Skip to content

Releases: ethereum/staking-deposit-cli

Bug Patch

26 Nov 14:21
@CarlBeek CarlBeek
v2.8.0
948d3fc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
Bug Patch Latest
Latest

Vulnerability

This release contains a bug fix for an issue discovered by a Trail of Bits audit of the ethstaker fork of this repo. Earlier versions of the Wagyu Key Gen GUI are also vulnerable.

Keystore files generated with earlier releases of this tool are vulnerable to be decrypted without the need for a password if many keystores were generated at once. The attack becomes exponentially easier the more keys generated. If you generated a few keys, then it appears you’re safe as the current research indicates significant compute would be required. However, if you generated a large number of keystores in a single run of the CLI, you should treat the keystores as if they are unencrypted.

An attack requires access to multiple keystores that were generated simultaneously, so if your keys have only been stored locally, or you did not generate a large number, it appears you are not susceptible.

If you think you could be vulnerable to such an attack, you have two options depending on your circumstances:

  1. If your keystores have not been exposed to the public internet, then you can re-derive your keystores from your mnemonic using this or a later version of this tool. Delete all existing copies of your old keystores, make sure your validator signing keys have been removed from your Validator Client and import your new keystores. Exercise extreme caution to ensure to remove your old keys from your Validator Client before importing the new versions as there is a risk of being slashed otherwise.

  2. If you think your keystores have been exposed to the public internet or parties you do not trust and you generated many keys, you will need to exit and withdraw your current validators, derive new keys from a new mnemonic, and re-deposit as new validators.

Changelog

  • Patch vulnerability with multiple keystores
  • #378 - Update HoleΕ‘ky fork-version for relaunch
  • #401 - Update python, packages, & OS versions
  • #425 - Bumps cli-version 2.7 -> 2.8
  • #426 - Update to the latest testnet chain configs
Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-948d3fc-linux-amd64.tar.gz ef021252abd2591ef6d3558fb3258b35f478c20333f2dff4a17cc79b573c3879
Linux arm64 staking_deposit-cli-948d3fc-linux-arm64.tar.gz a30f09303443113987bd72100d9dfeac3113dbe8cfcfa57381135cc78dff8726
macOS amd64 staking_deposit-cli-948d3fc-darwin-amd64.tar.gz 8cdaeeedc864c79dcdaf52789820d98abab9ffdf1cdc0143ebad3c41aceca320
Windows amd64 staking_deposit-cli-948d3fc-windows-amd64.zip 9ed40c28c899c4e979ed037e9ce4d0595d21d5e3541ab76dcdf9d17459eea26d
Assets 6
Loading

Who knew? HoleΕ‘ky DΓ©jΓ  vu

25 Sep 16:09
@CarlBeek CarlBeek
v2.7.0
fdab65d
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
Who knew? HoleΕ‘ky DΓ©jΓ  vu

Changelog

  • #378 - Update HoleΕ‘ky fork-version for relaunch
Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-fdab65d-linux-amd64.tar.gz ac3151843d681c92ae75567a88fbe0e040d53c21368cc1ed1a8c3d9fb29f2a3a
Linux arm64 staking_deposit-cli-fdab65d-linux-arm64.tar.gz e9ba5baadd5fe0a30c3f222d8cf66cccdd414c7748d095a2c0540904deff3bac
macOS amd64 staking_deposit-cli-fdab65d-darwin-amd64.tar.gz 8f33bdb78dfbe334ac25d4d5146bb58a43a06b4f3ab02268ceaf003de1ebc4c3
Windows amd64 staking_deposit-cli-fdab65d-windows-amd64.zip f95233ad9bd99e408ddd303e94a650d879c44ddc2c3443750f518bb40ab3e5ac
Assets 6
Loading

[Outdated] HoleΕ‘ky, finally!

25 Aug 21:29
@CarlBeek CarlBeek
v2.6.0
33cdafe
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
[Outdated] HoleΕ‘ky, finally!

Note

Relevant to HoleΕ‘ky testnet only, mainnet unaffected

This version supports the outdated version of HoleΕ‘ky, specifically this targets HoleΕ‘ky testenet lauch which failed due to configuration issues. Please use v2.7.0 for the relaunched HoleΕ‘ky testnet.

