{"id":18851,"date":"2026-03-31T11:42:10","date_gmt":"2026-03-31T11:42:10","guid":{"rendered":"https:\/\/cryptoted.net\/index.php\/2026\/03\/31\/security-alert-implementation-of-blockhash-instruction-in-c-and-go-clients-can-potentially-cause-consensus-issue-fixed-please-update\/"},"modified":"2026-03-31T11:42:10","modified_gmt":"2026-03-31T11:42:10","slug":"security-alert-implementation-of-blockhash-instruction-in-c-and-go-clients-can-potentially-cause-consensus-issue-fixed-please-update","status":"publish","type":"post","link":"https:\/\/cryptoted.net\/index.php\/2026\/03\/31\/security-alert-implementation-of-blockhash-instruction-in-c-and-go-clients-can-potentially-cause-consensus-issue-fixed-please-update\/","title":{"rendered":"Security alert [Implementation of BLOCKHASH instruction in C++ and Go clients can potentially cause consensus issue \u2013 Fixed. Please update.]"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div id=\"\">\n<p class=\"chakra-text css-gi02ar\"><b>Summary: <\/b>Erroneous implementation of BLOCKHASH can trigger a chain reorganisation leading to consensus problems<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Affected configurations: <\/b>All geth versions up to 1.1.3 and 1.2.2. All eth versions prior to 1.0.0.<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Likelihood: <\/b>Low<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Severity: <\/b>Medium<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Impact: <\/b>Medium<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Details:<\/b> Both C++ (eth) and Go (geth) clients have an erroneous implementation of an edge case in the Ethereum virtual machine, specifically which chain the BLOCKHASH instruction uses for retrieving a block hash. This edge case is very unlikely to happen on a live network as it would only be triggered in certain types of chain reorganisations (a contract executing BLOCKHASH(N &#8211; 1) where N is the head of a non-canonical subchain that is not-yet reorganised to become the canonical (best\/longest) chain but will be after the block is processed).<\/p>\n<p class=\"chakra-text css-gi02ar\">pyethereum is unaffected.<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Effects on expected chain reorganisation depth: <\/b>none<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Remedial action taken by Ethereum<\/b>: Provision of hotfixes as below.<\/p>\n<h3 class=\"chakra-heading group css-xuzltg\" id=\"geth\" data-group=\"true\"><a class=\"chakra-link css-128fqrf\" aria-label=\"geth permalink\" href=\"#geth\"><svg viewbox=\"0 0 24 24\" focusable=\"false\" class=\"chakra-icon css-173jpr1\"><g fill=\"currentColor\"><path d=\"M10.458,18.374,7.721,21.11a2.853,2.853,0,0,1-3.942,0l-.892-.891a2.787,2.787,0,0,1,0-3.941l5.8-5.8a2.789,2.789,0,0,1,3.942,0l.893.892A1,1,0,0,0,14.94,9.952l-.893-.892a4.791,4.791,0,0,0-6.771,0l-5.8,5.8a4.787,4.787,0,0,0,0,6.77l.892.891a4.785,4.785,0,0,0,6.771,0l2.736-2.735a1,1,0,1,0-1.414-1.415Z\"\/><path d=\"M22.526,2.363l-.892-.892a4.8,4.8,0,0,0-6.77,0l-2.905,2.9a1,1,0,0,0,1.414,1.414l2.9-2.9a2.79,2.79,0,0,1,3.941,0l.893.893a2.786,2.786,0,0,1,0,3.942l-5.8,5.8a2.769,2.769,0,0,1-1.971.817h0a2.766,2.766,0,0,1-1.969-.816,1,1,0,1,0-1.415,1.412,4.751,4.751,0,0,0,3.384,1.4h0a4.752,4.752,0,0,0,3.385-1.4l5.8-5.8a4.786,4.786,0,0,0,0-6.771Z\"\/><\/g><\/svg><\/a><strong>Geth:<\/strong><\/h3>\n<p><strong>PPA<\/strong>: sudo apt-get update then sudo apt-get upgrade<\/p>\n<p class=\"chakra-text css-gi02ar\"><strong>Brew<\/strong>: brew update