@chainsafe/lodestar 1.50.0-dev.033e6b7138 → 1.50.0-dev.2e668c516f

package/src/cmds/beacon/stateInitialization/checkpointState.ts

@@ -0,0 +1,256 @@
+import {DbCPStateDatastore, FileCPStateDatastore, persistAnchorState} from "@lodestar/beacon-node";
+import {createBeaconConfig} from "@lodestar/config";
+import {
+  IBeaconStateView,
+  computeEpochAtSlot,
+  computeWeakSubjectivitySummaryFromStateBytes,
+  getCurrentSlot,
+  isWithinWeakSubjectivityPeriodFromSummary,
+  readBeaconStateBytesMetadata,
+} from "@lodestar/state-transition";
+import {ssz} from "@lodestar/types";
+import {Checkpoint} from "@lodestar/types/phase0";
+import {formatBytes, toRootHex} from "@lodestar/utils";
+import {fetchWeakSubjectivityStateBytes, getCheckpointFromArg} from "../../../networks/index.js";
+import {downloadOrLoadFile} from "../../../util/index.js";
+import {StateInitializationError, StateInitializationErrorCode} from "./errors.js";
+import {
+  ArchivedStateBytes,
+  CheckpointStartupPolicy,
+  CheckpointStateBytesCandidate,
+  StateInitialization,
+  StateInitializationOptions,
+  StatePreparationContext,
+} from "./types.js";
+import {assertAnchorStateForkMatchesConfig} from "./validation.js";
+
+type CheckpointOptions = Pick<
+  StateInitializationOptions,
+  "wssCheckpoint" | "forceCheckpointSync" | "ignoreWeakSubjectivityCheck"
+>;
+
+export async function prepareCheckpointFileInitialization(
+  checkpointState: string,
+  options: CheckpointOptions,
+  archived: ArchivedStateBytes | null,
+  context: StatePreparationContext
+): Promise<StateInitialization> {
+  context.logger.info("Loading checkpoint state", {checkpointState});
+  const bytes = await downloadOrLoadFile(checkpointState);
+  const stateBytes = new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  context.logger.info("Loaded checkpoint state", {checkpointState, size: formatBytes(stateBytes.length)});
+  return prepareCheckpointInitialization(
+    {
+      stateBytes,
+      expectedCheckpoint: options.wssCheckpoint ? getCheckpointFromArg(options.wssCheckpoint) : null,
+      source: "checkpoint file",
+    },
+    archived,
+    {
+      isFinalized: true,
+      forceCheckpointSync: Boolean(options.forceCheckpointSync),
+      ignoreWeakSubjectivityCheck: Boolean(options.ignoreWeakSubjectivityCheck),
+    },
+    context
+  );
+}
+
+export async function prepareCheckpointApiInitialization(
+  checkpointSyncUrl: string,
+  options: CheckpointOptions,
+  archived: ArchivedStateBytes | null,
+  context: StatePreparationContext
+): Promise<StateInitialization> {
+  const {chainForkConfig, logger} = context;
+  try {
+    const url = new URL(checkpointSyncUrl);
+    logger.info("Fetching checkpoint state", {checkpointSyncUrl: url.origin});
+  } catch (error) {
+    logger.error("Invalid checkpoint sync URL", {checkpointSyncUrl}, error as Error);
+    throw error;
+  }
+  const {stateBytes, expectedCheckpoint} = await fetchWeakSubjectivityStateBytes(chainForkConfig, logger, {
+    checkpointSyncUrl,
+    wssCheckpoint: options.wssCheckpoint,
+  });
+  return prepareCheckpointInitialization(
+    {stateBytes, expectedCheckpoint, source: "checkpointSyncUrl"},
+    archived,
+    {
+      isFinalized: true,
+      forceCheckpointSync: Boolean(options.forceCheckpointSync),
+      ignoreWeakSubjectivityCheck: Boolean(options.ignoreWeakSubjectivityCheck),
+    },
+    context
+  );
+}
+
+export async function prepareUnfinalizedCheckpointInitialization(
+  options: CheckpointOptions &
+    Pick<
+      StateInitializationOptions,
+      "lastPersistedCheckpointState" | "unsafeCheckpointState" | "chain.nHistoricalStatesFileDataStore"
