From a90467cb974b0abe7cd4be8ba0429bd32e316437 Mon Sep 17 00:00:00 2001 From: AdriGeorge Date: Fri, 27 Mar 2026 08:39:31 +0200 Subject: [PATCH 1/2] fix: improve DDO validation for remote DDOs in MetadataEventProcessor --- .../Indexer/processors/MetadataEventProcessor.ts | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/src/components/Indexer/processors/MetadataEventProcessor.ts b/src/components/Indexer/processors/MetadataEventProcessor.ts index 38ef9c334..c8a690c1d 100644 --- a/src/components/Indexer/processors/MetadataEventProcessor.ts +++ b/src/components/Indexer/processors/MetadataEventProcessor.ts @@ -158,8 +158,14 @@ export class MetadataEventProcessor extends BaseEventProcessor { ) return } - // for unencrypted DDOs - if ((parseInt(flag) & 2) === 0 && !this.checkDdoHash(updatedDdo, metadataHash)) { + // For remote DDOs, the on-chain hash covers the remote pointer payload, + // not the fetched document body, so only inline unencrypted DDOs can be + // revalidated here against metadataHash. + if ( + !isRemoteDDO(decryptedDDO) && + (parseInt(flag) & 2) === 0 && + !this.checkDdoHash(updatedDdo, metadataHash) + ) { INDEXER_LOGGER.error('Unencrypted DDO hash does not match metadata hash.') await ddoState.update( this.networkId, From cf35d74497e572527a27212efc52acf644065145 Mon Sep 17 00:00:00 2001 From: AdriGeorge Date: Fri, 27 Mar 2026 09:00:43 +0200 Subject: [PATCH 2/2] chore: update version to 2.1.1 in package.json and package-lock.json --- package-lock.json | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0a368781b..487678832 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "ocean-node", - "version": "2.1.0", + "version": "2.1.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "ocean-node", - "version": "2.1.0", + "version": "2.1.1", "hasInstallScript": true, "license": "Apache-2.0", "dependencies": { diff --git a/package.json b/package.json index 154626c06..7a20f414b 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "ocean-node", - "version": "2.1.0", + "version": "2.1.1", "description": "Ocean Node is used to run all core services in the Ocean stack", "author": "Ocean Protocol Foundation", "license": "Apache-2.0",