Ethereum core developers delayed the implementation of the Glamsterdam upgrade on the Hoodi testnet until security concerns involving eight smart contract invariants are resolved

Overview Debates Related claims Topics Sources

Cc9f267dcNews eventClaim

The Ethereum Foundation stated that the Hoodi testnet fork of the Glamsterdam upgrade will not proceed until smart contract gas issues are resolved

The Ethereum Foundation called for smart contract checks after security audits raised concerns regarding Glamsterdam upgrade proposals

An October 13, 2026 ChainSecurity report found EIP-8037 and EIP-8038 break smart contracts when external calls fail, tied to eight smart contract invariants

The implementation of the Glamsterdam upgrade on the Ethereum Hoodi testnet remains paused, with no confirmed mainnet activation date set as of November 6, 2026

The Ethereum Foundation outlined the Glamsterdam upgrade's layer-1 scaling features in a blog post published on September 28, 2026

The Ethereum Glamsterdam upgrade includes enshrined proposer-builder separation, block-level access lists, and gas pricing updates to advance layer-1 scaling

The Ethereum Foundation stated on November 6, 2026 that EIP-8037 and EIP-8038 change how gas is charged for certain operations

Cc9f267dcClaimNews event

The Tempo development team discovered the Reth state-root software bug through automated security testing known as fuzzing

Cc9f267dcClaimNews event

Coinbase-backed layer-2 network Base patched its block builders without impacting users

Cc9f267dcNews eventClaim

Developers merged pull request #28264 containing the upstream software fix into Reth's GitHub code repository

Security firm Blockaid confirmed the Reth state-root calculation flaw was a code calculation error rather than an active exploit, with no stolen funds reported

Reth's block-building software used vulnerable calculation code across networks built with Optimism's OP Stack, creating shared defect risks across multiple interconnected Ethereum layer-2 blockchains

Cross-chain messaging protocol LayerZero temporarily paused select transfer routes as a precautionary measure while developers evaluated operational risks related to the Reth state-root software defect

Frax Finance reported on November 5, 2026, that its smart contracts and user assets remained secure despite LayerZero's temporary cross-chain route suspensions

Georgios Konstantopoulos, chief technology officer at Paradigm, said a flaw in execution client Reth's legacy state-root calculation system could return incorrect cryptographic hashes when processing specific smart contract storage configurations

Security firm Blockaid warned that blockchain nodes still running unpatched Reth software code could freeze up or return faulty state proofs

Justin Drake's updated Ethereum roadmap scheduled the Glamsterdam fork for deployment on Ethereum mainnet in January 2027

b14g paused its affected staking contracts at 10:35 UTC on October 31, 2026, approximately 66 minutes after the initial exploit occurred.

An attacker drained 91 staking positions in a single transaction on October 31, 2026, by submitting 99 zero-value withdrawal requests against unbacked staking positions on b14g.

The contract logic exploited in the October 31, 2026 b14g breach had been active for approximately 17 months prior to the incident without requiring administrator key compromises.