+    >,
+  archived: ArchivedStateBytes | null,
+  context: StatePreparationContext
+): Promise<StateInitialization | null> {
+  const {db, dataDir, logger} = context;
+  let bytes: Uint8Array | null = null;
+  if (options.lastPersistedCheckpointState && !options.forceCheckpointSync) {
+    const store = options["chain.nHistoricalStatesFileDataStore"]
+      ? new FileCPStateDatastore(dataDir)
+      : new DbCPStateDatastore(db);
+    logger.verbose(`Finding last persisted checkpoint state from ${store.constructor.name}`);
+    bytes = await store.readLatestSafe();
+    if (bytes === null) {
+      logger.warn("Last persisted checkpoint state not found");
+    } else {
+      logger.info("Found last persisted checkpoint state", {size: formatBytes(bytes.length)});
+    }
+  }
+  if (bytes === null && options.unsafeCheckpointState) {
+    logger.info("Loading checkpoint state", {unsafeCheckpointState: options.unsafeCheckpointState});
+    bytes = await downloadOrLoadFile(options.unsafeCheckpointState);
+    logger.info("Loaded checkpoint state", {size: formatBytes(bytes.length)});
+  }
+  if (bytes === null) return null;
+  logger.warn(
+    "Initializing from unfinalized checkpoint state is unsafe and may cause the node to follow a minority chain"
+  );
+  const stateBytes = new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  return prepareCheckpointInitialization(
+    {
+      stateBytes,
+      expectedCheckpoint: options.wssCheckpoint ? getCheckpointFromArg(options.wssCheckpoint) : null,
+      source: "unfinalized source",
+    },
+    archived,
+    {
+      isFinalized: false,
+      forceCheckpointSync: Boolean(options.forceCheckpointSync),
+      ignoreWeakSubjectivityCheck: Boolean(options.ignoreWeakSubjectivityCheck),
+    },
+    context
+  );
+}
+
+function prepareCheckpointInitialization(
+  candidate: CheckpointStateBytesCandidate,
+  archived: ArchivedStateBytes | null,
+  policy: CheckpointStartupPolicy,
+  {chainForkConfig, db, logger}: StatePreparationContext
+): StateInitialization {
+  const candidateMetadata = readBeaconStateBytesMetadata(candidate.stateBytes);
+  if (candidateMetadata === null) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.MALFORMED_STATE_BYTES},
+      `Cannot read state metadata from ${candidate.source}`
+    );
+  }
+  if (
+    archived !== null &&
+    (archived.metadata.genesisTime !== candidateMetadata.genesisTime ||
+      !ssz.Root.equals(archived.metadata.genesisValidatorsRoot, candidateMetadata.genesisValidatorsRoot))
+  ) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.INCOMPATIBLE_GENESIS},
+      "Db state and checkpoint state are not compatible, either clear the db or verify your checkpoint source"
+    );
+  }
+  const useArchived =
+    archived !== null && archived.metadata.slot > candidateMetadata.slot && !policy.forceCheckpointSync;
+  if (useArchived) {
+    logger.verbose(
+      "Db state is ahead of the provided checkpoint state, using the db state to initialize the beacon chain"
+    );
+  }
+  const {stateBytes, metadata, weakSubjectivity} = useArchived
+    ? archived
+    : {
+        stateBytes: candidate.stateBytes,
+        metadata: candidateMetadata,
+        weakSubjectivity: computeWeakSubjectivitySummaryFromStateBytes(
+          chainForkConfig,
+          candidate.stateBytes,
+          candidateMetadata
+        ),
+      };
+  if (weakSubjectivity === null) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.MALFORMED_STATE_BYTES},
+      `Cannot extract weak subjectivity summary from ${candidate.source}, expected ${chainForkConfig.getForkName(metadata.slot)} state at slot ${metadata.slot}, possible fork or network mismatch`
