{"id":9630,"date":"2025-03-12T07:31:27","date_gmt":"2025-03-12T06:31:27","guid":{"rendered":"https:\/\/wsj-crypto.com\/?p=9630"},"modified":"2025-03-12T07:31:27","modified_gmt":"2025-03-12T06:31:27","slug":"crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence","status":"publish","type":"post","link":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/","title":{"rendered":"&#8220;Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence&#8221;"},"content":{"rendered":"<p><\/p>\n<div id=\"\">\n<p class=\"chakra-text css-gi02ar\">\u00a0<!-- --><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Synopsis: <!-- --><\/b><span style=\"font-weight:400\">Bug in the go client implementation might result in invalid state<!-- --><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Impacted client versions: <!-- --><\/b>Latest (unresolved) versions of Go client; v1.1.2, v1.0.4 tags and develop, master branches prior to September 9.<!-- --><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Probability: Low<!-- --><\/b><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Seriousness: High<!-- --><\/b><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Consequence: High<!-- --><\/b><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Information:<!-- --><\/b><span style=\"font-weight:400\"> The Go Ethereum client fails to accurately restore the state of the execution environment when a transaction runs out of gas if &#8211; during the same block &#8211; a contract has been suicided. This leads to an erroneous copy operation of the state object; marking the contract as <!-- --><\/span><b>not removed<!-- --><\/b><span style=\"font-weight:400\">. Such an operation could lead to a consensus discrepancy among other implementations.<!-- --><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<!-- --><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Impact on anticipated chain reorganization depth: <!-- --><\/b><span style=\"font-weight:400\">none<!-- --><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Corrective measures taken by Ethereum<!-- --><\/b><span style=\"font-weight:400\">: Release of hotfixes as outlined below. <!-- --><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Suggested interim solution:<!-- --><\/b><span style=\"font-weight:400\"> Utilize Python or C++ client<!-- --><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<!-- --><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If employing the PPA: <!-- --><\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">sudo apt-get update<!-- --><\/span><\/span><span style=\"font-weight:400\"> then <!-- --><\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">sudo apt-get upgrade<!-- --><\/span><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If utilizing brew: <!-- --><\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">brew update<!-- --><\/span><\/span><span style=\"font-weight:400\"> then <!-- --><\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">brew reinstall ethereum<!-- --><\/span><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If using a Windows binary: obtain the latest binary from <!-- --><span class=\"chakra-text css-ons8vw\"><a target=\"_blank\" rel=\"noopener\" class=\"chakra-link css-ug8vf0\" href=\"https:\/\/github.com\/ethereum\/go-ethereum\/releases\/tag\/v1.1.3\">https:\/\/github.com\/ethereum\/go-ethereum\/releases\/tag\/v1.1.3<!-- --><\/a><\/span><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<!-- --><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">Master branch commit: <!-- --><span class=\"chakra-text css-ons8vw\"><a target=\"_blank\" rel=\"noopener\" class=\"chakra-link css-ug8vf0\" href=\"https:\/\/github.com\/ethereum\/go-ethereum\/commit\/9ebe787d3afe35902a639bf7c1fd68d1e591622a\">https:\/\/github.com\/ethereum\/go-ethereum\/commit\/9ebe787d3afe35902a639bf7c1fd68d1e591622a<!-- --><\/a><\/span><\/span><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<!-- --><\/p>\n<p><!-- --><\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If compiling from source: <!-- --><span class=\"chakra-text css-ons8vw\"> git fetch origin &amp;&amp; git checkout origin\/master <\/span> followed by a <!-- --><span class=\"chakra-text css-ons8vw\"> make geth <\/span><\/span><\/p>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/blog.ethereum.org\/en\/2015\/09\/10\/security-alert-previous-security-patch-can-lead-to-invalid-state-root-on-go-clients-with-a-specific-transaction-sequence-fixed-please-update\">Reference link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0 Synopsis: Bug in the go client implementation might result in invalid state Impacted client versions: Latest (unresolved) versions of Go client; v1.1.2, v1.0.4 tags and develop, master branches prior to September 9. Probability: Low Seriousness: High Consequence: High Information: The Go Ethereum client fails to accurately restore the state of the execution environment when<\/p>\n","protected":false},"author":3,"featured_media":8282,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[],"class_list":["post-9630","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>&quot;Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence&quot; - WSJ-Crypto<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"&quot;Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence&quot; - WSJ-Crypto\" \/>\n<meta property=\"og:description\" content=\"\u00a0 Synopsis: Bug in the go client implementation might result in invalid state Impacted client versions: Latest (unresolved) versions of Go client; v1.1.2, v1.0.4 tags and develop, master branches prior to September 9. Probability: Low Seriousness: High Consequence: High Information: The Go Ethereum client fails to accurately restore the state of the execution environment when\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/\" \/>\n<meta property=\"og:site_name\" content=\"WSJ-Crypto\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-12T06:31:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2100\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"wsjcrypto\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"wsjcrypto\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minuto\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/\",\"url\":\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/\",\"name\":\"\\\"Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence\\\" - WSJ-Crypto\",\"isPartOf\":{\"@id\":\"https:\/\/wsj-crypto.