# \#exodus-pallet **URL:** https://ghostforum.org/tag/exodus-pallet/12.md [Latest](https://ghostforum.org/latest.md) · [Categories](https://ghostforum.org/categories.md) · [Tags](https://ghostforum.org/tags.md) --- ## [DKG permanently stuck for validator sets outside {4,5,6}: wrong coefficient-count check in register\_round1\_package](https://ghostforum.org/t/dkg-permanently-stuck-for-validator-sets-outside-4-5-6-wrong-coefficient-count-check-in-register-round1-package/99)
**Author:** [@Rusdiwireng](https://ghostforum.org/u/Rusdiwireng)\ **Replies:** 4\ **Last updated:** [October 12, 2026, 12:59am UTC](https://ghostforum.org/t/dkg-permanently-stuck-for-validator-sets-outside-4-5-6-wrong-coefficient-count-check-in-register-round1-package/99 "2026-10-12T00:59:34Z")
Component: ghost-node @ 0162da4604d9931c16d12a0cec40dd85951368c5 — pallets/exodus/src/lib.rs:982-996 (register\_round1\_package), pallets/exodus/src/lib.rs:3745-3786 (dkg\_run\_round1 offchain worker), pallets/helpers/src/li… --- ## [\[H16\] DKG Round-1 rejects all honest packages unless exactly threshold(N)+1 registered Round-0 — deterministic bridge halt for N≥7](https://ghostforum.org/t/h16-dkg-round-1-rejects-all-honest-packages-unless-exactly-threshold-n-1-registered-round-0-deterministic-bridge-halt-for-n-7/123)
**Author:** [@Chaplin](https://ghostforum.org/u/Chaplin)\ **Replies:** 10\ **Last updated:** [October 11, 2026, 8:25pm UTC](https://ghostforum.org/t/h16-dkg-round-1-rejects-all-honest-packages-unless-exactly-threshold-n-1-registered-round-0-deterministic-bridge-halt-for-n-7/123 "2026-10-11T20:25:06Z")
Summary Two gates in the pallets/exodus DKG Round-1 flow disagree on how many VSS commitments a valid Round-1 package must carry, and honest output satisfies both only on a knife’s edge: validate\_round1\_package\_size (p… --- ## [Runtime-benchmarks feature compiles out signature-share verification in exodus](https://ghostforum.org/t/runtime-benchmarks-feature-compiles-out-signature-share-verification-in-exodus/161)
**Author:** [@Sands](https://ghostforum.org/u/Sands)\ **Replies:** 3\ **Last updated:** [October 11, 2026, 4:41pm UTC](https://ghostforum.org/t/runtime-benchmarks-feature-compiles-out-signature-share-verification-in-exodus/161 "2026-10-11T16:41:40Z")
Hi team Finding, filed as a hardening note and not a live exploit: with the runtime-benchmarks feature enabled, register\_signature\_share compiles out the invalid share rejection and the aggregate-signature rejection, so… --- ## [\[pallets/exodus\] Informational notes: no migration logic; verified design notes](https://ghostforum.org/t/pallets-exodus-informational-notes-no-migration-logic-verified-design-notes/165)
**Author:** [@Rusdiwireng](https://ghostforum.org/u/Rusdiwireng)\ **Replies:** 3\ **Last updated:** [October 11, 2026, 3:14pm UTC](https://ghostforum.org/t/pallets-exodus-informational-notes-no-migration-logic-verified-design-notes/165 "2026-10-11T15:14:18Z")
Two informational notes from the exodus pallet audit. Not vulnerabilities; recorded for the team’s awareness. T1-F6: No migration logic / try-runtime for the exodus pallet Component: pallets/exodus @ 0162da46, src/lib.r… --- ## [\[pallets/exodus\] Round-5 to 6 bitmap intersection desyncs the proof gate for dense validator sets; DKG restart loop on ordinary dropouts](https://ghostforum.org/t/pallets-exodus-round-5-to-6-bitmap-intersection-desyncs-the-proof-gate-for-dense-validator-sets-dkg-restart-loop-on-ordinary-dropouts/168)
**Author:** [@Rusdiwireng](https://ghostforum.org/u/Rusdiwireng)\ **Replies:** 4\ **Last updated:** [October 11, 2026, 8:15am UTC](https://ghostforum.org/t/pallets-exodus-round-5-to-6-bitmap-intersection-desyncs-the-proof-gate-for-dense-validator-sets-dkg-restart-loop-on-ordinary-dropouts/168 "2026-10-11T08:15:44Z")
Component: ghost-node @ 0162da46, pallets/exodus/src/lib.rs (round-5 to 6 transition, around line 2526; proof gate at lines 3039-3045). Description: After the Merkle trees are built, the round-5 to 6 transition intersec… --- ## [Bounty of 100% encodes as 0 in EVM calldata (as u32 wrap)](https://ghostforum.org/t/bounty-of-100-encodes-as-0-in-evm-calldata-as-u32-wrap/133)