+    );
+  }
+  const expectedCheckpoint = useArchived ? null : candidate.expectedCheckpoint;
+  const source = useArchived ? "db" : candidate.source;
+  const {isFinalized, ignoreWeakSubjectivityCheck} = policy;
+  const config = createBeaconConfig(chainForkConfig, metadata.genesisValidatorsRoot);
+  const archivedWithinWeakSubjectivityPeriod = useArchived ? archived.isWithinWeakSubjectivityPeriod : null;
+  // DB-selected anchors need no persistence, including at slot zero.
+  const shouldPersist = isFinalized && !useArchived;
+  return {
+    stateBytes,
+    config,
+    isFinalized,
+    validate(state) {
+      // A supplied checkpoint must match even when the period check is ignored.
+      if (expectedCheckpoint !== null) assertStateMatchesCheckpoint(state, expectedCheckpoint);
+      const passedValidation =
+        archivedWithinWeakSubjectivityPeriod ?? isWithinWeakSubjectivityPeriodFromSummary(config, weakSubjectivity);
+      if (!passedValidation && !ignoreWeakSubjectivityCheck) {
+        const clockEpoch = computeEpochAtSlot(getCurrentSlot(config, weakSubjectivity.genesisTime));
+        throw new StateInitializationError(
+          {code: StateInitializationErrorCode.STALE_CHECKPOINT},
+          `The selected state with epoch ${weakSubjectivity.checkpointEpoch} is not within weak subjectivity period of ${weakSubjectivity.period} epochs from the current epoch ${clockEpoch}. Please verify your checkpoint source`
+        );
+      }
+      assertAnchorStateForkMatchesConfig(config, state);
+      if (isFinalized) {
+        const source = useArchived ? "db" : "checkpoint";
+        const logData = {
+          slot: state.slot,
+          epoch: computeEpochAtSlot(state.slot),
+          stateSize: formatBytes(stateBytes.length),
+          stateRoot: toRootHex(state.hashTreeRoot()),
+          isWithinWeakSubjectivityPeriod: passedValidation,
+        };
+        if (passedValidation) {
+          logger.info(`Initializing beacon from a valid ${source} state`, logData);
+        } else {
+          logger.warn(`Initializing from a stale ${source} state vulnerable to long range attacks`, logData);
+          logger.warn("Checkpoint sync recommended, please use --help to see checkpoint sync options");
+        }
+      }
+    },
+    persist: shouldPersist ? (state, bytes) => persistAnchorState(config, db, state, bytes) : null,
+    log(state) {
+      const {checkpoint} = state.computeAnchorCheckpoint();
+      logger.info("Initialized checkpoint state", {
+        source,
+        slot: state.slot,
+        epoch: checkpoint.epoch,
+        stateSize: formatBytes(stateBytes.length),
+        stateRoot: toRootHex(state.hashTreeRoot()),
+        checkpointRoot: toRootHex(checkpoint.root),
+        isFinalized,
+        ...(isFinalized ? {} : {lastProcessedSlot: state.latestBlockHeader.slot}),
+      });
+    },
+  };
+}
+
+function assertStateMatchesCheckpoint(state: IBeaconStateView, checkpoint: Checkpoint): void {
+  const {root: blockRoot, epoch: stateEpoch} = state.computeAnchorCheckpoint().checkpoint;
+  if (!ssz.Root.equals(blockRoot, checkpoint.root)) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.CHECKPOINT_ROOT_MISMATCH},
+      `Roots do not match.  expected=${toRootHex(checkpoint.root)}, actual=${toRootHex(blockRoot)}`
+    );
+  }
+  if (!ssz.Epoch.equals(stateEpoch, checkpoint.epoch)) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.CHECKPOINT_EPOCH_MISMATCH},
+      `Epochs do not match.  expected=${checkpoint.epoch}, actual=${stateEpoch}`
+    );
+  }
+}

