diff --git a/common/go.mod b/common/go.mod
index 5c45590c2..6b11d35e6 100644
--- a/common/go.mod
+++ b/common/go.mod
@@ -6,8 +6,8 @@ replace github.com/tendermint/tendermint => github.com/morph-l2/tendermint v0.3.
 
 require (
 	github.com/holiman/uint256 v1.2.4
-	github.com/morph-l2/morph-da-codec/bindings/codec v0.0.0-20260702164327-8c7baa26af85
 	github.com/morph-l2/go-ethereum v1.10.14-0.20260709072051-ffa95e0670a3
+	github.com/morph-l2/morph-da-codec/bindings/codec v0.0.0-20260727095527-681727561e38
 	github.com/stretchr/testify v1.10.0
 	github.com/syndtr/goleveldb v1.0.1-0.20220614013038-64ee5596c38a
 )
diff --git a/common/go.sum b/common/go.sum
index 837361a8c..aa27e8857 100644
--- a/common/go.sum
+++ b/common/go.sum
@@ -148,10 +148,10 @@ github.com/mmcloughlin/addchain v0.4.0/go.mod h1:A86O+tHqZLMNO4w6ZZ4FlVQEadcoqky
 github.com/mmcloughlin/profile v0.1.1/go.mod h1:IhHD7q1ooxgwTgjxQYkACGA77oFTDdFVejUS1/tS/qU=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
-github.com/morph-l2/morph-da-codec/bindings/codec v0.0.0-20260702164327-8c7baa26af85 h1:987LsP4lErsu3D/9LKMtqhuU2k3ip9lp2IIMGCmXhRE=
-github.com/morph-l2/morph-da-codec/bindings/codec v0.0.0-20260702164327-8c7baa26af85/go.mod h1:f6+BHrrHbRmEYplC1nmNjGdatQtMSa2CIK7CX8T1Nfc=
 github.com/morph-l2/go-ethereum v1.10.14-0.20260709072051-ffa95e0670a3 h1:vt1tCsMO0eFZQsNnI3KRk76V52ia19Z/Zbpk92x0w3Y=
 github.com/morph-l2/go-ethereum v1.10.14-0.20260709072051-ffa95e0670a3/go.mod h1:nkVzHjQWCOjvukQW8ittlwX+Xz9gmVHrP7mUi7zoHTs=
+github.com/morph-l2/morph-da-codec/bindings/codec v0.0.0-20260727095527-681727561e38 h1:2OIgRP51TPMlpw9E82toxu/SQzN1hlYcxpJKC9jB0cs=
+github.com/morph-l2/morph-da-codec/bindings/codec v0.0.0-20260727095527-681727561e38/go.mod h1:f6+BHrrHbRmEYplC1nmNjGdatQtMSa2CIK7CX8T1Nfc=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A=
 github.com/nxadm/tail v1.4.8 h1:nPr65rt6Y5JFSKQO7qToXr7pePgD6Gwiw05lkbyAQTE=
diff --git a/ops/docker/docker-compose-devnet.yml b/ops/docker/docker-compose-devnet.yml
index 25321072b..451cd5e16 100644
--- a/ops/docker/docker-compose-devnet.yml
+++ b/ops/docker/docker-compose-devnet.yml
@@ -6,7 +6,10 @@ volumes:
 services:
   # ========== Layer1 Ethereum Node ==========
   layer1-el:
-    image: ethereum/client-go:latest
+    # Pinned to a geth stable release (NOT :latest, which drifts — a newer geth
+    # removed --allow-insecure-unlock and crash-looped the L1). v1.17.5 is the
+    # latest stable (2026-07-27), same 1.17 line as the build verified with this devnet.
+    image: ethereum/client-go:v1.17.5
     container_name: layer1-el
     ports:
       - "9545:8545"
@@ -26,11 +29,12 @@ services:
         else
           echo "Genesis already initialized, skipping init"
         fi
-        exec geth --networkid=900 --datadir=/data/geth/execution-data --http --http.addr=0.0.0.0 --http.port=8545 --http.api=admin,engine,net,eth,web3,debug,txpool --http.vhosts=* --http.corsdomain=* --ws --ws.addr=0.0.0.0 --ws.port=8546 --ws.api=admin,engine,net,eth,web3,debug,txpool --ws.origins=* --allow-insecure-unlock --authrpc.port=8551 --authrpc.addr=0.0.0.0 --authrpc.vhosts=* --authrpc.jwtsecret=/jwt/jwtsecret --syncmode=full --miner.gasprice=1 --rpc.allow-unprotected-txs --metrics --metrics.addr=0.0.0.0 --metrics.port=9001 --discovery.port=30303 --port=30303
+        exec geth --networkid=900 --datadir=/data/geth/execution-data --http --http.addr=0.0.0.0 --http.port=8545 --http.api=admin,engine,net,eth,web3,debug,txpool --http.vhosts=* --http.corsdomain=* --ws --ws.addr=0.0.0.0 --ws.port=8546 --ws.api=admin,engine,net,eth,web3,debug,txpool --ws.origins=* --authrpc.port=8551 --authrpc.addr=0.0.0.0 --authrpc.vhosts=* --authrpc.jwtsecret=/jwt/jwtsecret --syncmode=full --miner.gasprice=1 --rpc.allow-unprotected-txs --metrics --metrics.addr=0.0.0.0 --metrics.port=9001 --discovery.port=30303 --port=30303
     restart: unless-stopped
 
   layer1-cl:
-    image: sigp/lighthouse:latest
+    # Pinned lighthouse stable v8.2.1 (2026-07-21), paired with geth v1.17.5; avoid :latest (it drifts).
+    image: sigp/lighthouse:v8.2.1
     container_name: layer1-cl
     depends_on:
       - layer1-el
@@ -74,7 +78,8 @@ services:
     restart: unless-stopped
 
   layer1-vc:
-    image: sigp/lighthouse:latest
+    # Pinned lighthouse stable v8.2.1 (2026-07-21), paired with geth v1.17.5; avoid :latest (it drifts).
+    image: sigp/lighthouse:v8.2.1
     container_name: layer1-vc
     depends_on:
       - layer1-cl
diff --git a/ops/docker/ha-nodekey2 b/ops/docker/ha-nodekey2
index b9cbeff25..206c5a341 100644
--- a/ops/docker/ha-nodekey2
+++ b/ops/docker/ha-nodekey2
@@ -1 +1 @@
- 5146627e8b60d6dca6666c4996083e5bd551fdbe56c6c4a7a53791274a574bd4
+5146627e8b60d6dca6666c4996083e5bd551fdbe56c6c4a7a53791274a574bd4