- Added expedited gov proposals
- Initial params (can be amended with a param change proposal):
- Minimum deposit: 750 SCRT
- Voting time: 24 hours
- Voting treshhold: 2/3 yes to pass
- If an expedited proposal fails to meet the threshold within the scope of shorter voting duration, the expedited proposal is then converted to a regular proposal and restarts voting under regular voting conditions.
- Initial params (can be amended with a param change proposal):
-
Fixed issue causing registrations to fail
-
Changed internal WASM engine to Wasm3 from Wasmi. Contract performance increased greatly
-
Added seed rotation. On upgrade the network will fetch a new seed and use it for derivation of keys and encryption -
Seed rotation has been delayed to the next network upgrade
-
Changed default grpc-concurrency to false (from true). For nodes that serve API requests, we highly recommend setting this manually to true as described in the release notes for version 1.5.1
-
Changed peer rejected tendermint log to debug so it's hidden by default (from info)
-
Increased tendermint query limit to 1000 (from 100)
-
Bumped to tendermint 0.34.24
-
Bumped to cosmos-sdk 0.45.11
-
Changed base gas prices:
- Default instruction cost 1 -> 2
- Div instruction cost 16 -> 2
- Mul instruction cost 4 -> 2
- Mem instruction cost 2 -> 2
- Contract Entry cost 100,000 -> 20,000
- Read from storage base cost 1,000 -> 10
- Write to storage base cost 2,000 -> 20
-
SecretJS 1.5 has been released, and uses GRPC-Gateway endpoints. Check it out: https://www.npmjs.com/package/secretjs or https://github.com/scrtlabs/secret.js
-
Add check-hw tool that returns patch-level and compatibility information for hardware
29/11/2022 - Startup fix due to TCB recovery - startup validation on 1.5.1 does not account for SW_HARDENING_NEEDED including INTEL-SA-00615 in it's response. Registering using this binary will not work, however restarting your node can be done using the _startup_bypass packages.
Fix for GRPC-gateway concurrency. This will greatly improve performance on nodes serving queries to GRPC-gateway requests (REST requests going to v1beta1/blah/blah)
Note that concurrency is toggled from the "concurrency" flag under GRPC in app.toml - see an example below. (max-send-msg-size and max-recv-msg-size are also new, but are less important)
In this version the default is set to true for ease of deployment - We currently recommend for validators to not update to this version, or if you do, manually set concurrency to false. This update is for node runners that provide API services to increase performance of nodes that serve queries.
In this release we also include a special version for nodes that serve queries from legacy apps (those that use secretjs 0.x, for example Keplr) - this version contains an unstable patch that serves legacy LCD and rpc requests much faster. This fix has been found to be unstable at scale, and should be used sparingly until secretjs 1.5 is released and apps upgrade to the latest version
[grpc]
# Enable defines if the gRPC server should be enabled.
enable = true
# Address defines the gRPC server address to bind to.
address = "0.0.0.0:9090"
# The default value is math.MaxInt32.
max-recv-msg-size = "10485760"
# The default value is math.MaxInt32.
max-send-msg-size = "2147483647"
# Concurrency defines if node queries should be done in parallel.
# This is experimental and has led to node failures, so enable with caution.
# The default value is true.
concurrency = true
- Fix IBC contracts bug (#1199)
- Fix creating accounts using ICA (#1215)
- Fix node registration (#1221)
- Fix nested attributes in contracts reply (#1241)
- Fix state sync (#1243)
- Fix some protobuf type names (256d9b)
- Update cosmos-sdk from v0.45.9 to v0.45.10
- Update Tendermint from v0.34.21 to v0.34.22
- Update ibc-go from v3.3.0 to v3.3.1
- Patch againt the IBC Dragonberry vulnerability
- Update cosmos-sdk from v0.45.5 to v0.45.9
- Update Tendermint from v0.34.19 to v0.34.21
- CosmWasm v1
- Bump WASM gas cost:
- Base WASM invocation 10k -> 100k
- WASM storage access 2k per access
- Support MetaMask pretty signing
- Ledger support for x/authz & x/feegrant
- Revert Chain of Secrets tombstone state and restore slashed funds
- Update ibc-go from v3.0.0 to v3.3.0
- Use all available cores to serve queries.
- Mainnet docker image with automatic node registration & state sync (docs).
- Mempool optimizations (Thanks @ValarDragon!). For more info see this.
- Fix missing
libsnappy1v5
dependency for rocksdb deb package. - Update
${LCD_URL}/swagger/
for v1.3 and add${LCD_URL}/openapi/
.
