⏱ 2 min read
ChainSecurity cited gas-behavior risks and 13 real-world cases; node operators were told to roll back until client releases cancel the Hoodi schedule.
Ethereum developers postponed the Glamsterdam testnet fork on Hoodi after auditor ChainSecurity warned that its gas changes introduce security risks and said it had identified 13 “real-world examples.” “It has just been decided to delay the Glamsterdam hard fork on the Hoodi testnet because of security impacts we identified,” ChainSecurity wrote on October 22, adding it had “already found 13 real-world examples” and is in responsible disclosure with affected projects.
How gas changes upend failure checks
Glamsterdam adjusts how Ethereum charges for creating and accessing stored data via EIP-8037 and EIP-8038, and it introduces a separate pool of gas for creating new state, the report says. According to ChainSecurity’s analysis, those changes break assumptions many contracts use to defend against insufficient gas griefing, where an attacker supplies too little gas so a valid external call fails and is recorded as a permanent failure.
Under the new rules, gas can be refilled or returned after a failed external call, and repricing can change how much gas a call requires, ChainSecurity found. That can alter control flow for contracts that depend on out-of-gas behavior or gas checks to keep operations retryable. As the firm put it, “Even with unchanged contract code, a failure path that previously reverted can now complete.” ChainSecurity urged projects to review their contracts, and said the Ethereum Foundation is assessing how many are affected.
▼ 0.81%
Prices as of 2026-10-24 01:02 UTC. Source: CoinGecko.
Immediate steps and where Glamsterdam is live
The upgrade had been scheduled to activate on Hoodi on Monday. Ethereum researcher Christine Kim said node operators should revert to an older software release without the upgrade scheduled, or wait for their execution client teams to publish versions that cancel it. Preston Van Loon, a developer on the Prysm consensus client, said a Prysm release removing the upgrade from Hoodi’s schedule would follow the same day.
The report says Glamsterdam is already active on the Sepolia test network, which enabled the upgrade on October 6 and began producing blocks with a gas limit of nearly 200 million, more than three times mainnet’s 60 million. It also adds block-level access lists for parallel transaction checks, and moves the block-builder auction into Ethereum’s protocol rules.
Developers had aimed to ship Glamsterdam on mainnet by the end of 2026, before Hegotá, the next planned upgrade expected in 2027 that could add native privacy features, according to the report. No new date has been set for the Hoodi fork.
Source: Decrypt.
This article was written with AI assistance and reviewed by an editor.
This content is for informational purposes only and does not constitute financial advice.
🧠 HafidWatch Take
The simultaneous activation of Glamsterdam on Sepolia and the delay on Hoodi highlights significant coordination challenges for Ethereum client teams. They must support differing network states, which increases the complexity of development and testing. This split could slow progress and heighten the risk of inconsistencies, emphasizing the importance of careful management before resuming the upgrade on mainnet.
Daily crypto intelligence. Before the market opens.
Including the Divergence Index — the sentiment gap no other newsletter tracks. Free, every morning at 7:30am ET.
✓ Free forever · ✓ No spam · ✓ 50+ sources monitored
