Ethereum Fixes Glamsterdam Staking Deposit Vulnerability
Ethereum developers patched a vulnerability in the planned Glamsterdam upgrade that could have put ETH intended for new validators at risk. Under the draft rules, deposits from a builder and a staking service using the same public key could have been attributed to the builder, leaving the validator uncreated and the staking service without a clear route to recover the funds. Lido researcher Avsetsin identified the conditional risk and examined possible exposure at Lido, Origin and Rocket Pool; no attack or losses have been reported, and the findings did not confirm that any live deployment was vulnerable. Developers initially rejected a proposed fix on 19 October over client-team support concerns. After further tests were provided on 23 October, they merged a correction on 26 October. The new Glamsterdam rules classify pending deposits by withdrawal credentials to separate validator funds from builder balances. Client teams still need to implement the change. Glamsterdam’s Hoodi testnet launch, scheduled for 26 October, was postponed, with no new date announced. For ETH traders, the patch is a positive protocol-security signal, but there is no confirmed immediate price impact; client readiness and testnet progress remain key developments to watch.
Neutral
The fix reduces a potential security risk in Ethereum’s planned Glamsterdam upgrade, which is supportive of confidence in the network and its staking infrastructure. However, the issue was a conditional vulnerability in draft rules, not a confirmed exploit, and no losses or live-deployment exposure were reported. The patch therefore does not point to an immediate change in ETH supply, demand or network activity, making a direct short-term price effect unlikely. Traders may view the correction positively, but the postponed Hoodi testnet launch and the need for client teams to implement the change leave execution risks unresolved. Longer term, successful testing and client adoption could reinforce confidence in Ethereum; further delays or new issues could weigh on sentiment. Overall, the security improvement is constructive, but the available information does not establish a clear directional catalyst for ETH.