Web3Signer
Consensys · Java · Apache-2.0
Remote signing service for validator keys with slashing-protection DB.
remote-signer
Releases
33 releases
Web3Signer26.10.1
Why this rating
- high (hoodi): Required update for the Hoodi network.
Oct 23, 2026
Web3Signer26.10.0
Why this rating
- high (hoodi): Required update for the Hoodi Glamsterdam fork.
- fork scheduled (hoodi): - Teku libraries updated to 26.10.1, which schedules the Gloas (Glamsterdam) fork for the Hoodi network at epoch 132352 (26 Oct 2026 17:42:48 UTC).
- deprecation wording: "[DEPRECATED] 26.10.0 > [!CAUTION] > Deprecated: Hoodi Gloas unscheduled."
Oct 19, 2026
Web3Signer26.10.0-RC1
Why this rating
- high (hoodi): Required update for the Hoodi Glamsterdam fork.
- fork scheduled (hoodi): - Teku libraries updated to 26.10.1, which schedules the Gloas (Glamsterdam) fork for the Hoodi network at epoch 132352 (26 Oct 2026 17:42:48 UTC).
- deprecation wording: "[DEPRECATED] 26.10.0-RC1 > [!CAUTION] > Deprecated: Hoodi Gloas unscheduled."
Oct 16, 2026
Web3Signer26.9.0
Why this rating
- fork scheduled (sepolia): - Scheduled the Glamsterdam (Gloas) upgrade on Sepolia for epoch 353024 (October 6, 2026 13:53:36 UTC).
- Security: - Docker base images re-pinned to their current multi-platform index digests. [#1230][PR_1230] - Default image ships ubuntu:26.04 + Eclipse Temurin JRE 25.0.4;…
- Breaking changes: - The http_vertx_worker_pool_rejected_total metric is no longer exported, because Vert.x 5 does not report rejected worker tasks separately (they only occur on…
Sep 30, 2026
Web3Signer26.9.0-RC1
Why this rating
- fork scheduled (sepolia): - Scheduled the Glamsterdam (Gloas) upgrade on Sepolia for epoch 353024 (October 6, 2026 13:53:36 UTC).
- Security: - Docker base images re-pinned to their current multi-platform index digests. [#1230][PR_1230] - Default image ships ubuntu:26.04 + Eclipse Temurin JRE 25.0.4;…
- Breaking changes: - The http_vertx_worker_pool_rejected_total metric is no longer exported, because Vert.x 5 does not report rejected worker tasks separately (they only occur on…
Sep 29, 2026
Web3Signer26.7.0
Why this rating
- Security: - Update base docker image to latest LTS Ubuntu 26.04. ---
- Breaking changes: - The Key Manager API (DELETE /eth/v1/keystores) now only attempts to delete keystore files that follow the .yaml naming convention. Files using a different na…
Aug 11, 2026
Web3Signer26.7.0-RC1
Why this rating
- Security: - Update base docker image to latest LTS Ubuntu 26.04. ---
- Breaking changes: - The Key Manager API (DELETE /eth/v1/keystores) now only attempts to delete keystore files that follow the .yaml naming convention. Files using a different na…
Jul 29, 2026
Web3Signer26.4.2
Apr 27, 2026
Web3Signer26.4.1
Why this rating
- deprecation wording: "- Docker image labels migrated from the deprecated org.label-schema.* schema to the OCI Image Spec org.opencontainers.image.* annotations, which are consumed by modern registries …"
- performance wording: "- Fix memory leak in the reload endpoint: removed validators were not being offloaded from the slashing-protection in-memory cache, and every reload unnecessarily re-registered al…"
Apr 23, 2026
Web3Signer26.4.1-RC2
Why this rating
- deprecation wording: "- Docker image labels migrated from the deprecated org.label-schema.* schema to the OCI Image Spec org.opencontainers.image.* annotations, which are consumed by modern registries …"
- performance wording: "- Fix memory leak in the reload endpoint: removed validators were not being offloaded from the slashing-protection in-memory cache, and every reload unnecessarily re-registered al…"
Apr 22, 2026
Web3Signer26.4.1-RC1
Why this rating
- performance wording: "- Fix memory leak in the reload endpoint: removed validators were not being offloaded from the slashing-protection in-memory cache, and every reload unnecessarily re-registered al…"
Apr 22, 2026
Web3Signer26.4.0
Apr 15, 2026
Web3Signer26.4.0-RC1
Apr 13, 2026
Web3Signer26.3.0
Why this rating
- security wording: "- Updated base Docker image packages to address CVE-2025-68973 (HIGH severity) in gpgv package"
- Security: - Updated base Docker image packages to address CVE-2025-68973 (HIGH severity) in gpgv package - Docker images now apply all available security updates during …
Mar 9, 2026
Web3Signer26.3.0-RC1
Why this rating
- security wording: "- Updated base Docker image packages to address CVE-2025-68973 (HIGH severity) in gpgv package"
- Security: - Updated base Docker image packages to address CVE-2025-68973 (HIGH severity) in gpgv package - Docker images now apply all available security updates during …
Mar 4, 2026
Web3Signer25.12.0
Why this rating
- performance wording: "- Virtual thread-based signer loading for improved performance"
Dec 17, 2025
Web3Signer25.12.0-RC1
Why this rating
- performance wording: "- Virtual thread-based signer loading for improved performance"
Dec 15, 2025
Web3Signer25.11.0
Why this rating
- high (mainnet): 25.11.0 > [!IMPORTANT] > This is a required update for mainnet for the upcoming Fulu upgrade!
