Fiber Dev Log 2026-02-26

[chenyukang]

Updates

v0.7.0 Released (2026-02-12) 🥳

The v0.7.0 release marks a significant milestone, introducing significant new features, performance improvements, and breaking changes.

Release note: https://github.com/nervosnetwork/fiber/releases/tag/v0.7.0

Highlights

• New Features
  • Introduced support for one-way channels and trampoline routing (Oneway channel and trampoline routing #1012).
  • Added an option to disable gossip network synchronization (feat: add option to disable gossip network synchronization #1070).
• CCH Enhancements: Refactored CCH (Cross-Chain Hub) order with Finite-State Machine and actions; added expiry/preimage/invoice validations, and implemented order persistence and housekeeping.
• Performance & Security Enhancements
  • Payment: Added an upper bound limit for payment fees, improved hold TLC settlement logic, and added payment_hash tracing in PaymentActor flows.
  • Efficiency: Improved find_path performance, utilized secp256k1 global-context to avoid repeated context creation, and optimized Pubkey implementation. 0.7.0 improved 60% on sending payment performance.
  • Data Privacy: Redacted sensitive data (session_key, preimage) from debug outputs, prevented integer overflow in onion packet deserialization, and introduced LocalSigner for secret key management.

Breaking Changes

Removed redundant u64 length header from hop data serialization and fixed v0.7.0 migration issues.

What did we do last sprint?

1. Fuzz Testing Infrastructure (Add some basic fuzz testing and fix issues #1122)
   • Added cargo-fuzz and libFuzzer support to the project.
   • Created 9 new fuzz targets in crates/fiber-lib/fuzz/fuzz_targets/ to test various components
   • Added a comprehensive fuzz testing document in docs/notes/fuzz-testing.md.
2. Serialization & Parsing Safety
   • Migrated TrampolineHopPayload serialization from bincode to molecule to keep it consistent with other onion packet data types like PaymentHopData. (Use molecule for trampoline onion packet #1100)
   • Removed the "0x" prefix from Pubkey JSON serialization to align with secp256k1::PublicKey formatting. (Remove prefix for pubkey in format #1109)
   • Refactored multiple From traits to TryFrom in crates/fiber-lib/src/fiber/types.rs for safe parsing of untrusted P2P network data, preventing panics on invalid data.
3. Data Migration & Determinism
   • Introduced the StoreSample trait to generate deterministic sample data for testing bincode serialization compatibility across versions.
   • Fixed v0.7.0 migration issues related to PaymentHopData schema changes by embedding trampoline_onion into PaymentCustomRecords to maintain backward compatibility. (Fix v0.7.0 migration issues #1112)
4. Performance & Security Improvements
   • Enabled the global-context feature of the secp256k1 crate to avoid the overhead of repeatedly creating new secp256k1 contexts (~1MB of precomputation tables) on hot paths like onion packet peeling and signature operations. (perf: use secp256k1 global-context feature to avoid repeated context creation #1103)
   • Made CORS configurable for the HTTP RPC server and disabled it by default for better security. Added -rpc-cors-enabled and -rpc-cors-allowed-origins options. (Make CORS configurable and disabled by default #1121)

In Pipeline

Adding external wallet signing for channel funding

Implementing RPC endpoints allowing users to open payment channels by signing funding transactions with their own external wallets, instead of having the node automatically sign with its private key.

Add a RocksDB Checkpoint API

Implementing backup_now RPC method using RocksDB Checkpoint API for consistent, atomic online backups without requiring node shutdown.

Thanks @Zhangcy0x3 for the contribution!