ICON

<p>In November, the ICON team continued making progress on BTP, ICON Bridge and ICON 2.0. The ImmuneFi bug bounty program saw two reported bugs awarded and resolved. In this article, we’ll share tasks completed and development milestones for December.</p><h2 id="header-0">BTP Architecture/Product</h2><p>At this point in development there are three key focus areas: end to end testing of all BTP components, BMV-related research of target blockchains, and proper documentation of the BTP protocol to enable outside parties to build and integrate.</p><p>Given all the attacks on similar products, research into properly verifying consensus of target chains for the <a href="https://icon.community/glossary/btp-message-validator/" rel="noopener noreferrer nofollow">BMV</a> is of the utmost importance. Even after such research, fully audited code by a 3rd party will further increase confidence levels.</p><h3 id="last-30-days">Last 30 days</h3><ul><li>Began work on <a href="https://icon.community/glossary/icon-improvement-proposals/" rel="noopener noreferrer nofollow">IIPs</a> to more clearly specify the BTP Protocol</li><li>Decided not to remove the fee structure from IIP52, as most implementations will use it</li><li>Completed implementation of fee handling for routed messages</li><li>Completed Solidity source code for the fee handling of the <a href="https://icon.community/glossary/xcall-service/" rel="noopener noreferrer nofollow">xCall service</a></li></ul><h3 id="next-30-days">Next 30 days</h3><ul><li>Continue working on IIPs for the BTP Protocol. This will include upgrades to IIP25, IIP52, and additional IIPs for each component of the protocol</li><li>Working on end-to-end testing between an ICON environment and local BSC environment</li><li>Continuing to research ETH2 and BSC consensus mechanisms for proper BMV implementation</li><li>Begin working on a new BTP 2.0 GitHub repo to better organize new documentation and code</li></ul><h2 id="header-1">Interoperability Integrations</h2><p>The team has made the ICON Bridge integration github public, with integration teams moving to a monthly release schedule for releases (published <a href="https://github.com/icon-project/icon-bridge/releases/tag/v0.0.10" rel="noopener noreferrer nofollow">here</a>) and progress reports (published <a href="https://github.com/icon-project/grants-program/tree/main/progress-reports/icon-bridge" rel="noopener noreferrer nofollow">here</a>).</p><p>Once these updates are submitted, we will release a separate report summarizing what has been accomplished and what is planned for next month. Check out the last Integration Update <a href="https://icon.community/blog/2022/icon-integration-update-october-2022/" rel="noopener noreferrer nofollow">here</a>.</p><h2 id="header-2">ICON 2.0</h2><p>In November the BerlinNet reset was completed and all related bugs were resolved. The mainnet update of the BTP 2.0 module will occur in the next 30 days. All code releases are linked in the updates below and accessible to the public.</p><h3 id="last-30-days">Last 30 days</h3><p>Nov 1st week</p><ul><li>Merged branches into master branch and increased timeout for coverage tests</li><li>BerlinNet reset was done Nov 2nd but found bugs in Governance2</li><li>Released <a href="https://github.com/icon-project/goloop/releases/tag/v1.3.0-rc.1" rel="noopener noreferrer nofollow">v1.3.0-rc.1</a>, tested compatibility with previous releases on new BerlinNet</li><li>Released <a href="https://github.com/icon-project/goloop/releases/tag/v1.3.0-rc.2" rel="noopener noreferrer nofollow">v1.3.0-rc.2</a>: fixed validator election bug</li><li>Released <a href="https://github.com/icon-project/goloop/releases/tag/v1.3.0-rc.3" rel="noopener noreferrer nofollow">v1.3.0-rc.3</a>: updated to Go version Nov 2nd week</li><li>Debugging BerlinNet upgrade</li><li>Old BerlinNet was deleted</li><li>Successfully updated New BerlinNet to <a href="https://github.com/icon-project/goloop/releases/tag/v1.3.0" rel="noopener noreferrer nofollow">v1.3.0</a></li><li>Updated LisbonNet, SejongNet to v1.3.0</li><li>Solved Goloop issue <a href="https://github.com/icon-project/goloop/issues/126" rel="noopener noreferrer nofollow">#126</a> Nov 3rd/4th week</li><li>LisbonNet, SejongNet update with latest tag <a href="https://github.com/icon-project/goloop/releases/tag/v1.3.0" rel="noopener noreferrer nofollow">v1.3</a>.</li><li>Postponed MainNet update to <a href="https://github.com/icon-project/goloop/releases/tag/v1.3.0" rel="noopener noreferrer nofollow">v1.3.0</a> this Wednesday KST but ran into bugs</li><li><a href="https://tracker.lisbon.icon.community/transaction/0xa1d9e1c1a6fa391029b5836a5a6239b32307d9bb50b03381520dda87736af0cb" rel="noopener noreferrer nofollow">SkipTransaction</a> error occurred on LisbonNet</li><li>Released <a href="https://github.com/icon-project/goloop/releases/tag/v1.3.1" rel="noopener noreferrer nofollow">v1.3.1</a> patch to fix the issue in Java Execution Environment on ListbonNet</li><li>Updated BerlinNet, SejongNet, LisbonNet to v1.3.1</li></ul><h3 id="next-30-days">Next 30 days</h3><ul><li>Updating MainNet to v.1.3.1</li><li>Submitting Revision 20</li></ul><h2 id="header-3">ImmuneFi Bug Bounties</h2><p><a href="https://icon.foundation/" rel="noopener noreferrer nofollow">ICON Foundation</a> has partnered with ImmuneFi to host a <a href="https://icon.community/blog/2022/icon-foundation-partners-with-immunefi-for-bug-bounty-program/" rel="noopener noreferrer nofollow">bug bounty program</a>. The program covers vulnerabilities related to smart contracts, Goloop (the ICON main network node software) and the <a href="https://tracker.icon.community/" rel="noopener noreferrer nofollow">ICON tracker</a>. Read about last months awarded bug bounties below:</p><h3 id="bug-report-id-12667-threat-level-medium">Bug report ID 12667 - Threat level: Medium</h3><p>This reported vulnerability of RLP decoding implementation. An attacker could exploit this issue to crash a single node. The issue itself exists in the node’s RLP decoder implementation, and the issue can be exploited remotely because RLP encoding is used for consensus messages sent between nodes.</p><p>To prevent crashes by RLP decoding with malformed data, we added fuzz tests and applied patches fixing problems found during the test. This was a very important bug report and was evaluated by Medium severity.</p><h3 id="bug-report-id-13036-threat-level-low">Bug report ID 13036 - Threat level: Low</h3><p>This bug was related to the Deposit handler. The node could accept a transaction with a negative amount after manipulating the node. This could result in unexpected behavior.</p><p>We fixed the validation code for negative transaction amounts.</p><p>Visit the ImmuneFi bug bounty portal <a href="https://immunefi.com/bounty/icon/" rel="noopener noreferrer nofollow">here</a>.</p>

ICON Development Update – November 2022

Table of Contents

ICON Network

Other articles published on Dec 5, 2022

The first version of the app is available on Google Play

10 Best Programming Languages for Game Development

Developer’s Guide to IGO — What is an IGO and how can you participate as a gaming project?

CKB Price Prediction: Is Nervos Network Ready for a Bull Run?

Binance Acquires Crypto Exchange SEBC | Re-Enters Japanese Market

AltSwitch successfully delivers keynote seminar for University of Perpetual Help System Dalta's y...

Join our free newsletter for daily crypto updates!