- fork scheduled (mainnet): - Updated Teku libraries to add scheduling for Fulu upgrade for mainnet
- fork scheduled (mainnet): - Mainnet configuration for Fulu fork at epoch 411392 (2025-12-03 21:49:11 UTC)
Nov 11, 2025
Web3Signer25.11.0-RC1
Nov 10, 2025
Web3Signer25.9.1
Why this rating
- fork scheduled (holesky): - Holesky fork at epoch 165120 (2025-10-01 08:48:00 UTC)
- fork scheduled (sepolia): - Sepolia fork at epoch 272640 (2025-10-14 07:36:00 UTC)
- fork scheduled (hoodi): - Hoodi fork at epoch 50688 (2025-10-28 18:53:12 UTC)
- Breaking changes: - eea* RPC methods and other privacy supporting classes have been removed since Privacy feature has been removed from Besu 25.6.0
Sep 26, 2025
Web3Signer25.9.0
Why this rating
- performance wording: "- Support for Optimism op-signer"
Sep 8, 2025
Web3Signer25.9.0-RC1
Sep 4, 2025
Web3Signer25.6.0
Why this rating
- Breaking changes: - Deprecated CLI option --azure-secrets-tags has been removed. Use --azure-tags instead. - USB Armory II/Interlock support has been removed. - YubiHSM 2 suppor…
- deprecation wording: "- Deprecated CLI option --azure-secrets-tags has been removed."
Jun 19, 2025
Web3Signer25.6.0-RC2
Jun 19, 2025
Web3Signer25.6.0-RC1
Jun 8, 2025
Web3Signer25.4.1
Why this rating
- high (mainnet): 25.4.1 > [!IMPORTANT] > This is a required update for Mainnet, Gnosis, and all electra enabled networks.
- fork scheduled (mainnet): Mainnet Electra activation will happen at epoch 364032 (May 7, 2025, 10:05:11am UTC).
Apr 22, 2025
Web3Signer25.4.1-RC1
Apr 19, 2025
Web3Signer25.3.0
Mar 24, 2025
Web3Signer25.3.0-RC2
Mar 21, 2025
Web3Signer25.2.0
Why this rating
- high (sepolia, holesky): 25.2.0 > [!IMPORTANT] > This is a required update for nodes running on Holesky or Sepolia network as it contains the configuration for the Electra hard fork.
- security wording: "- Upgrade Netty library to 4.1.118.Final to fix CVE-2025-24970."
- Breaking changes: - The behavior of reload API endpoint has been modified due to issue [#1018][issue_1018] implemented by PR [#1054][pr_1054]. The reload API call will remove st…
- deprecation wording: "- --Xworker-pool-size deprecated cli option has been removed."
Feb 17, 2025
Web3Signer24.12.0
Why this rating
- medium (all networks): 24.12.0 This release contains various libraries updates, including Teku libraries, which brings changes for new test networks and Prague-Electra fork. and is recommended for all users.
- security wording: "- Various libraries updates to address reported vulnerabilities."
- Breaking changes: - Java 21 is required to build and run Web3Signer. This may affect users who use Java 17 to directly run Web3Signer binaries. The docker image was already usin…
- changelog entry: "* fix: Update netty version to 4.1.115 to fix cve-2024-47535 by @usmansaleem in"
Dec 6, 2024
Web3Signer24.6.0
Why this rating
- medium (all networks): 24.6.0 This release contains various libraries updates and is recommended for all users.
- security wording: "- Update transitive dependency threetenbp and google cloud secretmanager library to fix CVE-2024-23082, CVE-2024-23081"
Jun 12, 2024
Web3Signer24.2.0
Why this rating
- high (mainnet): 24.2.0 This is a required update for Mainnet users containing the configuration for the Deneb upgrade on March 13th.
- fork scheduled (mainnet): Ethereum Mainnet configuration with Deneb fork scheduled for epoch 269568 (March 13, 2024, 13:55:35 UTC) Gnosis configuration with Deneb fork scheduled for epoch 889856 (March 11, 2024, 18:30:20 UTC)
- changelog entry: "* Upgrade nimbus-jose-jwt version to avoid CVE-2023-52428 by @usmansaleem in"
- performance wording: "Note, if you import a large number of keys while running as a signer, then this may degrade the signing performance for the duration of the import process."
Feb 19, 2024