ETH news: Ethereum fixes Glamsterdam bug that could have sent staking deposits to builders

ETH news: Ethereum fixes Glamsterdam bug that could have sent staking deposits to builders

Summary

Ethereum developers merged a Glamsterdam upgrade fix for a flaw that could have misdirected pending validator deposits to a builder using the same public key, potentially allowing the builder to withdraw ETH intended for a new validator. The finding was conditional and not a confirmed live exploit; no losses were reported, and existing protocol checks may have blocked it. After initially rejecting the change over insufficient client support, developers reopened and reviewed it, then added rules sorting pending deposits by withdrawal credentials so validator funds remain assigned to validators. Client teams still need to implement the fix. Glamsterdam has run on Sepolia, but its Hoodi testnet launch was postponed, and a new date is required before a mainnet launch can be scheduled.