package/src/cmds/beacon/stateInitialization/errors.ts

@@ -0,0 +1,15 @@
+import {LodestarError} from "@lodestar/utils";
+
+export enum StateInitializationErrorCode {
+  INVALID_CHECKPOINT_SOURCE = "INVALID_CHECKPOINT_SOURCE",
+  MALFORMED_STATE_BYTES = "MALFORMED_STATE_BYTES",
+  INCOMPATIBLE_GENESIS = "INCOMPATIBLE_GENESIS",
+  CHECKPOINT_ROOT_MISMATCH = "CHECKPOINT_ROOT_MISMATCH",
+  CHECKPOINT_EPOCH_MISMATCH = "CHECKPOINT_EPOCH_MISMATCH",
+  STALE_CHECKPOINT = "STALE_CHECKPOINT",
+  ANCHOR_STATE_FORK_MISMATCH = "ANCHOR_STATE_FORK_MISMATCH",
+  GENESIS_ROOT_MISMATCH = "GENESIS_ROOT_MISMATCH",
+  MISSING_INITIALIZATION_SOURCE = "MISSING_INITIALIZATION_SOURCE",
+}
+
+export class StateInitializationError extends LodestarError<{code: StateInitializationErrorCode}> {}

package/src/cmds/beacon/stateInitialization/genesisState.ts

@@ -0,0 +1,85 @@
+import {persistAnchorState} from "@lodestar/beacon-node";
+import {createBeaconConfig} from "@lodestar/config";
+import {
+  computeEpochAtSlot,
+  computeWeakSubjectivitySummaryFromStateBytes,
+  isWithinWeakSubjectivityPeriodFromSummary,
+  readBeaconStateBytesMetadata,
+} from "@lodestar/state-transition";
+import {formatBytes, toRootHex} from "@lodestar/utils";
+import {getGenesisFileUrl, getGenesisStateRoot} from "../../../networks/index.js";
+import {defaultNetwork} from "../../../options/globalOptions.js";
+import {downloadOrLoadFile} from "../../../util/index.js";
+import {StateInitializationError, StateInitializationErrorCode} from "./errors.js";
+import {StateInitialization, StateInitializationOptions, StatePreparationContext} from "./types.js";
+import {assertAnchorStateForkMatchesConfig} from "./validation.js";
+
+export async function prepareGenesisInitialization(
+  options: Pick<StateInitializationOptions, "genesisStateFile" | "network">,
+  {chainForkConfig, db, logger}: StatePreparationContext
+): Promise<StateInitialization> {
+  const source = options.genesisStateFile || getGenesisFileUrl(options.network || defaultNetwork);
+  if (!source) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.MISSING_INITIALIZATION_SOURCE},
+      "Failed to initialize beacon state, please provide a genesis state file or use checkpoint sync"
+    );
+  }
+  logger.info("Loading genesis state", {genesisStateFile: source});
+  const bytes = await downloadOrLoadFile(source);
+  const stateBytes = new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  logger.info("Loaded genesis state", {size: formatBytes(stateBytes.length)});
+  const metadata = readBeaconStateBytesMetadata(stateBytes);
+  if (metadata === null) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.MALFORMED_STATE_BYTES},
+      "Cannot read metadata from genesis state bytes"
+    );
+  }
+  const weakSubjectivity = computeWeakSubjectivitySummaryFromStateBytes(chainForkConfig, stateBytes, metadata);
+  if (weakSubjectivity === null) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.MALFORMED_STATE_BYTES},
+      `Cannot extract weak subjectivity summary from genesis state bytes, expected ${chainForkConfig.getForkName(metadata.slot)} state at slot ${metadata.slot}, possible fork or network mismatch`
+    );
+  }
+  const config = createBeaconConfig(chainForkConfig, metadata.genesisValidatorsRoot);
+  const expectedRoot = getGenesisStateRoot(options.network);
+  return {
+    stateBytes,
+    config,
+    isFinalized: true,
+    validate(state) {
+      const stateRoot = toRootHex(state.hashTreeRoot());
+      if (expectedRoot !== null && stateRoot !== expectedRoot) {
+        throw new StateInitializationError(
+          {code: StateInitializationErrorCode.GENESIS_ROOT_MISMATCH},
+          `Genesis state root mismatch expected=${expectedRoot} received=${stateRoot}`
+        );
+      }
+      assertAnchorStateForkMatchesConfig(config, state);
+      const passedValidation = isWithinWeakSubjectivityPeriodFromSummary(config, weakSubjectivity);
+      const logData = {
+        slot: state.slot,
+        epoch: computeEpochAtSlot(state.slot),
+        stateSize: formatBytes(stateBytes.length),
+        stateRoot,
+        isWithinWeakSubjectivityPeriod: passedValidation,
+      };
+      if (passedValidation) {
+        logger.info("Initializing beacon from a valid checkpoint state", logData);
+      } else {
+        logger.warn("Initializing from a stale checkpoint state vulnerable to long range attacks", logData);
+        logger.warn("Checkpoint sync recommended, please use --help to see checkpoint sync options");
+      }
+    },
+    persist: (state, bytes) => persistAnchorState(config, db, state, bytes),
+    log(state) {
+      logger.info("Initialized genesis state", {
+        slot: state.slot,
+        stateRoot: toRootHex(state.hashTreeRoot()),
+        isFinalized: true,
+      });
+    },
+  };
+}

