Auditing firm ChainSecurity found projects that would be left vulnerable by EIP-8037 and EIP-8038, which change how gas is charged for certain operations and for state.
Core developers decided to delay the fork and not activate it on the Hoodi testnet until the issue is resolved.
The Foundation has hired several auditing firms, but says it cannot review every project on Ethereum, and is asking developers and auditors to check whether they rely on any of the eight properties that Glamsterdam breaks. Those affected should write to glamsterdam@ethereum.org
Glamsterdam, Ethereum’s next upgrade, is currently being tested on testnets. During this testing, Chainsecurity has detected some projects that would be vulnerable after Glamsterdam, as they rely on certain invariants. These invariants will be affected by EIP-8037 and EIP-8038 , which modify the gas cost calculation for certain operations and for state.
You can find more information on the details of these potential issues in Chainsecurity’s blog post or in this tool . Based on these findings, ACD has decided to delay the hard fork process and not fork Hoodi until the issues are resolved. During this delay, work on Hegota is unaffected and continues in parallel at full speed.
To make a pragmatic decision in the upcoming AllCoreDev calls, we need to know what issues could arise after Glamsterdam and whether there are possible specification changes that could prevent them. We are working with auditing firms Chainsecurity and Dedaub, in addition to conducting internal audits. However, we cannot cover every project on Ethereum, especially their code, both on-chain and off-chain.
We would therefore like to use this blog as a call to action for developers, auditors, etc., to review their projects and check whether they rely on any of these eight invariants. To that end, we have created a repository with the invariants that will be affected by Glamsterdam .
It contains a brief explanation of the different invariants and examples, as well as prompts you can use to check your own projects.
If you find that you are affected, please contact us at glamsterdam@ethereum.org
Get the best of the week in your inbox
Every Monday: the most-read stories on Territorio Blockchain, the new podcast episode and news about our events. Free, no spam.
We will send you an email to confirm. You can unsubscribe at any time with the link in every newsletter. Privacy
