Ethereum reverses course, fixes Glamsterdam validator deposit flaw

cryptonews16:54

Ethereum developers have merged a fix for a deposit-handling flaw in the upcoming Glamsterdam upgrade that could have allowed a block builder to receive ETH intended for a new validator, following an ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2678124446?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-10-27 16:54","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2678124446","market":"other","top_or_hot":-1,"title":"Ethereum reverses course, fixes Glamsterdam validator deposit flaw","media":"cryptonews","content":"<div>\n<p>Ethereum developers have merged a fix for a deposit-handling flaw in the upcoming Glamsterdam upgrade that could have allowed a block builder to receive ETH intended for a new validator, following an ...</p>\n\n<a href=\"https://crypto.news/ethereum-glamsterdam-validator-deposit-bug-fix/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Ethereum reverses course, fixes Glamsterdam validator deposit flaw</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nEthereum reverses course, fixes Glamsterdam validator deposit flaw\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-10-27 16:54 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/ethereum-glamsterdam-validator-deposit-bug-fix/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Ethereum developers have merged a fix for a deposit-handling flaw in the upcoming Glamsterdam upgrade that could have allowed a block builder to receive ETH intended for a new validator, following an ...</p>\n\n<a href=\"https://crypto.news/ethereum-glamsterdam-validator-deposit-bug-fix/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BITW","symbol_name":"Bitwise 10 Crypto Index ETF","start_time":0,"source_url":"https://crypto.news/ethereum-glamsterdam-validator-deposit-bug-fix/","article_id":"2678124446","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/ethereum-glamsterdam-validator-deposit-bug-fix/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2678124446","pubTimestamp":1793091296,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Ethereum developers have merged a fix for a deposit-handling flaw in the upcoming Glamsterdam upgrade that could have allowed a block builder to receive ETH intended for a new validator, following an initial decision to reject the proposed change.Ethereum merged a Glamsterdam deposit-handling fix on October 26.The flaw could have credited staking deposits to builders sharing the same public key.A separate contract-compatibility investigation has delayed Glamsterdam’s Hoodi activation.According to Ethereum’s consensus specifications, maintainer Justin Traglia merged the correction on October 26 after developer avsetsin identified a problem with how pending deposits would be processed during the Gloas fork. The change separates builder deposits from validator deposits according to their withdrawal credentials, preventing funds from entering the wrong account when both use the same public key.The issue emerged from changes planned under Glamsterdam’s enshrined proposer-builder separation,","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"BITW":"Bitwise 10 Crypto Index ETF","03046":"华夏以太币","03009":"博时以太币","ETHV":"以太坊ETF-VanEck","09046":"华夏以太币-U","ARKY":"ARK Active Autocallable Income ETF","ETH":"低成本以太坊ETF-Grayscale","ETHW":"以太坊ETF-Bitwise","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","ETHA":"以太坊ETF-iShares","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly","BKCH":"AdvisorShares Sabretooth ETF","CRPT":"First Trust SkyBridge Crypto Industry and Digital Economy ETF","FETH":"以太币ETF-Fidelity","CETH":"以太坊ETF-21Shares","BTF":"比特币&以太币期货ETF-CoinShares","BETE":"等权重比特币&以太币期货ETF-ProShares","EETH":"以太币期货ETF-ProShares","ETHD":"ProShares UltraShort Ether ETF","09009":"博时以太币-U","GDLC":"Grayscale CoinDesk Crypto 5 ETF","ESK":"REX-Osprey ETH + Staking ETF","EZET":"以太坊ETF-Franklin","ETHE":"最大以太坊ETF-Grayscale","QETH":"以太坊ETF-Invesco Galaxy","BETH":"比特币&以太币期货ETF-ProShares","YETH":"Roundhill Ether Covered Call Strategy ETF","ETHI":"Defiance Leveraged Long Income Ethereum ETF","AETH":"以太坊策略ETF-Bitwise","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","BEGS":"RAREVIEW 2X BULL CRYPTOCURRENCY & PRECIOUS METALS ETF","STCE":"Schwab Crypto Thematic ETF","BTRN":"比特币期货ETF-Global X","ETCO":"Grayscale Ethereum HIGH Income ETF","03179":"嘉实以太币","BITQ":"Bitwise Crypto Industry Innovators ETF","09179":"嘉实以太币-U","ETTY":"Amplify Ethereum 3% Monthly Option Income Etf","ETHU":"2倍以太币期货ETF-Volatility Shares","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","SETH":"1倍做空以太币期货ETF-Proshares","ETHT":"ProShares Ultra Ether ETF","LFGY":"YieldMax Crypto Industry and Tech Portfolio Option Income ETF","ETU":"T-Rex 2X Long Ether Daily Target ETF","YBTC":"比特币看涨期权ETF-Roundhill","BITU":"2倍做多比特币期货ETF-Proshares","BTCI":"NEOS Bitcoin High Income ETF"},"translate_title":"以太币扭转局面，修复 Glamsterdam 验证器存款缺陷","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"BEGS":1.5,"ETU":1.5,"BKCH":1.5,"ETHA":1.5,"ETHE":1.5,"ETHW":1.5,"ETHI":0.6,"09009":1.5,"BTF":1.5,"CETH":1.5,"ETQ":0.6,"STCE":1.5,"EZET":1.5,"BETE":1.5,"BTCI":0.6,"ARKY":1.5,"09179":1.5,"BITU":0.6,"BITW":1.5,"AETH":1.5,"03046":0.9,"BFAP":0.6,"GDLC":1.5,"BITQ":1.5,"QETH":1.5,"YETH":1.5,"03009":0.9,"EETH":1.5,"ETTY":1.5,"ETH":1.5,"SETH":0.6,"CRPT":1.5,"ETHU":1.5,"ESK":0.6,"BTRN":0.6,"ETHT":1.5,"LFGY":1.5,"BETH":1.5,"CBTJ":0.6,"YBTC":0.6,"ETHD":1.5,"09046":1.5,"ETCO":0.6,"QBF":0.6,"METHmain":1.5,"03179":0.9,"ETHV":1.5,"FETH":1.5},"content_text":"Ethereum developers have merged a fix for a deposit-handling flaw in the upcoming Glamsterdam upgrade that could have allowed a block builder to receive ETH intended for a new validator, following an initial decision to reject the proposed change.\n\n\nSummary\n\n\n\nEthereum merged a Glamsterdam deposit-handling fix on October 26.