{"id":18875,"date":"2026-04-01T07:56:55","date_gmt":"2026-04-01T07:56:55","guid":{"rendered":"https:\/\/cryptoted.net\/index.php\/2026\/04\/01\/security-alert-previous-security-patch-can-lead-to-invalid-state-root-on-go-clients-with-a-specific-transaction-sequence-fixed-please-update\/"},"modified":"2026-04-01T07:56:55","modified_gmt":"2026-04-01T07:56:55","slug":"security-alert-previous-security-patch-can-lead-to-invalid-state-root-on-go-clients-with-a-specific-transaction-sequence-fixed-please-update","status":"publish","type":"post","link":"https:\/\/cryptoted.net\/index.php\/2026\/04\/01\/security-alert-previous-security-patch-can-lead-to-invalid-state-root-on-go-clients-with-a-specific-transaction-sequence-fixed-please-update\/","title":{"rendered":"Security Alert \u2013 [Previous security patch can lead to invalid state root on Go clients with a specific transaction sequence \u2013 Fixed. Please update.]"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div id=\"\">\n<p class=\"chakra-text css-gi02ar\">\u00a0<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Summary: <\/b><span style=\"font-weight:400\">Implementation bug in the go client may lead to invalid state<\/span><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Affected client versions: <\/b>Latest (unpatched) versions of Go client; v1.1.2, v1.0.4 tags and develop, master branches before September 9.<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Likelihood: Low<\/b><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Severity: High<\/b><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Impact: High<\/b><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Details:<\/b><span style=\"font-weight:400\"> Go ethereum client does not correctly restore state of execution environment when a transaction goes out-of-gas if &#8211; within the same block &#8211; a contract was suicided. This would result in an invalid copy operation of the state object; flagging the contract as <\/span><b>not deleted<\/b><span style=\"font-weight:400\">. This operation would cause a consensus issue between the other implementations.<\/span><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Effects on expected chain reorganisation depth: <\/b><span style=\"font-weight:400\">none<\/span><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Remedial action taken by Ethereum<\/b><span style=\"font-weight:400\">: Provision of hotfixes as below. <\/span><\/p>\n<p class=\"chakra-text css-gi02ar\"><b>Proposed temporary workaround:<\/b><span style=\"font-weight:400\"> Use Python or C++ client<\/span><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If using the PPA: <\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">sudo apt-get update<\/span><\/span><span style=\"font-weight:400\"> then <\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">sudo apt-get upgrade<\/span><\/span><\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If using brew: <\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">brew update<\/span><\/span><span style=\"font-weight:400\"> then <\/span><span class=\"chakra-text css-ons8vw\"><span style=\"font-weight:400\">brew reinstall ethereum<\/span><\/span><\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If using a windows binary: download the updated binary from <span class=\"chakra-text css-ons8vw\"><a target=\"_blank\" rel=\"noopener\" class=\"chakra-link css-vezwxf\" href=\"https:\/\/github.com\/ethereum\/go-ethereum\/releases\/tag\/v1.1.3\">https:\/\/github.com\/ethereum\/go-ethereum\/releases\/tag\/v1.1.3<\/a><\/span><\/span><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">Master branch commit: <span class=\"chakra-text css-ons8vw\"><a target=\"_blank\" rel=\"noopener\" class=\"chakra-link css-vezwxf\" href=\"https:\/\/github.com\/ethereum\/go-ethereum\/commit\/9ebe787d3afe35902a639bf7c1fd68d1e591622a\">https:\/\/github.com\/ethereum\/go-ethereum\/commit\/9ebe787d3afe35902a639bf7c1fd68d1e591622a<\/a><\/span><\/span><\/p>\n<p class=\"chakra-text css-gi02ar\">\u00a0<\/p>\n<p class=\"chakra-text css-gi02ar\"><span style=\"font-weight:400\">If you\u2019re building from source: <span class=\"chakra-text css-ons8vw\"> git fetch origin &amp;&amp; git checkout origin\/master <\/span> followed by a <span class=\"chakra-text css-ons8vw\"> make geth <\/span><\/span><\/p>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/blog.ethereum.org\/en\/2015\/09\/10\/security-alert-previous-security-patch-can-lead-to-invalid-state-root-on-go-clients-with-a-specific-transaction-sequence-fixed-please-update\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0 Summary: Implementation bug in the go client may lead to invalid state Affected client versions: Latest (unpatched) versions of Go client; v1.1.2, v1.0.4 tags and develop, master branches before September 9. Likelihood: Low Severity: High Impact: High Details: Go ethereum client does not correctly restore state of execution environment when a transaction goes out-of-gas [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":18498,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[24],"tags":[],"kronos_expire_date":[],"class_list":["post-18875","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ethereum"],"_links":{"self":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/18875","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/comments?post=18875"}],"version-history":[{"count":0,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/posts\/18875\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media\/18498"}],"wp:attachment":[{"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/media?parent=18875"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/categories?post=18875"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/tags?post=18875"},{"taxonomy":"kronos_expire_date","embeddable":true,"href":"https:\/\/cryptoted.net\/index.php\/wp-json\/wp\/v2\/kronos_expire_date?post=18875"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}