Alongside the Reth merge, the Neo X Geth oracle was synced to its latest baseline, and both MainNet and TestNet genesis files were verified to match canonical bytes, preserving genesis block hashes. The update ships with Linux and Windows x86_64 binaries, each published with SHA-256 checksums. aarch64 artifacts were not built for this release.
Security remediation
Nine cargo audit vulnerabilities were resolved through dependency updates to quinn-proto 0.11.18 and rustls 0.23.46. The project now reports zero known vulnerabilities from cargo audit.
The security review was conducted by an agent-authorized process rather than an independent third-party audit, a distinction noted in the release as a recorded risk acceptance.
DKG lifecycle hardening
Four changes target reliability in the DKG validator lifecycle, addressing failure modes observed during extended validation runs:
- DKG preparations now survive canonical head advances, preventing previously stranded states.
- Rejected Submit operations restore the validator to Ready state instead of leaving the prepared task orphaned.
- Share matching now uses round and aggregate global key together, eliminating false epoch-mismatch failures during normal block progression.
- Signer shares are no longer re-installed on every block; the system hashes settled canonical inputs instead of the canonical head.
These fixes address edge cases where DKG state could become inconsistent across block boundaries, scenarios that would surface during sustained multi-round validation.
Validation and testing
The release candidate was validated through a 1,402-block G8 gate spanning heights 2,404 to 3,805. The gate confirmed DKG round progression from round one to two, maintained identical 128-byte aggregate commitment throughout, and recorded zero reorgs and zero transient RPC errors.
Envelope decryption was verified in both current-epoch and cross-epoch scenarios, with a saved round-one envelope successfully decrypted and mined after the chain advanced to round two. Fault testing included 60-second prover delays, forced process restarts, and missing-receipt share replacement. All 427 Neo X tests pass, along with clean clippy and formatting checks.
Datadir compatibility was also confirmed. A v2.7.0 data directory and DKG keystore opened successfully under v2.5.2, and the release binary loaded an existing MainNet archive datadir.
Looking ahead
Full clean-datadir MainNet sync from genesis remains in progress following the release, though peer connection and the headers pipeline have been verified. neox-rs continues to serve as an independent Rust implementation of the Neo X protocol, providing client diversity alongside the Go-based Neo X Geth maintained by Bane Labs.
The release page can be found at the link below:
https://github.com/R3E-Network/neox-rs/releases/tag/neox-v2.7.0
