Ethereum Delays Glamsterdam Testing After 13 Contracts Trigger Concerns

Ethereum Delays Glamsterdam Testing After Security Flaws Threaten Contracts

Ethereum’s next major upgrade has hit an unexpected obstacle. Security researchers discovered that proposed changes to how the blockchain charges transaction fees can cause certain smart contracts to permanently record failures that previously would have been reversible.

Chainsecurity identified 13 deployed contracts exhibiting potentially dangerous behavior, prompting developers to cancel Glamsterdam’s Oct. 26 activation on the Hoodi test network. The discovery threatens an ambitious upgrade intended to make Ethereum faster and more efficient, with its tentative December launch now facing uncertainty.

A Security Discovery Forces Ethereum to Change Plans

During the Oct. 22 All Core Developers Execution meeting, developers agreed to postpone testing after reviewing findings involving two proposals, EIP-8037 and EIP-8038. The changes modify how the Ethereum protocol calculates gas, the fee mechanism that determines how much computing work a transaction can perform.

Chainsecurity found that certain operations might unexpectedly return previously consumed gas to a transaction. That seemingly helpful behavior creates a serious problem for smart contracts designed around existing spending limits.

When a Failed Transaction Becomes Permanent

Some smart contracts deliberately stop an operation when insufficient gas remains, allowing users to try again later. Under the proposed rules, however, a failed operation might leave enough gas for the surrounding contract to finish recording the failure. That can permanently disable a retry option or erase a user’s ability to claim funds.

The contract’s code wouldn’t necessarily need to change for the problem to appear. Researchers haven’t publicly identified the 13 affected contracts while responsible disclosure continues.

December Upgrade Window Faces Uncertainty

Glamsterdam combines improvements intended to increase Ethereum’s processing capacity and make block validation more efficient. Earlier testing on Sepolia succeeded on Oct. 6, with blocks operating near a 200 million gas limit, more than three times Ethereum mainnet’s roughly 60 million.

Hoodi operators must now install updated execution and consensus software before the canceled activation. Regular Ethereum users need take no action. The Ethereum Foundation hasn’t announced a replacement testing date or confirmed a mainnet launch. Developers must now determine whether changes intended to improve network performance can safely coexist with contracts already operating under older rules.

Bitcoin Core is rewriting its approach to security vulnerabilities as artificial intelligence makes certain software flaws dramatically easier to discover,…