Skip to content

chore: update oracle allowlist for EDF and bump validator-ejector to 2.2.1 - #330

Merged
KaloyanTanev merged 2 commits into
ObolNetwork:mainfrom
cnupy:cnupy/edf-oracle-allowlist
Sep 16, 2026
Merged

KaloyanTanev merged 2 commits into
ObolNetwork:mainfrom
cnupy:cnupy/edf-oracle-allowlist

Conversation

@cnupy

@cnupy cnupy commented Sep 16, 2026 •

Copy link
Copy Markdown

Summary

Lido oracle members are moving to EDF (LIP-37) DelegationContracts. Oracle reports are then submitted through the delegation contract, signed by a delegate EOA. The ejector verifies that delegate key, so VE_ORACLE_ADDRESSES_ALLOWLIST has to hold delegate EOAs, and only validator-ejector 2.2.0+ can verify EDF reports.

Guide: https://hackmd.io/P95OOWJ0QZSfvguSbRp5HA
Proposal: https://research.lido.fi/t/lip-37-execution-delegation-framework-edf/11746

Changes

  • docker-compose.yml: default VALIDATOR_EJECTOR_VERSION 1.9.0 -> 2.2.1 (release).
  • .env.sample.mainnet: allowlist replaced with the 9 EDF delegate EOAs (vote 205).
  • .env.sample.hoodi: allowlist replaced with the 10 EDF delegate EOAs. EDF is already active on Hoodi.

Verification

  • Mainnet: getDelegate() on each of the 9 DelegationContracts from the vote description returns the 9 addresses in the sample.
  • Hoodi: getMembers() on the VEBO HashConsensus (0x30308CD8844fb2DB3ec4D056F1d475a802DCA07c) returns 10 DelegationContracts whose getDelegate() values are the 10 addresses in the sample.
  • Both allowlists parse as JSON with no duplicates.

Supersedes #318.

…2.2.1

Lido oracle members move to EDF (LIP-37) DelegationContracts. The ejector
verifies the delegate EOA that signs the report, so the allowlist has to
hold delegate keys, and only ejector 2.2.0+ can verify EDF reports.

Mainnet (vote ObolNetwork#205, not yet enacted): current oracle EOAs plus the EDF
delegate EOAs, so the ejector verifies reports from before and after
enactment. Also picks up the Chorus One and Stakefish key rotations from
April that never landed here.

Hoodi (EDF already active): replaced with the ten delegate EOAs.

Default validator-ejector image 1.9.0 -> 2.2.1.
Same shape as Hoodi. Avoids a follow-up PR to drop the pre-EDF oracle
EOAs after vote ObolNetwork#205 is enacted.
@KaloyanTanev
KaloyanTanev merged commit ddc2133 into ObolNetwork:main Sep 16, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants