Ethereum clients have patched a flaw that could have allowed attackers to redirect ETH deposits intended for new validators. The issue affected the draft rules for ePBS, a mechanism separating block builders from validators as part of the upcoming Glamsterdam upgrade. When both types of actors used the same public key, staking deposits could have been credited by mistake to the builder’s account. The fix, merged into the consensus specifications between October 23 and October 28, 2026, now routes deposits using withdrawal credentials rather than relying solely on public keys. No funds were lost, and the change was successfully activated on the Sepolia testnet, while its deployment on Hoodi was postponed.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