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg\",\"datePublished\":\"2025-03-12T06:31:27+00:00\",\"author\":{\"@id\":\"https:\/\/wsj-crypto.com\/#\/schema\/person\/88a93723b30416db1a352d5a0096c4a7\"},\"breadcrumb\":{\"@id\":\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#primaryimage\",\"url\":\"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg\",\"contentUrl\":\"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg\",\"width\":2100,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/wsj-crypto.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"&#8220;Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence&#8221;\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/wsj-crypto.com\/#website\",\"url\":\"https:\/\/wsj-crypto.com\/\",\"name\":\"WSJ-Crypto\",\"description\":\"Just Another Crypto News Website\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/wsj-crypto.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/wsj-crypto.com\/#\/schema\/person\/88a93723b30416db1a352d5a0096c4a7\",\"name\":\"wsjcrypto\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/wsj-crypto.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/86fe8af82ea089646d6639ca2f87e0243d8688d957bd8e3ec22ec3c457cc16d4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/86fe8af82ea089646d6639ca2f87e0243d8688d957bd8e3ec22ec3c457cc16d4?s=96&d=mm&r=g\",\"caption\":\"wsjcrypto\"},\"url\":\"https:\/\/wsj-crypto.com\/index.php\/author\/wsjcrypto\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\"Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence\" - WSJ-Crypto","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/","og_locale":"it_IT","og_type":"article","og_title":"\"Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence\" - WSJ-Crypto","og_description":"\u00a0 Synopsis: Bug in the go client implementation might result in invalid state Impacted client versions: Latest (unresolved) versions of Go client; v1.1.2, v1.0.4 tags and develop, master branches prior to September 9. Probability: Low Seriousness: High Consequence: High Information: The Go Ethereum client fails to accurately restore the state of the execution environment when","og_url":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/","og_site_name":"WSJ-Crypto","article_published_time":"2025-03-12T06:31:27+00:00","og_image":[{"width":2100,"height":900,"url":"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg","type":"image\/jpeg"}],"author":"wsjcrypto","twitter_card":"summary_large_image","twitter_misc":{"Scritto da":"wsjcrypto","Tempo di lettura stimato":"1 minuto"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/","url":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/","name":"\"Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence\" - WSJ-Crypto","isPartOf":{"@id":"https:\/\/wsj-crypto.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#primaryimage"},"image":{"@id":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#primaryimage"},"thumbnailUrl":"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg","datePublished":"2025-03-12T06:31:27+00:00","author":{"@id":"https:\/\/wsj-crypto.com\/#\/schema\/person\/88a93723b30416db1a352d5a0096c4a7"},"breadcrumb":{"@id":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#primaryimage","url":"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg","contentUrl":"https:\/\/wsj-crypto.com\/wp-content\/uploads\/2025\/02\/eth-org.jpeg","width":2100,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/wsj-crypto.com\/index.php\/2025\/03\/12\/crucial-update-go-clients-vulnerability-addressed-due-to-specific-transaction-sequence\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wsj-crypto.com\/"},{"@type":"ListItem","position":2,"name":"&#8220;Crucial Update: Go Clients Vulnerability Addressed Due to Specific Transaction Sequence&#8221;"}]},{"@type":"WebSite","@id":"https:\/\/wsj-crypto.com\/#website","url":"https:\/\/wsj-crypto.com\/","name":"WSJ-Crypto","description":"Just Another Crypto News Website","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wsj-crypto.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Person","@id":"https:\/\/wsj-crypto.com\/#\/schema\/person\/88a93723b30416db1a352d5a0096c4a7","name":"wsjcrypto","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/wsj-crypto.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/86fe8af82ea089646d6639ca2f87e0243d8688d957bd8e3ec22ec3c457cc16d4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/86fe8af82ea089646d6639ca2f87e0243d8688d957bd8e3ec22ec3c457cc16d4?s=96&d=mm&r=g","caption":"wsjcrypto"},"url":"https:\/\/wsj-crypto.com\/index.php\/author\/wsjcrypto\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/posts\/9630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/comments?post=9630"}],"version-history":[{"count":2,"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/posts\/9630\/revisions"}],"predecessor-version":[{"id":9632,"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/posts\/9630\/revisions\/9632"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/media\/8282"}],"wp:attachment":[{"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/media?parent=9630"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/categories?post=9630"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wsj-crypto.com\/index.php\/wp-json\/wp\/v2\/tags?post=9630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}