Thread by @AvaxDevelopers

#Avalanche Cortina 3 is now out!

This version (v1.10.3) is backwards compatible with v1.10.0. It's optional but recommended.

Check it out here: github.com/ava-labs/avala…

The release focuses on several key updates:

- Introduction of Push Query on Build
- Build Elimination of VersionDB from MerkleDB
- Fix for platformvm.GetValidatorSet BLS Key Retrieval issue

Heads up to API Operators:

If you're operating an API node, it's crucial to add the following configuration:

“--http-allowed-hosts=["*"]”

This adjustment is a protective measure against DNS rebinding attacks (learn more here: unit42.paloaltonetworks.com/dns-rebinding).

It's especially… twitter.com/i/web/status/1…

While in the past, Keystore API was already safeguarded against such attacks using a username and password combination, this new change extends protection to other private APIs, including the Admin API

For more details, check out the pull request here: github.com/ava-labs/avala…… twitter.com/i/web/status/1…

Disclaimer: Cortina 3 does not alter the VM interface.

This means if you're currently operating a Custom VM on v1.10.1, rest assured it will seamlessly work with the new v1.10.3.

Introduction of Push Query on Build

This update ensures that push queries, which disseminate information about the block a node is investigating, are exclusively sent by the block builder.

This strategic move drastically minimizes the transmission and reception of superfluous… twitter.com/i/web/status/1…

Dive deeper into this enhancement by visiting the pull request: github.com/ava-labs/avala…

In the past, AvalancheGo used to dispatch a PushQuery every time it authenticated a new block, targeting 10 validators chosen based on stake weight.

However, it was frequently observed that the peers receiving the block gossip from AvalancheGo already possessed the block. This… twitter.com/i/web/status/1…

- Build Elimination of VersionDB from MerkleDB

We've made a significant change in our database management - VersionDB has been removed from MerkleDB.

Previously, MerkleDB used to record all pending writes into an instance of the VersionDB to ensure write atomicity. However,… twitter.com/i/web/status/1…

For a more detailed understanding, check out the pull request here:

github.com/ava-labs/avala….

This is part of our continuous efforts to streamline and optimize Avalanche's operations.

We've carried out a vital update concerning the retrieval of BLS Keys in the platformvm.GetValidatorSet.

In the past, if a validator chose to unstake and then restake within a certain time frame, the platformvm.GetValidatorSet would fail to return a BLS key for that particular… twitter.com/i/web/status/1…

For a more comprehensive understanding, you can review the pull request at this link:

github.com/ava-labs/avala….

This bug had the potential to hinder a Subnet from verifying a new AWM (liveness), although it wouldn't have permitted incorrect verification of an AWM (safety).

This issue came to light during the finalization of Teleporter, our solution for EVM<>EVM AWM support.

We're… twitter.com/i/web/status/1…

Also - in case you missed it, you can now keep track of what our engineering team is working on with the new AvalancheGo project tracker.

Stay updated with our progress and join the conversation here: github.com/orgs/ava-labs/….