package/src/cmds/beacon/stateInitialization/prepareStateInitialization.ts

@@ -0,0 +1,64 @@
+import {createBeaconConfig} from "@lodestar/config";
+import {computeEpochAtSlot} from "@lodestar/state-transition";
+import {formatBytes, toRootHex} from "@lodestar/utils";
+import {
+  prepareCheckpointApiInitialization,
+  prepareCheckpointFileInitialization,
+  prepareUnfinalizedCheckpointInitialization,
+} from "./checkpointState.js";
+import {ArchivedStateBytes, StateInitialization, StateInitializationOptions, StatePreparationContext} from "./types.js";
+import {assertAnchorStateForkMatchesConfig} from "./validation.js";
+
+export function prepareArchivedStateInitialization(
+  {stateBytes, metadata, isWithinWeakSubjectivityPeriod}: ArchivedStateBytes,
+  {chainForkConfig, logger}: StatePreparationContext
+): StateInitialization {
+  const config = createBeaconConfig(chainForkConfig, metadata.genesisValidatorsRoot);
+  return {
+    stateBytes,
+    config,
+    isFinalized: true,
+    validate(state) {
+      assertAnchorStateForkMatchesConfig(config, state);
+      const logData = {
+        slot: state.slot,
+        epoch: computeEpochAtSlot(state.slot),
+        stateSize: formatBytes(stateBytes.length),
+        stateRoot: toRootHex(state.hashTreeRoot()),
+        isWithinWeakSubjectivityPeriod,
+      };
+      if (isWithinWeakSubjectivityPeriod) {
+        logger.info("Initializing beacon from a valid db state", logData);
+      } else {
+        logger.warn("Initializing from a stale db state vulnerable to long range attacks", logData);
+        logger.warn("Checkpoint sync recommended, please use --help to see checkpoint sync options");
+      }
+    },
+    persist: null,
+    log(state) {
+      logger.info("Initialized state from db", {
+        slot: state.slot,
+        epoch: computeEpochAtSlot(state.slot),
+        stateRoot: toRootHex(state.hashTreeRoot()),
+        isFinalized: true,
+      });
+    },
+  };
+}
+
+export async function prepareCheckpointSourceInitialization(
+  options: StateInitializationOptions,
+  archived: ArchivedStateBytes | null,
+  context: StatePreparationContext
+): Promise<StateInitialization | null> {
+  if (options.checkpointState) {
+    return prepareCheckpointFileInitialization(options.checkpointState, options, archived, context);
+  }
+  if (options.checkpointSyncUrl) {
+    return prepareCheckpointApiInitialization(options.checkpointSyncUrl, options, archived, context);
+  }
+  if (options.lastPersistedCheckpointState || options.unsafeCheckpointState) {
+    return prepareUnfinalizedCheckpointInitialization(options, archived, context);
+  }
+  return null;
+}

