mithril-client

Stake-based threshold multi-signatures protocol

View on Cargo

View on Github

Activity

Latest release: 1mo ago
Total releases: 22
Cadence: ~41 days
Last 12 months: 4

Reach

Stars: 153

Details

License: Apache-2.0
First release: Nov 27, 2023

Releases

Version	Released
`0.14.17` patch	Aug 03, 2026
`0.14.5` minor	Apr 28, 2026
`0.13.2` minor	Jan 29, 2026
`0.12.34` patch	Nov 03, 2025
`0.12.30` patch	Sep 17, 2025
`0.12.11` patch	Jun 16, 2025
`0.12.2` patch	May 06, 2025
`0.12.0` minor 1 CVE	May 05, 2025
`0.11.17` patch 1 CVE	Mar 28, 2025
`0.11.1` minor 1 CVE	Feb 14, 2025
`0.10.4` patch 1 CVE	Dec 17, 2024
`0.10.1` minor 1 CVE	Nov 07, 2024
`0.9.2` minor 1 CVE	Oct 21, 2024
`0.8.18` patch 1 CVE	Sep 23, 2024
`0.8.10` patch 1 CVE	Jul 30, 2024
`0.8.7` patch 1 CVE	Jul 15, 2024
`0.8.3` patch 1 CVE	Jun 12, 2024
`0.8.0` minor 1 CVE	May 13, 2024
`0.6.9` patch 1 CVE	Mar 26, 2024
`0.6.4` minor 1 CVE	Feb 26, 2024
`0.5.17` patch 1 CVE	Jan 23, 2024
`0.5.7` initial 1 CVE	Nov 27, 2023

Repository

intersectmbo/mithril

Forks: 52
Open issues: 117
Language: Rust

blockchain
cardano
cardano-node
mithril
rust
scalability

Dependencies (34)

Depends on

0.14.17

Used by

Supply-chain exposure

2 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Known CVEs (1)

GHSA-qv97-5qr8-2266 May 07, 2025

Mithril snapshots for Cardano database could be compromised by an adversary

4.9 / 10
Medium
Network High Low None Changed None Low Low

Impact

Mithril certification of Cardano database

The Mithril network provides certification for snapshots of the Cardano database, enabling users to quickly bootstrap a Cardano node without relying on the slower peer-to-peer synchronization process.

To generate a multi-signature, a minimum threshold of Cardano stake registered in the protocol must agree on signing the same message. In this context, a digest is computed from the internal files of the Cardano node's database. However, this mechanism has certain limitations. Specifically, some files are not identically generated across all Cardano nodes, and there is no API to provide consistent snapshots at a specific beacon on the Cardano chain:

All immutable files, except the last one (which is still being created), are used to compute the message

The last immutable file is excluded from the signature

The ledger state files are also excluded from the signature.

Cardano node startup sequence

A Cardano node can only perform a fast bootstrap if a pre-computed ledger state is loaded into its database; otherwise, a full re-computation is required, which is time-consuming. During the startup phase with a pre-computed ledger state, the node performs structural verification of the ledger state and lightweight conformity checks which may not be enough to systematically detect invalid ledger state.

Attack scenarios

Inconsistencies could be introduced into a tampered ledger state distributed through Mithril snapshots, either by an unknown source or by a compromised IOG-operated aggregator. These inconsistencies would not be immediately detected by Cardano nodes started with such snapshots, potentially enabling long-range attacks that might not be corrected by honest nodes, even if they sync from genesis.

Currently, a Mithril network has only one aggregator, which serves snapshots from a secure cloud location operated by IOG and is therefore assumed to be trustworthy. In the future, as Mithril networks become more decentralized, multiple aggregators will operate independently. This increased decentralization could raise the risk of a malicious aggregator distributing a tampered ledger state.

Patches

As a mitigation, the Mithril aggregator now signs the ledger state snapshot and the latest immutable file using an IOG-owned key, and the client library and CLI validate the signature of these files upon download.

The Mithril client library has been fixed with version 0.12.2, previous versions must not be used anymore.

The Mithril client CLI has been fixed with version 0.12.1, previous versions must not be used anymore.

The Mithril aggregator has been fixed with version 0.7.44, previous versions must not be used anymore.

References

Mithril protocol in depth: https://mithril.network/doc/next/mithril/mithril-protocol/protocol

Bootstrap a Cardano node: https://mithril.network/doc/manual/getting-started/bootstrap-cardano-node

Mithril certification of the Cardano node database: https://mithril.network/doc/mithril/advanced/mithril-certification/cardano-node-database

Fixed in

0.12.2

References

https://github.com/input-output-hk/mithril/security/advisories/GHSA-qv97-5qr8-2266
https://github.com/input-output-hk/mithril

Updated May 07, 2025 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

minor 8
patch 13

22 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More