Code Browser

privval: static identity key for CometBFT side of the connection

FilePV HRS state can roll back after atomic rename, allowing conflicting validator signatures

Committed evidence can be accepted again after restart if the committed marker write fails

rpc/client/http: unbuffered subscription can stall WebSocket event dispatch

config.toml: bootstrap_peers rendered onto its comment line (trim-marker collapses newline)

Offering a free security review — no strings attached

Evidence `Hash` is 1byte off

Local 4-node testnet fails to peer on macOS 26.4.1 — `chacha20poly1305: message authentication failed`

PoI (Proof-of-Information Consensus)

Bug: idFromInterface overflows int on large JSON-RPC numeric ids

Malicious Peer Can Disrupt Blocksync Synchronization

post-quantum or hybrid signature scheme support

Bug: fatal: make_cache_entry failed for path '.github/workflows/e2e-nightly-38x.yml '

PebbleDB v1.1.5 has 32-bit limitations. PebbleDB v2+ does not

Free Web3 Security Review for Your Repository

Expose WebSocket connection lifecycle events (disconnect/reconnect) in the Go RPC client for reliable event subscriptions

Proposer Priority Hash Miscalculation

Version string mismatch in v0.37.17, v0.37.18; retry release CI job

add unit tests for TotalVotingPowerSafe method in v0.38.x and main

Add configuration to disable O_SYNC in PrivValidator file writes for performance tuning

Add Chain Option to Include Vote Extensions in FinalizeBlock

[config] Viper flag defaults prevent config.toml overrides in v2.0-rc1

missing binaries for 0.38.19 and 0.37.16

privval: better handling of remote signer errors

types: Protobuf Serialization Is Not Canonical

Resource Exhaustion of External Private Validator Endpoint

double_sign_check_height = 1 does not perform any double sign checks

Fix flaky test

BLS support back into comet

Block pruning / retention settings ignored by cometbft