dYdX, a decentralized derivatives protocol built on Cosmos, has published the release candidate v9.6.3‑rc0 for its v4 chain. The update is part of the ongoing effort to improve security and performance.
The primary change is an upgrade to the Cosmos SDK and CometBFT components. This upgrade addresses a height‑poisoning vulnerability that could allow malicious actors to disrupt consensus, strengthening the network’s resilience.
The fix is a backport of issue #3338, originally addressed in a later SDK version. Pull request #3339 merges the necessary changes into the v4 chain codebase, ensuring compatibility with existing nodes.
The full list of changes is documented in the GitHub changelog, which compares the new release to v9.6.2. Developers can review the diff and test the candidate before merging.
Users and node operators are encouraged to review the release notes and plan an upgrade. The dYdX team will continue to monitor for any further security patches.