InitChain currently does not return the app hash, so the genesis block has no app hash either. It probably should. This should also probably be checked against the app hash given in the genesis file, if any.

Originally requested in this discussion: tendermint/spec#119 (comment)