Ethereum reverses course, fixes Glamsterdam validator deposit flaw

Ethereum developers have merged a fix for a deposit-handling flaw in the upcoming Glamsterdam upgrade that could have allowed a block builder to receive ETH intended for a new validator, following an initial decision to reject the proposed change. Summary Ethereum merged a Glamsterdam deposit-handling fix on October 26. The flaw could have credited staking deposits to builders sharing the same public key. Developers initially rejected the correction before approving additional tests. A separate contract-compatibility investigation has delayed Glamsterdam’s Hoodi activation. According to Ethereum’s consensus specifications, maintainer Justin Traglia merged the correction on October 26 after developer avsetsin identified a problem with how pending deposits would be processed during the Gloas fork. The change separates builder deposits from validator deposits according to their withdrawal credentials, preventing funds from entering the wrong account when both use the same public key. The vulnerability concerned rules under development, not a confirmed theft from Ethereum’s mainnet. Developers have incorporated the correction into the specifications, although individual consensus clien...