Update
Ethereum clients patch vulnerability to prevent ETH reward redirection
The Ethereum protocol’s draft Glamsterdam rules contained a flaw that could have redirected ETH deposits intended for new validators to builder accounts. The issue, reported by researcher avsetsin, was fixed before any funds were lost. Maintainer Justin Traglia merged the patch into the consensus specifications between October 23 and October 28, 2026 after an initial rejection on October 19. The fix changes deposit sorting to use withdrawal credentials instead of public keys. It has been exercised on the Sepolia testnet, while activation on the Hoodi testnet was postponed.