Ethereum delays its Glamsterdam upgrade test over gas flaws

What was found. Glamsterdam changes how much it costs to create and access stored data. These are two proposals, EIP-8037 and EIP-8038. They add a separate pool of gas for creating new state. ChainSecurity writes that because of this, gas can flow back to a contract after a failed call. As a result a path that used to simply revert can now complete, even if the contract code has not changed.

Why it matters. Many contracts guard against a trick where an attacker deliberately gives a call too little gas. A valid operation then fails and gets recorded as a permanent failure, when it should have stayed retryable. The guard relies on old gas prices. Under the new rules it may not work. An example from the analysis: writing to a fresh storage slot costs 22,100 gas today, and after Glamsterdam 12,100 execution gas plus 97,920 for creating state.

What developers are doing. According to Decrypt, node operators are told to roll back to an older software release or wait for a client version that cancels the fork. The Prysm client team promised such a release the same day. ChainSecurity urges projects to check how their contracts handle failed calls.

Who it affects. Smart contract and DeFi developers first. ETH holders are affected through the timeline: the upgrade has run on Sepolia since 6 October, and mainnet was expected by the end of 2026. The next upgrade, Hegotá, is expected in 2027.

Hechos confirmados

• The Glamsterdam activation on the Hoodi testnet, set for Monday, was postponed over issues found by ChainSecurity.^[2]
• ChainSecurity said it had found 13 real-world examples and is in responsible disclosure with the affected projects.^[2]
• Glamsterdam changes how state creation and access are charged through EIP-8037 and EIP-8038 and adds a separate state-gas reservoir.^[1]
• ChainSecurity writes that even with unchanged contract code, a failure path that previously reverted can now complete.^[1]
• A cold fresh-slot write costs 22,100 gas today and 12,100 execution gas plus 97,920 state gas under Glamsterdam.^[1]
• Node operators are told to revert to an older release or wait for a client version that cancels the fork; Prysm promised a release the same day.^[2]
• Sepolia activated Glamsterdam on 6 October, with a block gas limit of nearly 200 million versus 60 million on mainnet.^[2]
• Glamsterdam was aimed at mainnet by the end of 2026; no new date has been set for Hoodi.^[2]

Implicaciones

• ConfirmadoThe Hoodi fork will not happen on Monday, and there is no new date yet.
• Nuestra lecturaThe Glamsterdam mainnet release may slip later.
• Nuestra lecturaSome DeFi protocols may need updates before the fork ships.

Todavía no se sabe

• The new date for the Hoodi fork.
• How many contracts are affected beyond the 13 examples found.
• Whether EIP-8037 and EIP-8038 change before mainnet.

A quién afecta

Global. ETH holders, DeFi users, smart contract developers

Fuentes

1. ChainSecurity: Glamsterdam Hard Fork: When Spent Gas Comes Back 22 de octubre de 2026 · oficial
2. Decrypt: Ethereum Delays Glamsterdam Testnet Fork Over Gas Security Flaws 23 de octubre de 2026 · medios