v1.9.0-beta.3

Update Makefile

v1.9.0-beta.2

⚠️ TESTNET ⚠️

Upgrade instructions

Check what database type you're currently using:

awk -F \" '/^db_backend =/{print $2}' ~/.secretd/config/config.toml

Uncomment and download the right binary based on your database type:

# Stop the v1.7.0 node
sudo systemctl stop secret-node

# Get & verify secretd v1.8.0

## goleveldb
# wget "https://github.com/scrtlabs/SecretNetwork/releases/download/v1.9.0-beta.2/secretnetwork_1.9.0-beta.2_testnet_goleveldb_amd64.deb"
# echo "b53f90819264ce0c44b46be696fc9b0fa4fcd694f660387e34aa023366996a38 secretnetwork_1.9.0-beta.2_testnet_goleveldb_amd64.deb" | sha256sum --check

## rocksdb
# wget "https://github.com/scrtlabs/SecretNetwork/releases/download/v1.9.0-beta.2/secretnetwork_1.9.0-beta.2_testnet_rocksdb_amd64.deb"
# echo "ea54e3f732c0c00515ad303e9a677ba27fdcb4d79b218aee608e2af77b3ab03f secretnetwork_1.9.0-beta.2_testnet_rocksdb_amd64.deb" | sha256sum --check

# Install 1.9.0 binaries
sudo apt install -y ./secretnetwork_1.9.0-beta.2_testnet_*_amd64.deb

# Restart the node
sudo systemctl restart secret-node

Update

Ubuntu 18.04 is no longer supported

What's Changed

• New Feature: Randomness injection for secret contracts.
  • Eliminates the need for contracts to bootstrap their own entropy pool.
  • Unique for every contract call.
  • Useful in lotteries, gaming, secure authentication protocols, protocols where unpredictable outcomes are essential for fairness and security, and much more.
    For more infomation on how to use this feature, see the documentation
• New Feature: FinalizeTx.
  • Contracts can force the transaction to finalize at a certain point, otherwise revert.
  • Example: protect against sandwich attacks and potential transaction rollbacks.
  • Example: protect against cheating in gaming applications, where a malicious player could try to rollback a transaction in which they lost.
• IBC: Updated ibc-go from v3.4.0 to v4.3.0.
• New IBC Feature: Added packet-forward-middleware by Strangelove.
  • Other chains would be able to more easily route SCRT in the interchain. For example, sending SCRT from Osmosis to Hub now becomes a single transaction from Osmosis -> Secret rather than a transaction from Osmosis -> Secret, then a transaction from Secret -> Hub.
• New IBC Feature: Added IBC fee middleware.
  • Creates a fee market for relaying IBC packets.
• New IBC Feature: Added IBC panic button.
  • Quickly shut down IBC in case of an emergency.
• New Feature: Evaporate & Check Gas APIs
  The new Check Gas and Evaporate APIs allow contract developers to create contracts that consume a constant amount of gas, independently of their code path. This helps harden contracts against information leakage from the amount of gas consumed by a contract.
• Bug Fix: Fixed an issue where nodes would sometimes stop if failing to enter SGX enclave

v1.8.0

Upgrade Highlights

Bug Fixes

• Fix a consensus-breaking bug that occurs when restarting a node or syncing with state-sync.

Upgrade instructions

See docs.scrt.network for upgrade instructions.

Full Changelog: v1.7.1...v1.8.0

v1.7.1

Upgrade Highlights

New Features

• Added the ability to rotate consensus seed during a network upgrade - this will be executed during this upgrade
• Added expedited gov proposals
  • Initial params (can be amended with a param change proposal):
    • Minimum deposit: 750 SCRT
    • Voting time: 24 hours
    • Voting threshold: 2/3 yes to pass
  • If an expedited proposal fails to meet the threshold within the scope of shorter voting duration, it's then converted to a regular proposal and restarts voting under regular voting conditions.
• Added auto-restaking - an opt-in feature that enables automatic compounding of staking rewards
• Added light-client validation for blocks
  • Protects against leaking private data using an offline fork attack
  • Enables trusted block heights and block time to be relied on by contracts

Bug Fixes

• Fixed OSX Ledger disconnection issues in secretcli (Thanks @chillyvee!)
• Fixed /cosmos/base/node/v1beta1/config
• Fixed an issue when sending multiple message types in the same tx
• Fixed an issue with the IBC controller module

Breaking Changes

Mandatory secret.js update (non-API breaking).

