Ethereum Delays Glamsterdam Update After Security Flaws Found

The Ethereum Foundation has suspended the activation of the Glamsterdam update on the Hoodi test network, which was scheduled for October 26. This decision follows the identification of 13 real-world examples of smart contracts that could face critical failures due to changes in the network's gas accounting system.

The impasse involves proposals EIP-8037 and EIP-8038. Researchers from the firm ChainSecurity warned that these changes could alter how contracts behave when handling transactions that fail due to insufficient gas. The primary risk is that operations intended to be reverted might be recorded permanently, compromising the security of existing applications.

Under the new rules, the gas used to create certain logs could be restored if an operation fails. This would allow a contract to complete error-handling steps that were previously interrupted by a lack of resources. This scenario creates room for "insufficient gas griefing" attacks, where malicious calls manipulate gas limits to disable legitimate functions.

The delay creates uncertainty regarding the project's final timeline, which had already faced setbacks compared to the original goal. Developers are now focusing on a deep investigation into the interactions between these proposals and the current ecosystem. The mainnet continues to operate normally with no impact on its transaction history or the integrity of current data.