# Optimism publishes required op-challenger security release v1.9.1

> A fixed official challenger version became available for a direct dependency of the fault-proof process that secures challenged withdrawals.

- URL: https://riadefi.com/on-chain/2026-04-15-optimism-bridge-op-challenger-security-release-v1-9-1/
- Type: Upgrade or migration
- Stage: Confirmed
- Evidence: developing
- Materiality: material
- Event date: 2026-04-15
- Version: 1, published 2026-08-22 (first published 2026-08-22)
- Follow-up: 2026-04-22
- Advisor-relevant: no
- Affects: Optimism canonical bridge (protocol)

Developing. Some claims here are not yet confirmed; they are listed apart from the confirmed facts. A new version replaces this one when the primary evidence changes.

## What happened

OP Labs published op-challenger v1.9.1 with security and reliability fixes for chains using permissionless fault proofs and designated it a required upgrade for all users.

## What changed

A fixed official challenger version became available for a direct dependency of the fault-proof process that secures challenged withdrawals.

## What did not change

The release does not establish an exploit, fund loss, invalid withdrawal, bridge-contract upgrade, or adoption by every live challenger operator.

## Confirmed

- op-challenger v1.9.1 was released on April 15, 2026.
- The official release calls the update required for all users.
- The release fixes routing that could send large non-Keccak preimages to an incompatible Keccak-only on-chain path.
- The release also introduces strict uint64 configuration parsing and fixes a shutdown race that could make the challenger hang.

## Still open

- The candidate does not establish when OP Mainnet challenger operators adopted v1.9.1.
- It is not established whether any live dispute encountered the affected preimage-routing path before upgrade.
- The record does not identify an exploit, failed challenge, or affected withdrawal.

## What it means for an advisor

- Review the Optimism canonical-bridge memo's dependence on permissionless challenger availability and software-version monitoring.
- Verify that relevant operators and service providers tracked the required release; publication alone does not prove adoption.
- Continue normal exposure treatment unless separate primary evidence establishes an impaired challenge or withdrawal path.

## Sources

1. [op-challenger v1.9.1](https://github.com/ethereum-optimism/optimism/releases/tag/op-challenger/v1.9.1) · OP Labs · 2026-04-15


---

Published by Ketju Research on RIADeFi (https://riadefi.com). Educational research for financial professionals; not investment, legal, tax, or compliance advice.