Changelog

  • #362 - CI issue with Tox versions
  • #370 - Adds support for Holesky testnet
Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-33cdafe-linux-amd64.tar.gz 487ba0d8e2700fa35add6cef6a31fa9a41cda4333d9f8136586d831d31ab77a3
Linux arm64 staking_deposit-cli-33cdafe-linux-arm64.tar.gz ce2fc607cd815ce342254bb72405c2f0dc43e1d98e9569bc4f0be9e21f490c6c
macOS amd64 staking_deposit-cli-33cdafe-darwin-amd64.tar.gz b2bfe601d093aecbac3bed61b73df05c55ebe858d8ae279f0061b30e89c6103e
Windows amd64 staking_deposit-cli-33cdafe-windows-amd64.zip 1c0975f57b0cb9de05f7a7f375cbd4fda5ef79efac3281b89012ba96ebe3ec84
Assets 6
Loading

BTEC in the specs, check βœ…

14 Mar 16:11
@CarlBeek CarlBeek
v2.5.0
d7b5304
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
BTEC in the specs, check βœ…

Changelog

  • #323 - Adds BLS to Execution Layer withdrawal credential change
  • #338 - Validates eth1_withdrawal_address checksum
  • #332 - Fixes grammar in error message
  • #339 - Makes --execution_address and --eth1_withdrawal_address aliases of each other
Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-d7b5304-linux-amd64.tar.gz 3f51859d78ad47a3e258470f5a5caf03d19ed1d4307d517325b7bb8f6fcde6ef
Linux arm64 staking_deposit-cli-d7b5304-linux-arm64.tar.gz 4b692164dd5c4c13a3b81922ddd14cbb13250632968607c91d90b315f1490316
macOS amd64 staking_deposit-cli-d7b5304-darwin-amd64.tar.gz 3998b07ccf4079487272a5b0fe112e03c8b84cbdf4c5ddf45a7d7f62aad5da80
Windows amd64 staking_deposit-cli-d7b5304-windows-amd64.zip b32a51e809ad5ad7340907312ad5c0072520430370676d635091779a7483f6b0
Assets 6
Loading

The Freshly-Sprung Zhèjiāng

31 Jan 15:47
@CarlBeek CarlBeek
v2.4.0
ef89710
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
The Freshly-Sprung Zhèjiāng

Changelog

  • #320 - Adds Zhejiang Testnet, removes Kiln
  • #307, #308, #309 - Bump setuptools versions
  • #321 - Version bump
Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-ef89710-linux-amd64.tar.gz c2b12a9e515f904ca359ec39dfbd7022dfefe881c1796ce42319df0a2da05560
Linux arm64 staking_deposit-cli-ef89710-linux-arm64.tar.gz 227c7b71d0cf4c88f3173213c61809f65f30f5f73d41fb2c1827bb06884343a2
macOS amd64 staking_deposit-cli-ef89710-darwin-amd64.tar.gz 9b033eca79f2394ae67c10728d3cbcd6ca73aa96786fad31fc86ae8ffc038381
Windows amd64 staking_deposit-cli-ef89710-windows-amd64.zip 55075a33ec0972723e87b2ceaefbba4b95664e05486736ff989e010c2df839cc
Assets 6
Loading

GΓΆrli is a Go

01 Aug 11:12
@CarlBeek CarlBeek
v2.3.0
76ed782
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
GΓΆrli is a Go

Changelog

  • #276 - Adds support for --chain goerli
  • #267 - Adds Turkish Translation
  • #274 - Fixes French typo
  • #277 - Update Xcode CI image
  • #278 - Version bump
  • #282 - Sepolia support in dev
  • #283 - master -> dev for merge conflicts
Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-76ed782-linux-amd64.tar.gz 8a7757995e70178ac953a746c7434f1bc816a2f4be0318d980bf1eca98930a3c
Linux arm64 staking_deposit-cli-76ed782-linux-arm64.tar.gz f46efbd6b45c4b985fc8de2f602db306f1d64906b15a2787af741f5243538dc5
macOS amd64 staking_deposit-cli-76ed782-darwin-amd64.tar.gz 017d8ff97f3866e037a13aca329d2377befe8c797edcda33d73a9833da17eb2b
Windows amd64 staking_deposit-cli-76ed782-windows-amd64.zip 03f12145ba083970b53a71cc8c0bb988f2805ddb749c907a0a19fd02628956ac
Assets 6
Loading

The Ropsten Option

24 May 12:44
@CarlBeek CarlBeek
v2.2.0
9ab0b05
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
The Ropsten Option

Changelog

  • #258 - Adds Ropsten merge testnet support
Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-9ab0b05-linux-amd64.tar.gz fcf019c698eb4fdd841041cf3df8f064d9e11be7e267bd885c2cb672ba5f5fc3
Linux arm64 staking_deposit-cli-9ab0b05-linux-arm64.tar.gz 710e791783172cb3cf13108e6ac2a47b9fd4889369a0401ed46e24d0ef36a0d8
macOS amd64 staking_deposit-cli-9ab0b05-darwin-amd64.tar.gz b4c6e56a38063b1d5d005fb87032d7c6ea9fdb7bc00826349900412d741b2b33
Windows amd64 staking_deposit-cli-9ab0b05-windows-amd64.zip f65d4bbd949ca1a916aa00306ee073be35320c0ae41a15299e2b1d2584a6e439
Assets 6
Loading

