Author: Olivia Martinez
As previously announced, the Holešky testnet has reached its planned end-of-life date and will be sunset shortly. The vast majority of remaining validator nodes will be shut down 2 weeks after the Fusaka upgrade has finalized on Holešky. After this, Holešky will no longer be supported by client, testing or infrastructure teams. Following the launch of the Hoodi testnet in March 2025, infrastructure providers and staking operators have had the opportunity to migrate their testing operations. Background Holešky was launched in 2023 as Ethereum’s largest public testnet, designed specifically for testing staking infrastructure and validator operations at scale. The network…
Notes from the Ethereum Foundation’s Protocol Security team on running coordinated AI agents against real protocol code, including how we organize the work, what holds up under scrutiny, and what client teams and security researchers can take from it. This post stands on its own; later posts will go deeper on individual clients. What we’ve been running, and what surprised us On the Ethereum Foundation’s Protocol Security team, we’ve been running coordinated AI agents against the kinds of systems the network depends on, like systems software, cryptographic code, and contracts that have to be right. The agents found real bugs.…
We are pleased to share that pcaversaccio (pc) has joined the Ethereum Foundation Board. pc is a long time contributor to the Ethereum ecosystem, a co-founder and lead of SEAL 911, and has been a member of the EF’s Silviculture Society, which provides informal counsel to EF aimed at sustaining the core values of censorship resistance, open source, privacy, and security. pcaversaccio authored The Ethereum Cypherpunk Manifesto, a 2024 adaptation of Eric Hughes’ A Cypherpunk’s Manifesto applied to Ethereum, Ethereum Privacy: The Road to Self-Sovereignty (2025) and has helped advance security practices across the ecosystem through technical contributions and community…
The Ethereum Foundation’s Trillion Dollar Security (1TS) initiative is proud to announce a grant allocation to Freedom of the Press Foundation (FPF) to support the continued development of WEBCAT. WEBCAT is an open source tool that lets browsers verify that code served by an enrolled website matches what its developers published. The grant will also help bring that protection to Ethereum wallets and apps. Closing the front-end verification gap The grant targets a gap in how web applications are secured today. HTTPS authenticates the site you connect to and encrypts the connection, but it does not prove that the code…
Glamsterdam follows the Fusaka upgrade, advancing Ethereum’s L1 scaling roadmap with enshrined proposer-builder separation, block-level access lists, and changes to gas pricing that better reflect the cost of execution and state growth. The Glamsterdam network upgrade is scheduled to activate on Sepolia at epoch 353,024, slot 11,296,768 (October 6, 2026, 13:53:36 UTC). See the activation table below for the deployment schedule. Hoodi and mainnet activation dates have not yet been decided. Sepolia-compatible client versions will be added to the client release tables as they are confirmed. Node operators must update both their execution and consensus layer clients before activation. Glamsterdam…
tl;dr: zkAPI lets you pay for a metered API without being known. Deposit credits into an Ethereum vault once, then authorize bounded usage with zero-knowledge proofs instead of an identity. The provider sees the requests, and the payment layer sees the spend. Neither learns the link between them. The Open Anonymity Project built it with the Ethereum Foundation, and it runs on Ethereum Mainnet today. The problem Every AI API call today carries an identity. Your API key points to an account, the account to a payment method, and every prompt you send joins the record attached to both. The…
The Ethereum Foundation’s Trillion Dollar Security initiative has identified blind signing and transaction uncertainty as a user experience risk, and is exploring native transaction assertions as a next step to enforce a transaction’s final outcome, alongside Clear Signing. This post covers why a valid signature doesn’t always guarantee the transaction result you wanted, how native transaction assertions could protect users where today’s defenses stop, and the design choices behind them, with EIP-7906 (Transaction Assertions via State Diff Opcode) as one possible approach. Two ways a signed transaction can go wrong The problem starts with how Ethereum works. It executes exactly…
Today, we are excited to announce the start of the Fusaka audit contest, co-sponsored by Gnosis and Lido, hosted on Sherlock, and running for four weeks from September 15th. The goal is simple: maximize scrutiny of the Fusaka upgrade and surface vulnerabilities before they can impact the network. To raise the stakes, valid findings reported in the first week have a 2x multiplier applied to their points rewarded, and those in the second week have a 1.5x multiplier. To help security researchers, we’ve prepared a Fusaka auditor guide. We’re grateful to Gnosis for contributing 100,000 USD and Lido for contributing…