Snowbridge Ethereum client spec fix#10793
Merged
bkontur merged 11 commits intoparitytech:masterfrom Jan 26, 2026
Merged
Conversation
Contributor
Author
|
Need labels T15-bridges and A4-backport-stable2512 please. |
acatangiu
added
T15-bridges
acatangiu
approved these changes
Jan 19, 2026
bkontur
approved these changes
Jan 19, 2026
Contributor
|
/cmd fmt |
auto-merge was automatically disabled
January 26, 2026 08:41
Head branch was pushed to by a user without write access
Merged
via the queue into
paritytech:master
with commit Jan 26, 2026
2da3987
206 of 208 checks passed
paritytech-release-backport-bot bot
pushed a commit
that referenced
this pull request
Jan 26, 2026
This PR fixes a minor discrepancy in the Snowbridge Ethereum cient pallet where the fork version for sync committee signature verification was derived from `signature_slot` instead of `signature_slot - 1` as required by the https://github.com/ethereum/consensus-specs/blob/dev/specs/altair/light-client/sync-protocol.md#validate_light_client_update. This caused valid light client updates to be rejected at Ethereum hard-fork boundaries. The impact is low severity - only affecting liveness once or twice a year for a few minutes. Origin: bug bounty report. --------- Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com> (cherry picked from commit 2da3987)
|
Successfully created backport PR for |
EgorPopelyaev
added a commit
that referenced
this pull request
Feb 4, 2026
Backport #10793 into `stable2512` from claravanstaden. See the [documentation](https://github.com/paritytech/polkadot-sdk/blob/master/docs/BACKPORT.md) on how to use this bot. <!-- # To be used by other automation, do not modify: original-pr-number: #${pull_number} --> Co-authored-by: Clara van Staden <claravanstaden64@gmail.com> Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Egor_P <egor@parity.io>
github-project-automation
bot
moved this from Todo
to Done
in [preview] release tracker
github-project-automation
bot
moved this from Todo
to Done
in [preview] release tracker
arturgontijo
pushed a commit
to moonbeam-foundation/polkadot-sdk
that referenced
this pull request
Apr 1, 2026
Backport paritytech#10793 into `stable2512` from claravanstaden. See the [documentation](https://github.com/paritytech/polkadot-sdk/blob/master/docs/BACKPORT.md) on how to use this bot. <!-- # To be used by other automation, do not modify: original-pr-number: #${pull_number} --> Co-authored-by: Clara van Staden <claravanstaden64@gmail.com> Co-authored-by: cmd[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Egor_P <egor@parity.io>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR fixes a minor discrepancy in the Snowbridge Ethereum cient pallet where the fork version for sync committee signature verification was derived from
signature_slotinstead ofsignature_slot - 1as required by the https://github.com/ethereum/consensus-specs/blob/dev/specs/altair/light-client/sync-protocol.md#validate_light_client_update. This caused valid light client updates to be rejected at Ethereum hard-fork boundaries. The impact is low severity - only affecting liveness once or twice a year for a few minutes. Origin: bug bounty report.