Odaily Planet Daily reports that Toni Wahrstätter stated that ChainSecurity’s report identified compatibility and security issues with EIP-8037 affecting certain smart contracts. Core developers decided last week to delay the Hoodi testnet upgrade to Glamsterdam. Issues discovered include the potential for remaining gas to increase during transaction execution, causing underflow in some gas counting logic and triggering rollbacks, or activating code paths that should not have been executed, making transactions appear successful. Some contracts may also underestimate gas usage due to incorrect calculation of gas consumption during calls. ChainSecurity previously reported having identified 13 real-world cases and is conducting responsible disclosure with affected projects.
Toni Wahrstätter stated that further investigation of the relevant contracts and evaluation of solutions will continue this week. The resolution process may require collaboration among application developers, core developers, auditors, and node operators, and in the worst-case scenario, adjustments to the protocol specifications may be necessary. He reminded application developers and auditors to check contract compatibility with EIP-8037 and EIP-8038 and to report any issues promptly.