism earlier today.

Should the governance process be successful, the kernel upgrade will activate on Etherlink mainnet on Saturday, June 27

We will publish a full post-mortem report upon a successful activation of Etherlink 6.5

:folded_hands: Thank you for your continued support for Etherlink.

We’d like to also thank the security researcher that reported this vulnerability through our bug bounty platform.

:date: CTA: Tezos bakers! Please upvote Etherlink 6.5

We need your support to ensure these fixes are swiftly deployed. The kernel upgrade proposal (007c73209bc68c2e0099e105b92ef4c674387532afbf5d51b7f1043472f9d65e9b) has already been injected in the current proposal period.

  • Proposal period vote: fast governance period 448, spanning between L1 levels #13,790,689 (June 25 07:20 UTC) and #13,795,488 (June 25 15:20 UTC).

  • Promotion period vote: fast governance period 449, spanning between L1 levels #13,795,489 (June 25 15:20 UTC) and #13,800,288 (June 25 23:20 UTC).

:backhand_index_pointing_right: Remember that Etherlink Fast track governance periods last ~8 hours, which means bakers would need to vote up to two times within 16 hours to participate in both periods.

Bakers can cast their votes in a few clicks with Etherink’s governance explorer UI, or using TezGov. We provide further voting instructions to vote with Octez CLI below.

Don’t hesitate to reach out if you need our help to make sure you can cast your votes in time.

Annex: voting instructions

Bakers can cast their votes in a few clicks with Etherink’s governance explorer, or using TezGov. It is also possible to vote using Octez CLI, with the following commands:

Proposal Period (Fast governance period 448)

The Proposal period vote is currently underway: it started on L1 level #13,790,689 (June 25 07:20 UTC) and will span until #13,795,488 (June 25 15:20 UTC).

You can upvote the Etherlink 6.5 kernel upgrade proposal using the following Octez CLI command:

octez-client call KT19oUVQPnVLuUBYXrBVd46WJnNAMpqkKSwo from <baking key or voting key> \
  --entrypoint "upvote_proposal" \ 
  --arg "0x007c73209bc68c2e0099e105b92ef4c674387532afbf5d51b7f1043472f9d65e9b" --burn-cap 0.11

Promotion Period (fast governance period 449)

If the Proposal period is successful, the Promotion period would span between between L1 levels #13,795,489 (June 25 15:20 UTC) and #13,800,288 (June 25 23:20 UTC).

You can vote for the Etherlink 6.5 kernel upgrade proposal using the following Octez CLI command:

octez-client call KT19oUVQPnVLuUBYXrBVd46WJnNAMpqkKSwo from <baking_key or voting_key> \
  --entrypoint "vote" --arg '"yea"' \
  --burn-cap 0.11

See this documentation entry for further instructions on how to participate in Etherlink’s governance.

Don’t hesitate to reach out if you need our assistance to cast your votes.

3 Likes