BTC $68,924.31 -6.45%
ETH $1,935.42 -5.66%
BNB $634.65 -6.32%
XRP $1.00 -3.74%
SOL $78.28 -5.78%
TRX $0.3109 -1.99%
DOGE $0.0634 -5.51%
ADA $0.1683 -2.73%
BCH $217.12 -5.43%
LINK $9.69 -4.02%
HYPE $70.59 -2.16%
AAVE $110.31 -7.16%
SUI $0.7725 -5.61%
XLM $0.1421 -3.11%
ZEC $930.80 -5.37%
AAPL $357.17 +0.30%
AMZN $268.22 +0.73%
GOOGL $299.88 +1.55%
MSFT $520.91 -0.08%
META $625.16 -0.58%
NVDA $162.91 +1.06%
TSLA $397.78 +2.56%
SNDK $916.08 -4.04%
INTC $60.77 +0.07%
SPCX $140.38 +0.52%
MU $788.46 -0.24%
AMD $574.70 +2.20%
BTC $68,924.31 -6.45%
ETH $1,935.42 -5.66%
BNB $634.65 -6.32%
XRP $1.00 -3.74%
SOL $78.28 -5.78%
TRX $0.3109 -1.99%
DOGE $0.0634 -5.51%
ADA $0.1683 -2.73%
BCH $217.12 -5.43%
LINK $9.69 -4.02%
HYPE $70.59 -2.16%
AAVE $110.31 -7.16%
SUI $0.7725 -5.61%
XLM $0.1421 -3.11%
ZEC $930.80 -5.37%
AAPL $357.17 +0.30%
AMZN $268.22 +0.73%
GOOGL $299.88 +1.55%
MSFT $520.91 -0.08%
META $625.16 -0.58%
NVDA $162.91 +1.06%
TSLA $397.78 +2.56%
SNDK $916.08 -4.04%
INTC $60.77 +0.07%
SPCX $140.38 +0.52%
MU $788.46 -0.24%
AMD $574.70 +2.20%

dam

All
Article
Flash

first_img Ethereum Hoodi testnet Glamsterdam hard fork postponed

On October 22, the smart contract security company ChainSecurity announced that the Glamsterdam hard fork on the Ethereum Hoodi testnet has been postponed. Researchers stated that security impacts have been found in existing contracts and identified 13 real cases, and they are currently conducting responsible disclosure with the affected projects. The announcement requests teams to review the contracts, and the Ethereum Foundation is assessing the scope of the impact; the announcement did not name the projects, provide contract addresses, or give an alternative fork date.The related issues involve contracts that continue execution after capturing failed external calls. Under the reviewed gas changes, the failure handler may complete execution, whereas it would previously roll back due to gas exhaustion. The caller can deliberately provide insufficient gas to complete the target operation, but enough to allow the outer contract to record a permanent failure, causing operations that could have been retried to lose their recovery path.The technical disclosure reviews EIP-8037 and EIP-8038 from the version specification dated October 13, where the gas examples described are for proposed execution behavior. The state-gas reservoir will be fully passed with the call, and forwarding restrictions apply to execution gas, with gasleft() only reporting the execution balance. According to the reviewed rules, clearing storage slots that start at zero at the beginning of a transaction can replenish up to 97,920 execution gas; intermediary contracts may also credit back the accounted state-creation fees upon REVERT and return them to the caller.

