Base said it identified the vulnerability on November 4 and patched all block-building nodes that day. The network later recalculated its state root and confirmed it matched the correct value. Its proof system independently checks state roots, the team said, adding: “We’ve verified the current state root is correct and users were not affected.”
Base released version 1.5.3 to prevent validators from halting when they encounter invalid state roots. It advised node operators to upgrade, but said they would not need to resynchronize nodes or carry out other recovery steps. A status notice listed a maintenance window through November 7 at 16:19 UTC; the public patch became available at 17:52 UTC on November 5.
The flaw affects how certain Reth versions calculate a state root, a cryptographic representation of accounts, balances and smart-contract storage. Incorrect results could leave nodes out of sync with the network or produce unreliable proofs through the eth_getProof interface. Security firm Blockaid described the issue as a software correctness bug, not a confirmed exploit, and reported no known financial losses.
Reth, an Ethereum execution client developed by Paradigm, was updated after a fix merged on GitHub on November 3. The correction was included in Reth 2.10.0 and op-reth 2.8.1. BNB Chain said on November 6 that developers were preparing a hotfix for BSC-Reth and monitoring the issue; it said no action was required from users at that time. LayerZero also temporarily suspended some off-chain infrastructure connected to affected networks, delaying some cross-chain messages, which reports said would not be lost.
Comments (0)
No comments yet. Be the first!