Ethereum developers have postponed the Glamsterdam hard fork on the Hoodi testnet following the discovery of security vulnerabilities. The audit firm ChainSecurity identified issues related to how the upgrade modifies gas mechanisms, noting that 13 real-world examples of potential exploits have already been found.
The upgrade, which was scheduled for Monday, introduces changes to gas fees for data storage through EIP-8037 and EIP-8038. ChainSecurity warned that these modifications could allow previously failing contract operations to complete, potentially enabling insufficient gas griefing attacks. The Ethereum Foundation is currently assessing the number of impacted projects.
Node operators are advised to revert to previous software versions or wait for updates from their execution client teams. Preston Van Loon, a developer for the Prysm consensus client, confirmed that a release removing the upgrade from the Hoodi schedule is underway. No new date for the testnet fork has been announced.
Glamsterdam remains active on the Sepolia test network, which implemented the upgrade on October 6. This version features a gas limit of nearly 200 million, compared to the 60 million limit on the mainnet. The upgrade also introduces block-level access lists and modifies the block assembly auction process.
The broader roadmap for Ethereum includes the mainnet launch of Glamsterdam by the end of 2026. This will be followed by the Hegotá upgrade in 2027, which is expected to introduce native privacy features to the network.