Short words? That's absurd! πŸ”¬

29 Mar 15:59
@CarlBeek CarlBeek
v2.1.0
ce8cbb6
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
Short words? That's absurd! πŸ”¬

Changelog

  • #242 - Support for abbreviated mnemonics (4-letter versions of words)
  • #249 - Update build process to Python 3.10 & many other package updates.
  • #251 - Version Bump this package
  • #253 - Kicks venv cache in CI
  • #254 - Fixes abbreviated mnemonic tests
  • #256 - clarifies variable names

You can find the binary executable files under assets below.

Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-ce8cbb6-linux-amd64.tar.gz 51b0e58dc7bdf679248a175faf6ec6b0e5de1e05d92cced1d13df126523fb653
Linux arm64 staking_deposit-cli-ce8cbb6-linux-arm64.tar.gz 936f3d127a8b88dfe2a5e9e947112cc29631f50ff4c011ce34625df27ca6a2ae
macOS amd64 staking_deposit-cli-ce8cbb6-darwin-amd64.tar.gz 428be2105c096f44b39db93c612737d91bbfe029fd315c00117712e14921a38e
Windows amd64 staking_deposit-cli-ce8cbb6-windows-amd64.zip 9145870f09d3289d20980c2fccfad4f576c6d98060f61b072fb422d346f66309
Assets 6
Loading

Wish upon a Bable Fish 🐠

04 Feb 16:54
@CarlBeek CarlBeek
v2.0.0
e2a7c94
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
Wish upon a Bable Fish 🐠

Changelog

  • Language support #182 #191:
    • Arabic
    • Greek
    • English
    • French
    • Indonesian
    • Italian
    • Japanese
    • Korean
    • Portuguese (Brazilian)
    • Romanian
    • Chinese (Simplified)
  • #198 - Testing expanded to include compiled executable binaries
  • #201 - Bump py
  • #204 & #205 - English clarifications
  • #208 - Typo fix by @colfax23
  • #215 - Removed "Eth2 phrasing from launchpad"
  • #216 - Fixed bug in importing translations in binaries
  • #230 - Version bump to v2.0.0
  • #231 - Update XCode version in CircleCI
  • #232 - Adds Linux ARM62 binaries, thanks to @Raekye
  • #233 - Ensures binaries can be built on M1 macs
  • #234 - Removes "Eth2" phrasing from translations
  • #235 - Bumps requirements_test.txt
  • #239 - pywin32 version bump
  • #240 - Kintsugi & Kiln support +Pyrmont deprecation
  • #241 - Bumps CLI_VERSION to 2.0.0

You can find the binary executable files under assets below.

Platform Compressed file SHA256 Checksum
Linux amd64 staking_deposit-cli-e2a7c94-linux-amd64.tar.gz ee744b7032ad3b1faa1cdf095ed42d07a9946a627a75323e799920e14949c641
Linux arm64 staking_deposit-cli-e2a7c94-linux-arm64.tar.gz 5e95c06283005324bbc10baff0b022f05ca0aee459ef467853e77e88e52ade5f
macOS amd64 staking_deposit-cli-e2a7c94-darwin-amd64.tar.gz c2bb33117309b844dfddda0007da7054f8bf87cf414beb61e47b785f5dca76d6
Windows amd64 staking_deposit-cli-e2a7c94-windows-amd64.zip d9d12d938d4df4d545aed3bfd9d14d18a2f6908e28bd320e9b25e7a41b9d0d9e

Contributors

colfax23 and Raekye
Assets 10
Loading

Your keys, now in Portuguese!

02 Apr 11:47
@CarlBeek CarlBeek
v1.2.0
256ea21
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
Your keys, now in Portuguese!

Changelog:

  • [#184] ARMv7 hashes in requirements.txt
  • [#183] Adds new BIP39 Portuguese word list
  • [#195] Adds support for eth1 address withdrawal credentials

You can find the binary executable files under assets below.

Platform Compressed file SHA256 Checksum
macOS amd64 eth2deposit-cli-256ea21-darwin-amd64.tar.gz 5d8e4c50e0074416bc963821a2b536ee32eafe29bd343e542a78cc6d22e3e973
Linux amd64 eth2deposit-cli-256ea21-linux-amd64.tar.gz 825035b6d6c06c0c85a38f78e8bf3e9df93dfd16bf7b72753b6888ae8c4cb30a
Windows amd64 eth2deposit-cli-256ea21-windows-amd64.zip c436bb238bca0aa3b5019b06ad233f7b831243a80e5950a7b71f716f0fa961cc
Assets 8
Loading