Ethereum Delays Glamsterdam Test After Security Devs Flag Risk to Existing Contracts
Ethereum developers postponed the Glamsterdam upgrade on the Hoodi test network due to security concerns. Researchers found proposed gas accounting changes could alter how existing smart contracts handle failed transactions.
Intelligence analysis by Gemini 2.5 Flash Lite
The Glamsterdam upgrade for Ethereum's Hoodi test network has been delayed. Security researchers flagged potential issues with proposed changes to gas accounting (EIP-8037 and EIP-8038) that could cause existing smart contracts to behave unexpectedly, potentially making errors permanent or causing valid operations to fail.
Imagine Ethereum is like a big shared notebook where everyone writes down transactions. A new rule was proposed to make writing new entries cheaper, but a security expert found it might mess up how some old entries are handled. It's like changing the price of paper might accidentally make some old notes disappear or become permanent mistakes, so they're pausing the test to fix it.
Analysis
Glamsterdam Upgrade
The Glamsterdam upgrade, intended to introduce several enhancements to the Ethereum network, including a new system for selecting block builders and optimizations for handling larger blocks, has encountered a significant roadblock. Its planned activation on the Hoodi test network, scheduled for October 26, was abruptly canceled following the discovery of a critical vulnerability. This postponement directly impacts the testing timeline, as Hoodi was serving as a crucial public rehearsal before potential mainnet deployment. The upgrade's progression is now uncertain, with no new date announced for the Hoodi test or the associated increase in its gas limit to 200 million, which has also been put on hold.
EIP-8037 and EIP-8038
The core of the issue lies with Ethereum Improvement Proposals (EIPs) 8037 and 8038, which aim to modify how Ethereum accounts for gas, particularly concerning the creation of new database records. The primary objective of these proposals is to manage and limit the expansion of the Ethereum database as transaction throughput increases. However, security firm ChainSecurity's analysis revealed that these changes could fundamentally alter the behavior of existing smart contracts, especially in scenarios where one contract calls another that runs out of gas. Developers often design contracts to revert the entire transaction if a sub-operation fails, relying on insufficient remaining gas to trigger this reversal. The proposed gas accounting changes could, in some instances, restore gas that was previously considered spent on record creation, thereby enabling a contract to complete a failure-handling routine that would have otherwise caused a transaction rollback.
ChainSecurity's Findings
ChainSecurity's research indicates a dual risk associated with the proposed EIPs. On one hand, the ability for gas to be restored could lead to unexpected contract behavior, potentially making errors permanent or causing previously valid operations to fail due to insufficient gas. For example, creating a new storage slot might require significantly more gas under the new rules (110,020 gas) compared to the old rules (22,100 gas) when a separate allowance is exhausted. This could cause contracts operating within existing gas budgets to fail unexpectedly. While ChainSecurity has demonstrated the mechanisms through which these issues could arise, they have not yet publicly confirmed that any major production protocols are currently exploitable. Nevertheless, the findings have prompted Ethereum developers to pause the Glamsterdam testnet activation to thoroughly investigate these security implications before proceeding.
Key points
- Ethereum's Glamsterdam upgrade on the Hoodi test network was postponed due to security concerns.
- Researchers found proposed gas accounting changes (EIP-8037, EIP-8038) could affect existing smart contracts.
- The changes might cause failed operations to become permanent or valid operations to fail.
- Security firm ChainSecurity identified the potential risks.
- No new date has been set for the Hoodi test activation.
The delay allows developers to thoroughly address the identified security risks, ensuring that future upgrades are more robust and do not compromise the integrity of existing smart contracts. This rigorous testing process can ultimately lead to a more stable and secure Ethereum network for all users.
The discovery of such fundamental issues with gas accounting could indicate deeper, more complex problems within Ethereum's proposed upgrade path, potentially leading to further delays and increased development costs. It also raises concerns about the security of existing contracts if similar vulnerabilities have gone unnoticed.
