Reth Vulnerability Addressed
All user funds remain safe, with no identified impact to Celo network operations or users.
The Celo Core Co. engineering team responded immediately upon learning of the Reth vulnerability on November 4, taking action that same day to investigate the issue, assess the network's exposure, and implement and test a fix.
The team moved quickly to release celo-reth v1.0.9 and upgrade Celo's sequencer and all team-operated nodes, mitigating the primary risk of incorrect state root calculations. We also proactively alerted infrastructure partners and began coordinating upgrades across the ecosystem.
Node operators running celo-reth should upgrade to v1.0.9 as soon as possible.
Release:
We appreciate the rapid response from our engineering team and the collaboration of our ecosystem partners in maintaining Celo's security and reliability.