package/src/cmds/beacon/stateInitialization/types.ts

@@ -0,0 +1,58 @@
+import {IBeaconDb} from "@lodestar/beacon-node";
+import {BeaconConfig, ChainForkConfig} from "@lodestar/config";
+import {IBeaconStateView, StateBytesMetadata, WeakSubjectivitySummary} from "@lodestar/state-transition";
+import {Checkpoint} from "@lodestar/types/phase0";
+import {Logger} from "@lodestar/utils";
+import {GlobalArgs} from "../../../options/globalOptions.js";
+import {BeaconArgs} from "../options.js";
+
+export type StateInitializationOptions = Pick<
+  BeaconArgs & GlobalArgs,
+  | "checkpointState"
+  | "checkpointSyncUrl"
+  | "unsafeCheckpointState"
+  | "lastPersistedCheckpointState"
+  | "genesisStateFile"
+  | "wssCheckpoint"
+  | "forceCheckpointSync"
+  | "ignoreWeakSubjectivityCheck"
+  | "network"
+  | "chain.nHistoricalStatesFileDataStore"
+  | "chain.nativeStateView"
+>;
+
+export type StatePreparationContext = {
+  chainForkConfig: ChainForkConfig;
+  db: IBeaconDb;
+  dataDir: string;
+  logger: Logger;
+};
+
+export type ArchivedStateBytes = {
+  stateBytes: Uint8Array;
+  metadata: StateBytesMetadata;
+  weakSubjectivity: WeakSubjectivitySummary;
+  isWithinWeakSubjectivityPeriod: boolean;
+};
+
+export type CheckpointStateBytesCandidate = {
+  stateBytes: Uint8Array;
+  expectedCheckpoint: Checkpoint | null;
+  source: "checkpoint file" | "checkpointSyncUrl" | "unfinalized source";
+};
+
+export type CheckpointStartupPolicy = {
+  isFinalized: boolean;
+  forceCheckpointSync: boolean;
+  ignoreWeakSubjectivityCheck: boolean;
+};
+
+/** Selected state bytes and source-specific initialization steps. */
+export type StateInitialization = {
+  stateBytes: Uint8Array;
+  config: BeaconConfig;
+  isFinalized: boolean;
+  validate: (state: IBeaconStateView) => void;
+  persist: ((state: IBeaconStateView, stateBytes: Uint8Array) => Promise<void>) | null;
+  log: (state: IBeaconStateView) => void;
+};

package/src/cmds/beacon/stateInitialization/validation.ts

@@ -0,0 +1,16 @@
+import {ChainForkConfig} from "@lodestar/config";
+import {IBeaconStateView, computeStartSlotAtEpoch} from "@lodestar/state-transition";
+import {toHex} from "@lodestar/utils";
+import {StateInitializationError, StateInitializationErrorCode} from "./errors.js";
+
+export function assertAnchorStateForkMatchesConfig(config: ChainForkConfig, anchorState: IBeaconStateView): void {
+  const expectedFork = config.getForkInfo(computeStartSlotAtEpoch(anchorState.fork.epoch));
+  const expectedForkVersion = toHex(expectedFork.version);
+  const stateFork = toHex(anchorState.fork.currentVersion);
+  if (stateFork !== expectedForkVersion) {
+    throw new StateInitializationError(
+      {code: StateInitializationErrorCode.ANCHOR_STATE_FORK_MISMATCH},
+      `State current fork version ${stateFork} not equal to current config ${expectedForkVersion}. Maybe caused by importing a state from a different network`
+    );
+  }
+}

package/src/networks/index.ts

@@ -4,15 +4,9 @@ import {WireFormat, getClient} from "@lodestar/api";
 import {getStateSlotFromBytes} from "@lodestar/beacon-node";
 import {ChainConfig, ChainForkConfig} from "@lodestar/config";
 import {SLOTS_PER_EPOCH} from "@lodestar/params";
-import {
-  BeaconStateAllForks,
-  computeCheckpointEpochAtStateSlot,
-  getLatestBlockRoot,
-  loadState,
-} from "@lodestar/state-transition";
-import {Slot, sszTypesFor} from "@lodestar/types";
+import {Slot} from "@lodestar/types";
 import {Checkpoint} from "@lodestar/types/phase0";
-import {Logger, callFnWhenAwait, fetch, formatBytes, fromHex} from "@lodestar/utils";
+import {LodestarError, Logger, callFnWhenAwait, fetch, formatBytes, fromHex} from "@lodestar/utils";
 import {parseBootnodesFile} from "../util/format.js";
 import * as chiado from "./chiado.js";
 import * as dev from "./dev.js";
@@ -160,15 +154,11 @@ export function readBootnodes(bootnodesFilePath: string): string[] {
 /**
  * Fetch weak subjectivity state from a remote beacon node
  */
-export async function fetchWeakSubjectivityState(
+export async function fetchWeakSubjectivityStateBytes(
   config: ChainForkConfig,
   logger: Logger,
-  {checkpointSyncUrl, wssCheckpoint}: {checkpointSyncUrl: string; wssCheckpoint?: string},
-  {
-    lastDbState,
-    lastDbValidatorsBytes,
-  }: {lastDbState: BeaconStateAllForks | null; lastDbValidatorsBytes: Uint8Array | null}
-): Promise<{wsState: BeaconStateAllForks; wsStateBytes: Uint8Array; wsCheckpoint: Checkpoint}> {
+  {checkpointSyncUrl, wssCheckpoint}: {checkpointSyncUrl: string; wssCheckpoint?: string}
+): Promise<{stateBytes: Uint8Array; expectedCheckpoint: Checkpoint | null}> {
   try {
     let wsCheckpoint: Checkpoint | null;
     let stateId: Slot | "finalized";
@@ -178,7 +168,7 @@ export async function fetchWeakSubjectivityState(
       wsCheckpoint = getCheckpointFromArg(wssCheckpoint);
       stateId = wsCheckpoint.epoch * SLOTS_PER_EPOCH;
     } else {
-      // Fetch current finalized state and extract checkpoint from it
+      // Checkpoint identity can be derived after the selected state is constructed.
       stateId = "finalized";
       wsCheckpoint = null;
     }
@@ -186,33 +176,37 @@ export async function fetchWeakSubjectivityState(
     // getStateV2 should be available for all forks including phase0
     const getStatePromise = api.debug.getStateV2({stateId}, {responseWireFormat: WireFormat.ssz});
 