To implement consensus seed rotation, the tx encryption key format has changed, requiring an update of secret.js. After the upgrade goes live, secret.js will require an update to one of the following versions to continue to function:

• v1.5.x, v1.6.x -> v1.7.x
• v1.4.x -> v1.4.6
• v0.17.8 - can still be used

This should be a simple version bump that will not change any existing APIs, and will not break functionality. In order to test this version, secret.js v1.7.1-beta3 is available for testing on pulsar-2, which is already on the 1.7 update.

Side note: This upgrade will not affect Keplr

Upgrade instructions

See docs.scrt.network for upgrade instructions.

Full Changelog: v1.6.1...v1.7.1

v1.6.1

Updating from v1.6.0

⚠️ Note: The below instructions assume default installation. DO NOT COPY-PASTE if config.toml is not in ~/.secretd/config/config.toml or if you modified /etc/systemd/system/secret-node.service.

# Stop the v1.6.0 node
sudo systemctl stop secret-node

# Figure out currently used db backend
DB_BACKEND=$(awk -F \" '/^db_backend =/{print $2}' ~/.secretd/config/config.toml)

# Get the v1.6.1 binaries
wget "https://github.com/scrtlabs/SecretNetwork/releases/download/v1.6.1/secretnetwork_1.6.1_mainnet_${DB_BACKEND}_amd64.deb"

# Verify the v1.6.1 binaries
echo '2c043fb25f2b4f97eeda52a4033aff0ceb86f5dbb4738791f00eacdb8e065dfe secretnetwork_1.6.1_mainnet_goleveldb_amd64.deb
384125518cb4255fc4c6fb31506f605f5d0b5685eec840942960be19d2944c30 secretnetwork_1.6.1_mainnet_rocksdb_amd64.deb' |
    grep "$DB_BACKEND" |
    sha256sum --check

# Install the v1.6.1 binaries
sudo apt install -y "./secretnetwork_1.6.1_mainnet_${DB_BACKEND}_amd64.deb"

# Restart the node
sudo systemctl restart secret-node

What's Changed

• Update Cosmos SDK to v0.45.12
• Update Tendermint to v0.34.24

Full Changelog: v1.6.0...v1.6.1

v1.7.0-rc.2

⚠️ TESTNET ⚠️

Upgrade instructions

Check what database type you're currently using:

awk -F \" '/^db_backend =/{print $2}' ~/.secretd/config/config.toml

Uncomment and download the right binary based on your database type:

# Stop the v1.6.0 node
sudo systemctl stop secret-node

# Get & verify secretd v1.7.0

## goleveldb
# wget "https://github.com/scrtlabs/SecretNetwork/releases/download/v1.7.0-rc.2/secretnetwork_1.7.0-rc.2_testnet_goleveldb_amd64.deb"
# echo "9c6266f3e4bf0cac968e6a999ee5f7e7c7294c59f8fbbb7aa7237b468b0d72ad secretnetwork_1.7.0-rc.2_testnet_goleveldb_amd64.deb" | sha256sum --check

## rocksdb
# wget "https://github.com/scrtlabs/SecretNetwork/releases/download/v1.7.0-rc.2/secretnetwork_1.7.0-rc.2_testnet_rocksdb_amd64.deb"
# echo "9c6266f3e4bf0cac968e6a999ee5f7e7c7294c59f8fbbb7aa7237b468b0d72ad secretnetwork_1.7.0-rc.2_testnet_rocksdb_amd64.deb" | sha256sum --check

# Install 1.7.0 binaries
sudo apt install -y ./secretnetwork_1.7.0-rc.2_testnet_*_amd64.deb

# Restart the node
sudo systemctl restart secret-node

Mandatory secret.js update (non-API breaking)

The tx encryption key format has changed, requiring an update of secret.js:

• v1.5.x, v1.6.x -> v1.7.1-beta.2 (Recommended)
• v1.4.x -> v1.4.6
• v0.17.8 - can still be used

Update

Ubuntu 18.04 is no longer supported

What's Changed

• Fixed OSX Ledger disconnection issues in secretcli
• Fixed an issue when sending multiple message types in the same tx
• Fixed /cosmos/base/node/v1beta1/config
• Added expedited gov proposals
• Added the ability to rotate consensus seed during a network upgrade
• Added a feature for auto-restake of staking rewards

v1.7.0-rc.1

⚠️ TESTNET ⚠️

Upgrade instructions

Check what database type you're currently using:

awk -F \" '/^db_backend =/{print $2}' ~/.secretd/config/config.toml

Uncomment and download the right binary based on your database type:

