Over the past two weeks, the Ethereum network has been the target of a sustained attack. The attackers were very cunning in the location of vulnerabilities in the customer’s implementations as well as in the specification of the protocol.
Although recent fixes have led to an overall increase in resilience in customer implementations, attacks have also shown that a change in level below the EVM pricing model is necessary.
For many users, the most visible consequence is probably that they have difficulty including transactions in the blocks, and complete nodes are faced with memory limitations in the management of the inflated state.
This is our strategy to solve these problems:
- As a temporary measure to minimize the effects of the most recent attack, we recommend that all minors reduce gas to 500K.
- A hard handle based on EIP 150 version 1C will be put into force in the block
2457000(see below). This will resume certain operations to better correspond to the complexity of underlying calculation. - A second fork will follow shortly after, aimed at restoring the current “Bloat of State” introduced by the attacks. This second fork will be used to delete empty accounts; lacking code, balance, storage and nuncio == 0.
We have implemented the required changes to customers and are currently extending and adding tests in order to prevent the introduction of vulnerabilities of consensus revolution.
And as a reminder, the BOUNTY DE BUG ETHEREUM is open and includes the new Hardfork implementations.
Edit: Fork Block was moved to 2463000 In order to welcome even more tests.