Ethereum fixes the Glamsterdam upgrade vulnerability, preventing staked ETH from being incorrectly credited to block builder accounts.

on October 27, according to CoinDesk, Ethereum developers have fixed a vulnerability in the upcoming Glamsterdam upgrade that could cause ETH deposited by staking services for new validators to be incorrectly credited to block builders' accounts, giving operators the opportunity to withdraw the associated funds. The fix was merged into the Ethereum consensus specification on October 26, after it had been rejected on October 19 due to insufficient support from client teams.

Researchers noted that the findings constitute conditional code vulnerabilities rather than confirmed actual attacks, with no loss reports filed so far. The fix still requires integration by client teams, and the launch of Glamsterdam on the Hoodi testnet has also been delayed.