-
Bug fix when calculating gas prices caused by queries. This is will increase gas prices for contracts that use external queries, and will more accurately reflect resources used
-
Update cosmos-sdk from v0.44.5 to v0.45.4
- Add the
secretd rollback
command - Add the
~/.secretd/.compute
directory to state sync - Full changelog:
cosmos-sdk/v0.44.5...v0.45.4
- Add the
-
Update tendermint from v0.34.16 to v0.34.19
-
Fix registration failure for Intel Xeon 23xx-series processors (icelake still unsupported)
-
Floating point checks no longer ran on execute (only on init)
-
Update ibc-go from v1.1.5 to v3.0.0
- Added support for ICS27 - default host messages include voting, delegate/undelegate and voting
- Full changelog:
ibc-go/v1.1.5...v1.3.0
-
Backport API from CosmWasm v1:
ed25519_verify()
ed25519_batch_verify()
secp256k1_verify()
secp256k1_recover_pubkey()
-
Add new secret CosmWasm API:
ed25519_sign()
secp256k1_sign()
-
Registeration service has been reworked. Registering a new node automatically now no longer requires a node to function properly. It also includes built-in support for the pulsar-2 testnet with the --pulsar flag.
-
Secretcli now automatically appends either port 80 or port 443 when not providing any port using
secretcli config
if the node address starts withhttp://
orhttps://
This version only a bug fix in the 1.2.5 release
Architecture now split into query nodes and validator nodes. Query nodes contain optimizations that may not be entirely safe for validators and greatly improve querying performance. In addition, contracts are now served by two different enclaves: Query enclaves and execute enclaves. This will allow upgrading query enclave and improving performance without consensus-breaking changes. Lastly, rocksdb support is enabled. We are releasing binaries for each supported Database. Rocksdb is recommended for performance, but requires a resync of any nodes currently running goleveldb.
- Added Rocksdb support (currently Ubuntu 20.04 only)
- Added new query node setup
- Changed default behaviour to not print help on errors. Use -h if you miss it:)
- Added support for Ledger using Secret Network coin type (529). Creating keys using
secretcli keys add x --ledger
will use this by default. To create keys compatible with the Cosmos ledger app continue to use--legacy-hd-path
(thanks @SecretSaturn)
- #879 Enclave multithreading + dedicated query enclave
- #881 Added telemetry measurements to compute module #881
- #882 Shutting up usage help by default in CLI #882
- #884 Bumping cosmos sdk version to v0.44.6 and added rocksdb support
- Fixed creating permits with Secretcli
- Fixed issue where queries would try to access the Enclave in parallel from multiple threads,
causing
SGX_ERROR_OUT_OF_TCS
to be returned to users when a node was under sufficient load. Queries now access the enclave one-at-a-time again.
This is a minor non-breaking version release.
- Migrate the
secretcli tx sign-doc
command from v1. See this for more info.
Version 1.2.0 has been released - the Supernova upgrade!
-
Upgraded to Cosmos SDK 0.44.3. Full changelog can be found here
-
Gas prices are lower - as a result of performance upgrades and optimizations, gas amounts required will be much lower.
-
GRPC for cosmos-sdk modules in addition to legacy REST API. See API here
-
New modules:
-
Auto Registration - The new node registering process is now automated via a new command
secretd auto-register
- The endpoint
/reg/consensus-io-exch-pubkey
has been changed to/reg/tx-key
and now returns{"TxKey": bytes }
- The endpoint
/reg/consensus-seed-exch-pubkey
has been changed to/reg/registration-key
and now returns{"RegistrationKey": bytes }
GRPC endpoints have been added for cosmos-sdk modules in addition to legacy REST APIs, which remain mostly unchanged.
GRPC endpoints for the registration and compute modules will be added in a future testnet release
Unlike other cosmos chains, we chose to maintain the differentiating CLI and Node runner executable differences. SecretCLI still contains the interface for all user-facing commands and trying to run node-running commands using SecretCLI will fail. Secretd now contains both node-running and user-facing commands.
As a result of cosmos-sdk upgrade, some CLI commands will have different syntax
Secretd nodes now run the REST API (previously named LCD REST server) by default on port 1317. You can change this behavior by
modifying /home/<account>/.secretd/config/app.toml and looking for the api
configuration options
Version 0.17.3 has been released! SecretJS has been upgraded to support the Supernova upgrade. All APIs remain unchanged, although the versions are NOT backwards compatible.
For compatiblity with 1.2.0+, use SecretJS 0.17.x. For compatiblity with 1.0.x (legacy), use SecretJS 0.16.x
Secret-CosmWasm remains in a version that is compatabile with the v0.10 of vanilla CosmWasm, and previous versions compatible with secret-2 will still work with this upgrade.
A new feature has been added - plaintext logs. To send an unencrypted log (contract output), use plaintext_log
instead of log
.
This allows contracts to emit public events, and attach websockets to listen to specific events. To take advantage of this feature, compile contracts with
cosmwasm-std = { git = "https://github.com/scrtlabs/SecretNetwork", tag = "v1.2.0" }
- SecretCLI still uses /home/.secretd to store configuration and keys
- Signatures other than secp256k1 are unsupported for CosmWasm transactions.
- snip20 CLI commands not working
- IBC commands not yet working
- Fee grant messages not supported by CosmWasm
- SecretCLI incompatible on M1 Mac
- /reg/registration-key returns malformed data
- To register a new node the environment variable SCRT_SGX_STORAGE should be set to "./" or the registration process might fail
- SecretCLI/Secretd default gas prices are set to 0 while nodes default to 0.25uscrt