Ethereum’s Glamsterdam Upgrade Faces Delay Over Smart Contract Security Risks
Ethereum developers have officially hit the brakes on the Glamsterdam upgrade following the discovery of critical security vulnerabilities within proposed network changes. Originally slated for testing on the Hoodi network this October, the postponement comes as a precautionary measure to protect existing smart contracts from the unintended consequences of new gas-accounting protocols.
Security Vulnerabilities in Gas Accounting
The core of the issue lies in two specific proposals, EIP-8037 and EIP-8038, which aim to refine how Ethereum handles transaction costs and state creation. While these changes were designed to increase network capacity by aligning gas fees more closely with resource consumption, blockchain security firm ChainSecurity identified a significant flaw. The investigation revealed that these modifications could break the "failure-recovery" safeguards used by many decentralized finance (DeFi) applications. By altering how gas is made available during execution, the upgrade could inadvertently allow attackers to force permanent transaction failures, preventing users from retrying valid operations like withdrawals or batched transactions.
Timeline Pressures and Network Impact
This setback complicates an already tight schedule for the Ethereum roadmap, which had already seen the Glamsterdam deployment window slip from the first half of 2026 toward a December target. Developers had hoped to finalize a mainnet activation date following the Hoodi testnet launch, but the discovery of 13 real-world examples of affected applications has forced a return to the investigation phase. Beyond the immediate security fix, the postponement also pauses a planned increase in the Hoodi gas limit to 200 million, a move intended to test the network’s ability to handle significantly larger transaction volumes. As the window for a year-end activation narrows, the community now watches closely to see how this delay will impact the subsequent Hegotá upgrade scheduled for later in the cycle.
