
The amount of vulnerability reports we get has also followed a similar graph over the same time period, it’s been hard to deal with. Lots of duplicate won’t-fix type issues (yes you can read our public APIs, that’s what they are for) but many valid modest issues that we’ve addressed and paid out for. Almost all of Ethereum’s $100b of active stake has at least one single point of failure that could leak its keys and get it slashed. Bad OpSec, bad supply chains, high exposure to particular software, operating systems, CPUs, and more could lead delegators who trust solo setups to up to 100% loss of their principal. We’re going to help simplify and highlight these single points of failure in a new initiative aimed at improving Ethereum’s security and its stakers’ ETH safety. If successful, most organisations will move from single point of failure setups to staking systems without a single point of failure, such as multi-operator distributed validator setups. This will better secure their stakers’ funds and ensure Ethereum never goes offline.
