Developers Fix Critical Flaw in Ethereum's Glamsterdam Update

Ethereum developers have finalized a fix for a security flaw in the Glamsterdam update. The error would have allowed funds intended for validators to be improperly redirected to block builders.

The vulnerability occurred during the processing of pending deposits. Researcher Avsetsin identified that the use of identical public keys across different network functions could allow an operator to withdraw resources from the protocol. The issue would have affected staking services that would be unable to validate their operations or recover their capital.

The fix was incorporated into the consensus specifications following a code review. Initially, the technical team rejected the change due to a lack of support from software clients. The situation changed after further testing and the inclusion of additional checks within the network structure.

The new rules dictate that pending deposits must be organized by withdrawal credentials. This ensures that validator capital remains correctly linked even when shared keys are used. No financial losses have been reported to date.

The launch of the update on the Hoodi test environment was delayed to accommodate the implementation of the fix. Teams responsible for network clients still need to integrate the changes into their software. The protocol continues to operate without immediate impacts on user security.