-    const {wsStateBytes, fork} = await callFnWhenAwait(
+    const response = await callFnWhenAwait(
       getStatePromise,
       () => logger.info("Download in progress, please wait..."),
       GET_STATE_LOG_INTERVAL
-    ).then((res) => {
-      return {wsStateBytes: res.ssz(), fork: res.meta().version};
-    });
+    );
+    const wsStateBytes = response.ssz();
+    const {version} = response.meta();
 
     const wsSlot = getStateSlotFromBytes(wsStateBytes);
     const logData = {stateId, size: formatBytes(wsStateBytes.length)};
     logger.info("Download completed", typeof stateId === "number" ? logData : {...logData, slot: wsSlot});
 
-    let wsState: BeaconStateAllForks;
-    if (lastDbState && lastDbValidatorsBytes) {
-      // use lastDbState to load wsState if possible to share the same state tree
-      wsState = loadState(config, lastDbState, wsStateBytes, lastDbValidatorsBytes).state;
-    } else {
-      wsState = sszTypesFor(fork).BeaconState.deserializeToViewDU(wsStateBytes);
+    const expectedFork = config.getForkName(wsSlot);
+    if (version !== expectedFork) {
+      throw new LodestarError(
+        {code: "CHECKPOINT_FORK_MISMATCH"},
+        `Checkpoint sync server returned ${version} state at slot ${wsSlot} but local config expects ${expectedFork}, verify --network or the chain config`
+      );
     }
 
     return {
-      wsState,
-      wsStateBytes,
-      wsCheckpoint: wsCheckpoint ?? getCheckpointFromState(wsState),
+      stateBytes: new Uint8Array(wsStateBytes.buffer, wsStateBytes.byteOffset, wsStateBytes.byteLength),
+      expectedCheckpoint: wsCheckpoint,
     };
   } catch (e) {
-    throw new Error("Unable to fetch weak subjectivity state: " + (e as Error).message);
+    const error = new LodestarError(
+      {code: "CHECKPOINT_DOWNLOAD_FAILED"},
+      "Unable to fetch weak subjectivity state: " + (e as Error).message
+    );
+    error.cause = e;
+    throw error;
   }
 }
 
@@ -220,16 +214,7 @@ export function getCheckpointFromArg(checkpointStr: string): Checkpoint {
   const checkpointRegex = /^(?:0x)?([0-9a-f]{64}):([0-9]+)$/;
   const match = checkpointRegex.exec(checkpointStr.toLowerCase());
   if (!match) {
-    throw new Error(`Could not parse checkpoint string: ${checkpointStr}`);
+    throw new LodestarError({code: "INVALID_CHECKPOINT"}, `Could not parse checkpoint string: ${checkpointStr}`);
   }
   return {root: fromHex(match[1]), epoch: parseInt(match[2])};
 }
-
-export function getCheckpointFromState(state: BeaconStateAllForks): Checkpoint {
-  return {
-    // the correct checkpoint is based on state's slot, its latestBlockHeader's slot's epoch can be
-    // behind the state
-    epoch: computeCheckpointEpochAtStateSlot(state.slot),
-    root: getLatestBlockRoot(state),
-  };
-}