\nThe flaw could have credited staking deposits to builders sharing the same public key.\nDevelopers initially rejected the correction before approving additional tests.\nA separate contract-compatibility investigation has delayed Glamsterdam’s Hoodi activation.\n\n\n\nAccording to Ethereum’s consensus specifications, maintainer Justin Traglia merged the correction on October 26 after developer avsetsin identified a problem with how pending deposits would be processed during the Gloas fork. The change separates builder deposits from validator deposits according to their withdrawal credentials, preventing funds from entering the wrong account when both use the same public key.\nThe vulnerability concerned rules under development, not a confirmed theft from Ethereum’s mainnet. Developers have incorporated the correction into the specifications, although individual consensus clients still need to implement and test the revised behavior.\nEthereum Glamsterdam flaw exposed validator deposit risk\nThe issue emerged from changes planned under Glamsterdam’s enshrined proposer-builder separation, which assigns block construction and block proposal to different roles. Builders assemble transaction payloads, while validators participate in proposing and confirming blocks through Ethereum’s proof-of-stake system.\nResearcher avsetsin described the flaw on October 12, identifying a problem in the rules used to process deposits waiting when the network upgrades. If a builder registered using a public key before a validator deposit arrived under the same key, the proposed logic could credit both deposits to the builder.\nThe researcher outlined a scenario involving a staking operator receiving funds from a liquid staking protocol to establish a new validator. By registering as a builder first, the operator could cause the protocol’s validator deposit to enter the builder balance, where the withdrawal address could be under the operator’s control.\n\n“The operator can withdraw the protocol’s funds,” avsetsin warned in the GitHub report. \n\nSince the expected validator would not be created, the staking service could struggle to obtain the proof needed to complete its normal deposit and recovery procedures.\nThe researcher examined potential exposure involving Lido, Origin and Rocket Pool through preliminary code research. Those findings were conditional on how individual protocols handled deposits, and the report did not establish that the projects had suffered an exploit.\nDevelopers reverse decision after further review\nThe proposed correction initially encountered resistance from Ethereum client developers, despite the researcher’s description of the deposit-routing risk. On October 19, Traglia closed the pull request after discussions among core developers.\n\n“There was not enough support from clients to make this change at this time,” Traglia wrote. \n\nThe decision did not remain in place, with developers reopening the proposal on October 23 following further examination.\nSubsequently, reviewer potuz approved the approach but requested more tests for specific deposit combinations. Avsetsin added those tests on October 23, covering cases in which builder and validator deposits share a public key but require separate handling.\nThe final change was merged into Ethereum’s consensus specifications on October 26 after further client review. It directs valid validator deposits into the validator queue while allowing legitimate builder deposits to register or add funds to an existing builder.\nThe new rules distinguish deposits through withdrawal credentials, which determine the permitted withdrawal arrangements. They preserve separate builder and validator records even where the same public key appears in both roles.\nHoodi delay gives developers more time to investigate\nThe specification update arrived while Ethereum developers were reviewing a separate problem affecting Glamsterdam’s scheduled activation on the Hoodi testnet. The Ethereum Foundation postponed the October 26 upgrade after researchers identified compatibility risks involving EIP-8037.\nAs crypto.news previously reported on the postponement, the decision removed both the Amsterdam execution changes and Gloas consensus changes from Hoodi’s planned activation. The proposed increase to a 200 million gas limit was postponed with them.\nEthereum researcher Toni Wahrstätter explained that EIP-8037 could interfere with smart contracts relying on assumptions about gas remaining during execution. He identified cases where gas accounting could cause a transaction to revert unexpectedly or allow an execution path that developers had assumed was unreachable.\nThe contract-compatibility problem is distinct from the builder-deposit flaw addressed in the GitHub correction. Both concern Glamsterdam, but the Foundation’s October 22 postponement specifically cited further investigation of EIP-8037’s interaction with existing contracts.\nEthereum clients must implement the revised rules\nGlamsterdam already activated on the Sepolia testnet on October 6, where developers examined block construction changes and higher transaction-processing capacity. The subsequent Hoodi rehearsal remains unscheduled, with no confirmed date for activation on Ethereum mainnet.\nThe merged deposit correction contains regression tests covering how deposits are classified during the Gloas transition. Client teams must incorporate the specification change into their software and complete further testing before the updated rules can operate during a future network upgrade.\n\n\n\n\n\n                Read more:\n            \n\n                IBM, Oracle, Intel join OKX-ICE tokenized stock objections as total hits 26","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.52.0","shortVersion":"4.52.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2678124446","isCrawlerRequest":true}