then brew reinstall ethereum<\/p>\n<p class=\"chakra-text css-gi02ar\"><strong>Windows<\/strong>: download the updated binary from <a target=\"_blank\" rel=\"noopener\" class=\"chakra-link css-vezwxf\" href=\"https:\/\/github.com\/ethereum\/go-ethereum\/releases\/tag\/v1.2.3\"\/><a target=\"_blank\" rel=\"noopener\" class=\"chakra-link css-vezwxf\" href=\"https:\/\/github.com\/ethereum\/go-ethereum\/releases\/tag\/v1.2.3\">https:\/\/github.com\/ethereum\/go-ethereum\/releases\/tag\/v1.2.3<\/a><\/p>\n<p class=\"chakra-text css-gi02ar\"><strong>Building from source:<\/strong><\/p>\n<div class=\"chakra-stack css-1jx0in4\">\n<pre>git fetch origin &amp;&amp; git checkout origin\/master<\/pre>\n<\/div>\n<h3 class=\"chakra-heading group css-xuzltg\" id=\"eth\" data-group=\"true\"><a class=\"chakra-link css-128fqrf\" aria-label=\"eth permalink\" href=\"#eth\"><svg viewbox=\"0 0 24 24\" focusable=\"false\" class=\"chakra-icon css-173jpr1\"><g fill=\"currentColor\"><path d=\"M10.458,18.374,7.721,21.11a2.853,2.853,0,0,1-3.942,0l-.892-.891a2.787,2.787,0,0,1,0-3.941l5.8-5.8a2.789,2.789,0,0,1,3.942,0l.893.892A1,1,0,0,0,14.94,9.952l-.893-.892a4.791,4.791,0,0,0-6.771,0l-5.8,5.8a4.787,4.787,0,0,0,0,6.77l.892.891a4.785,4.785,0,0,0,6.771,0l2.736-2.735a1,1,0,1,0-1.414-1.415Z\"\/><path d=\"M22.526,2.363l-.892-.892a4.8,4.8,0,0,0-6.77,0l-2.905,2.9a1,1,0,0,0,1.414,1.414l2.9-2.9a2.79,2.79,0,0,1,3.941,0l.893.893a2.786,2.786,0,0,1,0,3.942l-5.8,5.8a2.769,2.769,0,0,1-1.971.817h0a2.766,2.766,0,0,1-1.969-.816,1,1,0,1,0-1.415,1.412,4.751,4.751,0,0,0,3.384,1.4h0a4.752,4.752,0,0,0,3.385-1.4l5.8-5.8a4.786,4.786,0,0,0,0-6.771Z\"\/><\/g><\/svg><\/a><strong>Eth:<\/strong><\/h3>\n<p><strong>PPA<\/strong>: <a target=\"_blank\" rel=\"noopener\" class=\"chakra-link css-vezwxf\" href=\"https:\/\/gavofyork.gitbooks.io\/turboethereum\/content\/chapter1.html\">https:\/\/gavofyork.gitbooks.io\/turboethereum\/content\/chapter1.html<\/a>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/blog.ethereum.org\/en\/2015\/10\/22\/security-alert-implementation-of-blockhash-instruction-in-c-and-go-clients-can-potentially-cause-consensus-issue-fixed-please-update\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Summary: Erroneous implementation of BLOCKHASH can trigger a chain reorganisation leading to consensus problems Affected configurations: All geth versions up to 1.1.3 and 1.2.2. All eth versions prior to 1.0.0. Likelihood: Low Severity: Medium Impact: Medium Details: Both C++ (eth) and Go (geth) clients have an erroneous implementation of an edge case in the Ethereum [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":18498,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[24],"tags":[],"kronos_expire_date":[],"class_list":["post-18851","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ethereum"],"_links":{"self":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/18851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/comments?post=18851"}],"version-history":[{"count":0,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/18851\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media\/18498"}],"wp:attachment":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media?parent=18851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/categories?post=18851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/tags?post=18851"},{"taxonomy":"kronos_expire_date","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/kronos_expire_date?post=18851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}