83 posts tagged with "ledger"

High level summary​

We implemented the remaining improvements and fixes discovered in Conway, to be fixed during the bootstrap period: * protection against deposit loses * ensuring that DReps exist before delegating * updates to SPO vote threshold calculation * improved well-formedness check Additionally, we added two new rules: Mempool and HardFork, that will allow us to flexibly add processing logic in the future. We also dropped pointers for Conway and enhanced predicate failure reporting for pre-Conway eras.

Finally, we added more tests - both unit and conformance tests.

Low level summary​

• pull-4647 - Drop pointers from UMap in Conway
• pull-4642 - Mempool rule
• pull-4553 - Address issues in auto-generated CDDL specification
• pull-4650 - Check ppuCoinsPerUTxOBytes well-formedness
• pull-4648 - Updated conformance to work with new MAlonzo types
• pull-4653 - Improve color output in Imp spec
• pull-4603 - Add more tests for voting behaviour
• pull-4639 - Prevent non-registered return accounts for proposals' deposits and TreasuryWithdrawals
• pull-4632 - Export Unsafe constructors for TxBody, TxBodyRaw and MemoBytes
• pull-4654 - Add applyTxOpts to ApplyTx
• pull-4657 - HardFork rule
• pull-4659 - Change how SPO votes are counted
• pull-4660 - UTXO conformance with Babbage transactions
• pull-4652 - Ensure dreps exist prior to delegation
• pull-4649 - Mismatch type for predicate failures
• pull-4676 - constrained-generators: (++.) and singleton_ for lists
• pull-4679 - Fixes for release

High level summary​

Aside from more testing and overall quality-of-life improvements on the ledger test suite side, we have implemented a couple of important features that will be enabled after the next intra-era hard fork:

• Translation of RegTxCert and UnRegTxCert to PlutusV3 scripts context will now be done correctly, which means deposit and refund respectively, will actually be translated.
• Treasury withdrawals that are empty or sum up to zero will no longer be allowed.

Some performance improvements and a bug fix to a ledger event were also implemented during this period.

Low level summary​

Features​

• pull-4623 - Change GovInfoEvent's "unclaimed" field from Set to a Map
• pull-4627 - Fix Conway implementation of RegTxCert and UnRegTxCert
• pull-4643 - Improve certificate performance
• pull-4630 - Disallow empty withdrawals
• pull-4646 - Don't return ZeroTreasuryWithdrawals failure during bootstrap

Testing​

• pull-4497 - Show coloured tree-diff output in ImpTests
• pull-4615 - Prevent HSpec from messing with ImpSpec colors
• pull-4625 - Additional DELEG tests
• pull-4599 - Move TxInfo golden tests to new package
• pull-4629 - Add TxInfo golden test for Conway
• pull-4575 - Ts salvage newtylespecs

Infrastructure and releasing​

• pull-4624 - Remove upper bound on plutus-ledger-api
• pull-4626 - Fix CODEOWNERS
• pull-4638 - Implement ghc heap limiting and retrying in CI
• pull-4644 - Cardano ledger conway 1.16.2.0

Unexpected Ledger State Replay in the Conway era​

An issue was identified shortly before the Chang hard fork: it was found that ledger state snapshots would break ledger replay in the Conway era under mainnet conditions. The ledger and consensus teams worked rapidly to resolve the issue with a hotfix released within 24 hours of the hard fork. In order to avoid pauses in node availability, it was recommended that users should not restart their node process until they had upgraded their node to the hotfix - this included any node type: relays, block producers, DB-Sync nodes, etc.

The issue is documented here. The cause was a slight inconsistency between the ledger state snapshots that were written and those that could be read back; a side effect of the removal of pointer addresses in the Conway era. Nodes version 9.1.1 and later resolve this issue.

Further Details​

Node version 9.1.1

GitHub Issue

Issue Caused by Large Reference Scripts on Cardano Mainnet​

On 25th June 2025, a Cardano user inserted a series of transactions, each containing 194 large reference scripts onto the mainnet chain, funded from 3 wallets containing around 20K ada each. High deserialisation costs for these reference scripts impacted the node, resulting in network disruption to block producer nodes, an increase in network load, and some slowdown in transaction throughput.

The direct effect lasted about 12 hours until it was stopped by a community member, at a cost of 4603 ada to the user who had created the transactions. Overall, the network responded extemely well to the increased load, showing a high level of resilience, with some reduction in transaction throughput related to the overall high system load. The community response to the event was positive, praising the speed of response, the robustness of the Cardano network, the cohesion of the Cardano community, and its ability to diagnose and manage issues such as this.

Mitigations Deployed​

The general issue had already been identified, and a mitigation (costing for reference scripts) had been prepared as part of the Chang hard fork, but not yet deployed to mainnet. Based on the event, stronger mitigations were prepared, including restricting large reference scripts, and changing the cost model. These mitigations were deployed via node versions 8.9.4, 8.12.1 or 8.12.2, and incorporated into node version 9.0.0 or later for the Chang hard fork.

Public Reports on the Incident​

Coindesk Report

Nasdaq Report

High level summary​

One specific Conway feature that received a lot of debate has finally been implemented, namely disallowing stake credentials from withdrawing rewards, that are backed by a key hash and have not delegated to any DRep. This feature will go into effect after the bootstrap phase.

A whole lot more tests were added and few minor bug fixes have been implemented as well. In particular GovInfoEvent ledger event has been fixed, which is unlikely to affect anyone, but it is worth pointing out. Ledger state deserialization bug was fixed that was necessary for the cardano-node-9.1.1 release. Some tech dept was taken care of, like cleanup of unnecessary predicate failures and fixing some flaky tests from Byron and Alonzo eras.

Low level summary​

Features​

• pull-4218 - Remove maxMajorPV from Globals
• pull-4589 - Fix deserialization of bad Ptrs in IncrementalStake
• pull-4555 - Disallow withdrawals to non-delegated keyhashes post-bootstrap
• pull-4600 - Stop reporting invalid refund when stake credential is not registered
• pull-4604 - Fix enacted Set in GovInfoEvent
• pull-4616 - Change ConwayWdrlNotDelegatedToDRep to wrap KeyHashes
• pull-4609 - Removed DRepAlreadyRegisteredForStakeKeyDELEG

Testing​

• pull-4565 - ENACT conformance
• pull-4541 - Fix failing tests in cardano-ledger-alonzo-test
• pull-4585 - Fixes a property test "Ran out of tries on suchThatT"
• pull-4543 - Increased the probability of generating the same hash more than once
• pull-4574 - Byron: Force startTime in genesis data to be strict
• pull-4596 - fix both reproduceable failures
• pull-4586 - Byron: Fix failing ts_prop_elaboratedCertsValid test by moving mainnet-genesis.json to the appropriate path
• pull-4584 - Sort Proposals when translating to SpecRep
• pull-4546 - Ts additions prime spec cert steps
• pull-4607 - Refactor debug tracing of QuickCheck discards
• pull-4597 - DELEG Imp spec

Infrastructure and releasing​

• pull-4578 - Stop generation of haddock for internal modules
• pull-4611 - Fix haddock: remove --show-all to test
• pull-4569 - Fix fourmolu version for pre-commit shell
• pull-4587 - docs: update README.md
• pull-4591 - cardano-node-9.1 backport: Implement a fix for inability to deserialize pointers in Conway
• pull-4590 - cardano-node-9.2 backport: Implement a fix for inability to deserialize pointers in Conway
• pull-4593 - Plutus 1.33
• pull-4614 - Changelog for cardano-node-9.2
• pull-4608 - Remove dependency bounds on QuickCheck