Skip to content
BaseHub by Will Binns Updated

Reliability and Liveness

This page collects the places to look when you need to judge how dependable Base is: live status, past incidents, audits, bounties, the escape hatch for censored transactions, and the source for the software that orders blocks.

Live component health for Base Mainnet and Base Sepolia sits on status.base.org. Covered components include producing blocks, posting batches to L1, the Flashblocks stream, the mempool, deposits and withdrawals, and the public RPC endpoints.

Each third-party audit report lives in the repository whose code it reviewed. A report states its scope, the commit it looked at, what it found, and how each finding was closed out.

  • Smart contracts: base/contracts audits. These include the multiproof, proof, Cobalt, and dynamic upgrade contract reviews.
  • Node and precompiles: base/base audits. These include the B20 precompile and the dynamic upgrade node reviews. The folder is organised by upgrade (azul, beryl, cobalt).
  • Audit competitions: Immunefi reports, including the contest held for the Azul hardfork.

For the OP Stack pieces Base relied on up to and including OP Stack Upgrade 18, such as the bridge and the OptimismPortal contract, the reviews sit with Optimism in its security reviews folder.

Two standing programs split the ground between them. HackerOne takes offchain components and infrastructure. Cantina takes deployed smart contracts. The Azul upgrade also had a one-off public audit competition on Immunefi. Scope, reward ceilings, and how to file are on Report a Vulnerability and Bug Bounty.

Censorship resistance and sequencer liveness

Section titled “Censorship resistance and sequencer liveness”

Base has one active sequencer at a time. It runs as a high-availability cluster, and if the leader stops producing blocks, a follower takes over leadership. The Flashblocks architecture page shows the parts involved.

When the sequencer refuses your transaction, or stops altogether, you still have a route in. Send the transaction as a deposit through the OptimismPortal contract on Ethereum (see Deposits to Base). Two protocol rules make that route reliable:

  • The sequencer cannot skip deposits. Each L1 block fixes the deposits that must appear in the first L2 block of its sequencing epoch. An L2 block that leaves them out breaks the derivation rules and is invalid.
  • The wait is bounded. Should batches stop arriving on Ethereum, every node waits out one sequencing window, then fills in the absent L2 blocks itself, with the queued deposits inside them. Base sets that window to 3,600 L1 blocks, which is roughly 12 hours at 12 seconds per L1 block (see Configuration).

Halts and slow inclusion are announced on status.base.org. If the sequencer has to stop streaming Flashblocks, preconfirmations switch off and confirmation falls back to whole blocks, which arrive every 2 seconds until Denim shortens them.

All the software that orders and sequences Base transactions is published:

ComponentWhat it doesSource
base-consensusConsensus client run both by the sequencer and by independent node operatorsbase/base
base-reth-nodeExecution layer client, transaction pool includedbase/base
base-builderBlock builder that arranges transactions into Flashblocksbase/base
websocket-proxyFans the Flashblocks stream out to subscribersbase/base
rollup-boostFlashbots-maintained proxy that sits on the Engine API between consensus and executionflashbots/rollup-boost
op-conductorHigh-availability controller that picks the sequencer leaderethereum-optimism/optimism

Block Building covers the ordering rules these components carry out. You do not have to trust the sequencer’s word for the result: node operators rebuild and check the canonical chain themselves from the batches and deposits posted to Ethereum.

Upcoming network upgrades and their target months are tracked on upstream’s Upgrades page. BaseHub covers the current ones in the Cobalt and Denim overviews.