Ethereum Delays Glamsterdam Testnet Fork Over Gas Security Flaws

The postponement of the Glamsterdam upgrade on the Hoodi testnet underscores the meticulous and often challenging nature of blockchain protocol development, particularly for a network as complex as Ethereum. While delays can be frustrating for the community, they are often a necessary step to ensure the integrity and security of the network. The identified flaws, specifically concerning gas changes, reveal the intricate dependencies within smart contract logic and the potential for seemingly minor alterations to have significant, cascading effects across the ecosystem.

ChainSecurity's Findings

ChainSecurity, the security firm responsible for identifying the critical flaws, reported that the proposed gas changes in Glamsterdam could disrupt fundamental assumptions many smart contracts rely on during external call failures. Specifically, the firm highlighted that some contracts use gas checks or rely on calls running out of gas to prevent 'insufficient gas griefing,' a tactic where an attacker deliberately supplies too little gas to force a valid operation to fail permanently. ChainSecurity has already discovered 13 real-world examples of affected projects and is engaging in responsible disclosure to help them address these vulnerabilities.

These findings are crucial because they point to a potential systemic issue where existing contract code, even if unchanged, could behave unexpectedly under the new gas mechanics. The firm noted that a failure path that previously reverted can now complete, leading to unintended consequences. This necessitates a thorough review by projects to ensure their contracts remain robust and secure under the modified gas rules, preventing potential exploits or permanent data corruption.

Glamsterdam's Gas Changes

Glamsterdam introduces significant changes to how Ethereum charges for computing work, specifically through two proposals: EIP-8037 and EIP-8038. These EIPs aim to modify the network's gas mechanics for creating and accessing stored data, including the introduction of a separate gas pool for creating new state. The intention behind these changes is often to optimize network efficiency, reduce transaction costs, or enhance specific functionalities.

However, ChainSecurity's analysis revealed that these repricing mechanisms and the ability for gas to be refilled or returned after a failed call could inadvertently break the assumptions embedded in many existing smart contracts. The complexity arises from the fact that developers often design contracts with specific expectations about gas consumption and failure modes. Altering these underlying mechanics without careful consideration of all edge cases can introduce new attack vectors or render previously secure logic vulnerable. The upgrade also includes block-level access lists for parallel transaction checking and moves the auction that decides who assembles each block into Ethereum's rules.

Hoodi Testnet Impact

The immediate consequence of these findings is the delay of the Glamsterdam hard fork on the Hoodi testnet. This decision requires node operators to revert to older software releases or await new versions that cancel the upgrade, as advised by Ethereum researcher Christine Kim and developer Preston Van Loon. The proactive identification and postponement on a testnet, rather than mainnet, demonstrate the value of a multi-stage testing process in blockchain development.

While Glamsterdam had already gone live on another test network, Sepolia, on October 6, the issues on Hoodi highlight that different testnet environments or specific contract interactions can reveal unique vulnerabilities. No new date has been set for the Hoodi fork, indicating that developers will take the necessary time to address the security concerns thoroughly. This delay, though a setback for the upgrade's timeline, ultimately aims to prevent more severe issues from arising on the mainnet, which could have far-reaching implications for users and decentralized applications.