Ethereum delays Glamsterdam Hoodi testnet launch over security risks
-
Written by
Simonas Brazionis - Updated 2026-10-29 01:47:41
Ethereum developers have announced a delay in the Glamsterdam Hoodi testnet launch, specifically postponing the Ethereum delays Glamsterdam Hoodi, due to the identification of gas-related security vulnerabilities. These potential risks could impact how existing smart contracts handle failed transactions.
The Ethereum Foundation (EF) stated that the upgrade, initially scheduled for October 26, was delayed to investigate the interaction between certain proposals and smart contracts deployed on Ethereum. Blockchain security firm ChainSecurity issued a warning on October 13 regarding two proposals, EIP-8037 and EIP-8038, which might compromise existing protections.
Potential Vulnerabilities and Impact
ChainSecurity's analysis suggested that under the proposed new rules, gas could be returned to a contract after an operation fails, allowing it to continue execution when it previously would have halted. Researchers noted these changes might interfere with current security checks that rely on the amount of gas remaining during a transaction.
In insufficient gas griefing attacks, a malicious caller intentionally provides insufficient gas for a legitimate smart contract operation to complete. ChainSecurity cautioned that Glamsterdam's proposed modifications could undermine safeguards against such attacks, potentially enabling contracts to permanently record failed operations. An example provided was an affected contract removing a user's claim or disabling the option to retry an operation, preventing the user from completing a valid transaction.
Developer Recommendations and Disclosures
While ChainSecurity indicated that not all gas-related security checks would become unreliable, it advised developers to review their contracts for compatibility with the upgrade's new gas rules. Pseudonymous security researcher pcaversaccio described the identified risks as serious in an October 21 GitHub comment, advocating for a reevaluation of the hard fork.
On Friday, ChainSecurity reported identifying 13 real-world examples of affected projects and was coordinating responsible disclosure. The firm did not release specific details or identify the projects but urged developers to promptly check their contracts. This follows an earlier warning from the Ethereum Foundation that Glamsterdam's gas model could disrupt wallets, indexers, and gas estimators.
