ethereum-optimism / ethereum-optimism/optimism
kona-node: validate admin unsafe payload block hashes
Open
@joshklop is already working on this.
Since Aug 4, 2026.
- Dominant language
- Go
- Stars
- 6.5k
- Forks
- 4k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 134
Description
Summary
TestInvalidPayloadThroughCLP2P is skipped on kona-node because Kona's admin_postUnsafePayload RPC accepts an envelope whose claimed block hash does not match its contents.
op-node recomputes the block hash at the RPC boundary and rejects a mismatch before relaying the payload. Kona currently queues every payload immediately, so the malformed envelope returns success and is only rejected asynchronously downstream.
Required change
- Add block-hash verification for OP execution payload envelopes.
- Reject mismatched payloads synchronously from
admin_postUnsafePayload. - Remove the Kona skip from
TestInvalidPayloadThroughCLP2P.
Acceptance criteria
- Kona's admin RPC returns an error for a payload with a mismatched block hash.
- Valid payloads continue to be queued for processing.
-
TestInvalidPayloadThroughCLP2Ppasses with kona-node/op-reth and op-node/op-reth.
Related
- Parent inventory: ethereum-optimism/protocol-team#101
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.