**Author:** [@Rusdiwireng](https://ghostforum.org/u/Rusdiwireng)\ **Replies:** 4\ **Last updated:** [October 11, 2026, 8:15am UTC](https://ghostforum.org/t/bounty-of-100-encodes-as-0-in-evm-calldata-as-u32-wrap/133 "2026-10-11T08:15:31Z")
Component: pallets/exodus @ 0162da46, src/types/exodus\_request.rs:383-391. Description: The Perbill bounty is scaled to uint32 for the recall(uint256,uint256,uint256) metadata slot: let scaled\_bounty = multiply\_by\_rati… --- ## [DKG finalization gated on old set; orphan rotation requests accumulate without expiry](https://ghostforum.org/t/dkg-finalization-gated-on-old-set-orphan-rotation-requests-accumulate-without-expiry/132)
**Author:** [@Rusdiwireng](https://ghostforum.org/u/Rusdiwireng)\ **Replies:** 5\ **Last updated:** [October 11, 2026, 8:15am UTC](https://ghostforum.org/t/dkg-finalization-gated-on-old-set-orphan-rotation-requests-accumulate-without-expiry/132 "2026-10-11T08:15:15Z")
Component: pallets/exodus @ 0162da46, src/lib.rs:2562-2593 (prepare\_round6\_storage creates ExodusRequest::evm\_rotation), src/lib.rs:2617-2645 (prepare\_finalization\_storage), src/lib.rs:1803 (the only ExodusRequests::remo… --- ## [Cross-generation DKG package replay: signed payload does not bind dkg\_index](https://ghostforum.org/t/cross-generation-dkg-package-replay-signed-payload-does-not-bind-dkg-index/105)
**Author:** [@Rusdiwireng](https://ghostforum.org/u/Rusdiwireng)\ **Replies:** 3\ **Last updated:** [October 11, 2026, 8:15am UTC](https://ghostforum.org/t/cross-generation-dkg-package-replay-signed-payload-does-not-bind-dkg-index/105 "2026-10-11T08:15:03Z")
Component: pallets/exodus @ 0162da46, src/types/packages.rs:105-112 (PackageContext holds only authority\_index + network\_curve), src/lib.rs:901-950 (register\_round0\_package), src/lib.rs:2669-2700 (validate\_round0\_package… --- ## [Malicious authority can permanently kill an exodus signing session via an undecodable nonce commitment](https://ghostforum.org/t/malicious-authority-can-permanently-kill-an-exodus-signing-session-via-an-undecodable-nonce-commitment/103)
**Author:** [@Rusdiwireng](https://ghostforum.org/u/Rusdiwireng)\ **Replies:** 4\ **Last updated:** [October 11, 2026, 8:14am UTC](https://ghostforum.org/t/malicious-authority-can-permanently-kill-an-exodus-signing-session-via-an-undecodable-nonce-commitment/103 "2026-10-11T08:14:50Z")
Component: pallets/exodus @ 0162da46, src/lib.rs:3061-3115 (validate\_exodus\_nonce\_commitment\_size\_and\_get\_metadata), src/impls/frost.rs (generate\_group\_commitment), src/lib.rs:3405-3412, 3436-3444 (exile). Description: … --- ## [\[ideation\] Secure Offchain Storage via Session Key Derivation and Zeroization](https://ghostforum.org/t/ideation-secure-offchain-storage-via-session-key-derivation-and-zeroization/147)
**Author:** [@VoidDragon](https://ghostforum.org/u/VoidDragon)\ **Replies:** 0\ **Last updated:** [October 5, 2026, 2:25pm UTC](https://ghostforum.org/t/ideation-secure-offchain-storage-via-session-key-derivation-and-zeroization/147 "2026-10-05T14:25:43Z")
Context & Overview During distributed key generation (DKG) and collective signing inside pallets/exodus, secret and public packages are stored in the offchain storage of the validator’s node for later use. For public pac… --- ## [Exodus Round6 proof cap sized by threshold count, production-scale sparse validator index silently fails](https://ghostforum.org/t/exodus-round6-proof-cap-sized-by-threshold-count-production-scale-sparse-validator-index-silently-fails/93)
**Author:** [@Sands](https://ghostforum.org/u/Sands)\ **Replies:** 1\ **Last updated:** [October 3, 2026, 10:38pm UTC](https://ghostforum.org/t/exodus-round6-proof-cap-sized-by-threshold-count-production-scale-sparse-validator-index-silently-fails/93 "2026-10-03T22:38:31Z")
Hi team Finding: the Round6 proof size estimate is sized by participant count while the production BindingFactorsProof cap is 8, and the authority set is a sparse bitmap. With validators at indices 0 through 200 plus 29…