Ethereum developers have finalized a fix for a deposit processing vulnerability identified in the upcoming Glamsterdam upgrade. The issue, discovered on October 12, could have caused ETH intended for staking to be incorrectly credited to block builder balances instead of validators.
The flaw stemmed from how the network handled pending deposits during the transition to the new enshrined proposer-builder separation (ePBS) model. Under the previous specification, deposits sharing the same public key could be misrouted if a block builder was registered before a validator deposit was processed.
The fix, which mandates separating validator and builder deposits by withdrawal credentials, was merged into the main Ethereum specification branch on October 26. Developers confirmed the solution through successful testing, ensuring that validator assets remain secure even if a builder uses identical public keys.
The Glamsterdam upgrade aims to enhance network throughput by introducing ePBS, data access lists, and adjustments to computational costs. While the update was previously activated on the Sepolia testnet on October 6, its deployment on the Hoodi testnet remains delayed to allow for further evaluation of EIP-8037.
