Ethereum Foundation Urges Developers to Audit Their Contracts: EIP-8037/8038 Will Break 8 Invariants

November 6: According to the Ethereum Foundation blog, Ethereum Foundation developer Marius van der Wijden published a post urging contract developers and auditors to check whether their projects rely on 8 invariants that will be broken by the Glamsterdam upgrade. The Foundation has released a GitHub repository providing explanations, examples and self-check prompts for each invariant; those affected can emailglamsterdam@ethereum.org. Previously, security firm ChainSecurity found that some projects rely on these invariants. Because EIP-8037 and EIP-8038 change the gas accounting for certain operations and state, these projects will be vulnerable after the upgrade. The Ethereum All Core Developers (ACD) call has decided to delay the hard fork process and will not execute the fork on the Hoodi testnet until the issue is resolved. The Foundation said it has commissioned multiple audit firms and conducted internal audits, but cannot cover all projects.

Previous coverage: the Ethereum Foundation postponed the Glamsterdam upgrade on the Hoodi testnet, with the specific date still to be determined.