# Stop the v1.6.0 node
sudo systemctl stop secret-node

# Get & verify secretd v1.7.0

## goleveldb
# wget "https://github.com/scrtlabs/SecretNetwork/releases/download/v1.7.0-rc.1/secretnetwork_1.7.0-rc.1_testnet_goleveldb_amd64.deb"
# echo "83ba70feb0405f5643be368d7707907efdfcc18567deb33f3dfe81292b073e1d secretnetwork_1.7.0-rc.1_testnet_goleveldb_amd64.deb" | sha256sum --check

## rocksdb
# wget "https://github.com/scrtlabs/SecretNetwork/releases/download/v1.7.0-rc.1/secretnetwork_1.7.0-rc.1_testnet_rocksdb_amd64.deb"
# echo "41906c21a0929358114a6491f8a895eb8c3020fba62971d923a4f2c57b358b70 secretnetwork_1.7.0-rc.1_testnet_rocksdb_amd64.deb" | sha256sum --check

# Install 1.7.0 binaries
sudo apt install -y ./secretnetwork_1.7.0-rc.1_testnet_*_amd64.deb

# Restart the node
sudo systemctl restart secret-node

Mandatory secret.js update (non-API breaking)

The tx encryption key format has changed, requiring an update of secret.js:

• v1.5.x, v1.6.x -> v1.7.1-beta.2 (Recommended)
• v1.4.x -> v1.4.6
• v0.17.8 - can still be used

Update

Ubuntu 18.04 is no longer supported

What's Changed

• Fixed OSX Ledger disconnection issues in secretcli
• Fixed an issue when sending multiple message types in the same tx
• Fixed /cosmos/base/node/v1beta1/config
• Added expedited gov proposals
• Added the ability to rotate consensus seed during a network upgrade
• Added a feature for auto-restake of staking rewards

v1.6.0

Highlights:

• Fixed issue causing registrations to fail
• Changed internal WASM engine to Wasm3 from Wasmi. Contract performance increased greatly
• Changed default grpc-concurrency to false (from true). For nodes that serve API requests, we highly recommend setting this manually to true as described in the release notes for version 1.5.1
• Reduced gas costs

See https://github.com/scrtlabs/SecretNetwork/blob/master/CHANGELOG.md for more detailed patch notes.

Note: with this release we are enforcing a custom, more strict policy than Intel IAS, for specific machines with CPUIDs 506E3 and 906ED. The check_hw tool can be used to verify your patch level & attestation status.

Upgrade Time

When the network reaches the halt height 6,537,300, the Secret Network blockchain will be halted and validators will need to take action to upgrade the chain to the secretd v1.6 binary.

The proposal targets the upgrade proposal block to be 6,537,300, anticipated to be on Tuesday, December 13, 2022 at 2:00PM UTC.

v1.6.0-rc.2

testnet upgrade name fix

v1.5.1

29/11/2022 - Startup fix due to TCB recovery - startup validation on 1.5.1 does not account for SW_HARDENING_NEEDED including INTEL-SA-00615 in it's response. Registering using this binary will not work, however restarting your node can be done using the _startup_bypass packages.

Fix for GRPC-gateway concurrency. This will greatly improve performance on nodes serving queries to GRPC-gateway requests (REST requests going to v1beta1/blah/blah)

Note that concurrency is toggled from the "concurrency" flag under GRPC in app.toml - see an example below.
(max-send-msg-size and max-recv-msg-size are also new, but are less important)

In this version the default is set to true for ease of deployment - We currently recommend for validators to not update to this version, or if you do, manually set concurrency to false. This update is for node runners that provide API services to increase performance of nodes that serve queries.

In this release we also include a special version for nodes that serve queries from legacy apps (those that use secretjs 0.x, for example Keplr) - this version contains an unstable patch that serves legacy LCD and rpc requests much faster. This fix has been found to be unstable at scale, and should be used sparingly until secretjs 1.5 is released and apps upgrade to the latest version

[grpc]

# Enable defines if the gRPC server should be enabled.
enable = true

# Address defines the gRPC server address to bind to.
address = "0.0.0.0:9090"

# The default value is math.MaxInt32.
max-recv-msg-size = "10485760"

# The default value is math.MaxInt32.
max-send-msg-size = "2147483647"

# Concurrency defines if node queries should be done in parallel.
# This is experimental and has led to node failures, so enable with caution.
# The default value is true.
concurrency = true