diff --git a/CHANGELOG.md b/CHANGELOG.md
index 77158bb13d..21758bb7af 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,4 +1,7 @@
 # Changelog
+## v1.5.4
+NA
+
 ## v1.5.3
 ### BUGFIX
 * [\#2827](https://github.com/bnb-chain/bsc/pull/2827) triedb/pathdb: fix nil field for stateSet
diff --git a/crypto/crypto.go b/crypto/crypto.go
index f7bfd34e29..36ce7c753c 100644
--- a/crypto/crypto.go
+++ b/crypto/crypto.go
@@ -212,6 +212,9 @@ func UnmarshalPubkey(pub []byte) (*ecdsa.PublicKey, error) {
 	if x == nil {
 		return nil, errInvalidPubkey
 	}
+	if !S256().IsOnCurve(x, y) {
+		return nil, errInvalidPubkey
+	}
 	return &ecdsa.PublicKey{Curve: S256(), X: x, Y: y}, nil
 }
 
diff --git a/version/version.go b/version/version.go
index 7ae22404e7..ce44689ec0 100644
--- a/version/version.go
+++ b/version/version.go
@@ -19,6 +19,6 @@ package version
 const (
 	Major = 1  // Major version component of the current release
 	Minor = 5  // Minor version component of the current release
-	Patch = 3  // Patch version component of the current release
+	Patch = 4  // Patch version component of the current release
 	Meta  = "" // Version metadata to append to the version string
 )