Glamsterdam testnet upgrade delayed, EIP-8037 found to have contract compatibility issues

Odaily reports: Toni Wahrstätter stated that ChainSecurity reported that EIP-8037 has compatibility and security issues with some smart contracts, and core developers decided last week to delay the Hoodi testnet upgrade to Glamsterdam. The issues discovered include that remaining Gas during transaction execution may increase, causing some Gas counting logic to underflow and trigger a rollback, or trigger code paths that should not have been executed, making the transaction appear successful; some contracts may also underestimate usage because they cannot correctly calculate Gas consumption during calls. ChainSecurity previously stated it had found 13 real cases and is conducting responsible disclosure with affected projects.

Toni Wahrstätter said that this week further investigation of the relevant contracts and evaluation of solutions will be carried out, and the handling work may require coordination among application developers, core developers, auditors, and node operators, and in the worst case may require adjusting the protocol specification. He reminded application developers and auditors to check contract compatibility with EIP-8037 and EIP-8038 and report issues promptly.