The Ethereum developer claims that the recent upgrade of Pectra Testet Sepolia had errors, which worsened after the attacker used the “edge box” to cause the extraction of empty blocks.
Pectra moved into the final testnet, Sepolia, at 7:29 March 5, but the developer Ethereum Marius van der Wijden said on March 8 post The fact that the band immediately began to see messages about errors in their node Geth and extracting empty blocks.
According to Van der, Wijden error shows that the deposit agreement caused the wrong type of event – a transfer event instead of a deposit.
The amendment was introduced, but Van der Wijden claims that they missed one edge housing, and the unknown user used it by sending a 0-token transfer to the deposit address, which again caused an error.
“After a few minutes we saw many empty blocks again, so we looked at the transaction pool again and found another offensive transaction that caused the same edge cases,” he said.
Source: Marius van der Wijden
“First, we thought that someone of trusted validative made a mistake, but we quickly realized that this transaction came from a new account recently financed by a tap.”
The ERC-20 standard does not prohibit the zero token transfer; This allows everyone, even if they have no tokens, transfer to another address that an unknown user has completed, said Van der Wijden.
“The only way to stop the attack would be filtering all transactions that affect the deposit agreement. So we made the following private correction, which we implemented in several Devops nodes. “
“We suspected that the attacker reads some of our chats, so we decided not to publish the amendment, but updating only a few nodes that we controlled to get more full blocks on the network,” he added.
Source: Marius van der Wijden
At 14.00 all nodes were updated with a correction, and the unknown user transaction was successfully extracted.
Van der Wijden said that they have never lost their finalization during the incident, and the problem was isolated for sepolia because they used a goal deposit agreement instead of a normal deposit agreement.
Earlier, programmers tested the PECTRA update on an open TestNet on February 26, which also encountered problems.
As a result, programmers decided to postpone the PECTRA update until you can do further tests.
Related: Ether fondness hits annual every year, but it could be a good thing: Santiment
Fork Pectra is compatible with the Dencun update on the network, which reduced transaction fees for the layer 2 network and improved the economy of sagging Ethereum. Dencun Tough Fork moved in March 13, 2024.
The Ethereum Foundation has recently a fresh leadership structure with two co-directions of the Foundation, HSiao-Wei Wang and Tomasz Stańczyk, taking the helmet.
Warehouse: Megaeth can save Ethereum … but at what cost?