Heimdall v0.11.0 is here, introducing the Kyoto hardfork and key security enhancements.

This release formalizes the Kyoto hardfork, a set of consensus-hardening changes. Please note that the activation heights for this hardfork have already passed on both Mainnet (block 51,533,000) and Amoy (block 42,252,000). This release brings the public source code in line with what is already running on the network.

Kyoto Hardfork Highlights:

• Fee Coin Cap: A limit has been placed on the number of different coins that can be used in a transaction's fee. This is a preventative measure against potential denial-of-service vectors.
• Consensus Hardening: This update strengthens consensus rules across several modules. Key changes include:
  • Bounding the nesting depth of transactions to prevent resource exhaustion attacks.
  • Making the Bor producer-downtime handler idempotent.
  • Improving validation of checkpoint window continuity.

Important Build & Dependency Updates:

• Go Version Requirement: Building Heimdall v0.11.0 now requires Go 1.26.5.
• Cosmos SDK Update: The codebase is updated to use Polygon Cosmos SDK v0.2.14-polygon. This resolves security vulnerabilities by replacing a deprecated OpenPGP implementation with a maintained one.

Other Changes:

• Updated Network Seeds: The seed node lists for both Mainnet and Amoy have been updated to improve peer discovery and network connectivity for nodes.
• Configuration Source Update: The URL for fetching team standards has been moved to an official, organization-owned repository for improved security and maintainability.