first_img Lido engineer warns of Glamsterdam staking deposit hijacking risk

Dmitry Gusakov, the engineering lead of the Ethereum liquid staking protocol Lido, warned at the developer conference ACDC #189 that the one-time builder access mechanism introduced by the Glamsterdam upgrade could interfere with the existing deposit protection logic of the staking protocol, leading to the hijacking of staking deposits. This issue involves multiple deposits sharing the same validator public key.According to Ethereum's current deposit rules, the first valid deposit determines the withdrawal credential, and staking protocols typically leverage this feature to prevent credential manipulation, such as initially depositing a small amount of ETH and then topping up the remaining funds once the expected credential appears. However, the special access mechanism introduced for builders by Glamsterdam may change the interpretation of subsequent pending deposits under the same public key during the fork transition period, putting the staking protocol at risk of a third outcome: the validator does not appear, and the deposited ETH is credited to the builder.Lido's proposed fix is to maintain the distinction between validator deposits and builder deposits during the one-time access process. However, core developers rejected this modification on the grounds of timing, mainly because the Sepolia testnet has already been activated according to existing specifications, and the Hoodi client version is also in preparation. Changing the behavior at this point could require redeploying Sepolia and conducting additional testing. The issue affects the access process during the fork transition period, rather than the ongoing deposit processing rules, but its consequences could impact deposits waiting in the queue.

first_img Glamsterdam on Ethereum launched on Sepolia, with a target gas limit of approximately 200 million

The next phase upgrade of Ethereum, Glamsterdam, was activated on the Sepolia testnet on October 6, completing block finality during the switch without any critical failures. This upgrade consists of the consensus layer Gloas and the execution layer Amsterdam, incorporating a total of 18 EIPs, designed with a gas limit of approximately 200 million, which is about 3.3 times the current mainnet limit of 60 million. The upgrade will not automatically raise the limit but will allow for larger blocks to be produced safely, with validators deciding whether to increase it.Key changes include EIP-7732, which embeds the separation of proposers and builders in the protocol, extending the time for most validators to check transactions from about 4 seconds to about 9 seconds; EIP-7928 requires blocks to include the touched state and updated values, facilitating client data prefetching and parallel validation; EIP-7954 raises the contract code limit from 24 KiB to 64 KiB; EIP-8037 increases the cost of creating new storage slots from 20,000 gas to 97,920 gas, while regular ETH transfers remain at 21,000 gas.The gas limit for the first relevant block on Sepolia was 60 million, reaching 200 million about 11 hours later and maintaining that level. Ethereum Foundation researcher Toni Wahrstätter stated that the speed at which various clients handle gas units has improved compared to before the upgrade, with Geth's execution time for a 40 million gas block reduced from about 115 milliseconds to about 30 milliseconds. The Hoodi testnet is tentatively scheduled for deployment on October 27, with the mainnet target set for the fourth quarter of 2026;

first_img Self-proclaimed "Godfather" Adam Iza was sentenced to 78 months for fraud against Meta and hiring police officers

The U.S. Attorney's Office for the Central District of California stated that a 26-year-old man, Adam Iza, who calls himself the "Godfather," has been sentenced to 78 months in prison and must pay $23.4 million in restitution. He pleaded guilty in January 2025 to charges of conspiracy to violate rights, wire fraud, and tax evasion, and has been in custody since September 2024. This sentence will run concurrently with the 15-year sentence he received last month for an attempted Bitcoin robbery, which will not increase his actual time served.From August 2021 to April 2022, Iza hired off-duty Los Angeles County police officers as private security and admitted to conspiring with them to obtain law enforcement confidential records and personal data of individuals he had disputes with, obtaining court-authorized search warrants to track these individuals, and having the officers intimidate and threaten them. The Department of Justice stated that five former officers have been convicted for working for him, including 42-year-old Eric Chase Saavedra, who set up a security company providing these officers, and was sentenced to 21 months; 45-year-old Michael David Coberg, who assisted in extorting rivals and arranged false drug arrests, is serving a 63-month sentence. The prosecution wrote in the sentencing memorandum that wealthy individuals cannot buy "search warrants, arrests, badges, or guns" for private disputes.In another fraud case, since December 2020, Iza gained access to a Meta Business Manager account and its associated credit line, reselling it to advertising companies, with Meta clients being charged for ads they never purchased. After discovering this, Meta refunded the clients and absorbed the losses.
app_icon
ChainCatcher Building the Web3 world with innovations.