Week in Ethereum News, December 9, 2023

and

Dec 09, 2023

Eth News and Links

Dencun (Cancun + Deneb) upgrade (meta EIP7569)

Latest all core devs – execution (ACDE) call video. Recap by Tim Beiko. Notes from Tim Beiko and Christine Kim:
- Devnet-12: issues being found & fixed; Prysm expect to join in 1-2 weeks
- Goerli ~300 node shadow fork planned before end of December
- Goerli upgrade to be scheduled in January to test 3/6 (target/max) blobs
- Community can propose EIPs for next upgrade, to be discussed in January
Consensus-specs v1.4.0-beta.5: clarifies when clients can serve blocks & sidecars byRoot

Centralization watch: threatening the value of your ETH

🚨 Lido at 32.03% is far too close to 33.3% threshold
Client diversity (via clientdiversity.org):
- Execution layer: Geth ~84% supermajority, could possibly cause a chain split
- Consensus layer: Prysm 41% & Lighthouse 34%, any client bug over 33.3% could mean loss of finality
Better geographic diversity is optimal, particularly outside of North America & Europe

Layer 1

Reth (node) crawler: ~19k active nodes found using UDP & inbound TCP
Erigon 2024 roadmap: Erigon++ (evmone, SilkRPC C++ components), Caplin full archive node, Erigon v3 & Otterscan (enhanced with Erigon v3 & Beacon Chain capability via Caplin)
Lightclients: EIP3074 (AUTH & AUTHCALL opcodes) would allow EOAs to be used within ERC4337 (Account Abstraction using alt transaction pool)

For Stakers

Rescue Node adds support for solo stakers, fallback node for temporary access in emergencies/maintenance

Client releases

Execution layer:
- Erigon v2.55.1: patch
- Nethermind v1.23.0: OP Stack support (Canyon upgrade not yet supported), initialize DB using snapshot and reduced memory consumption when overloaded with CL requests
- Reth v0.1.0-alpha.13: fix block commit times for full node & heavy RPC tracing users

Research

Timing games: implications of proposers delaying block publication to increase MEV and pros & cons of possible mitigations
CEX<>DEX arbitrage empirical analysis

Layer 2

EIPs/Standards

ERCs (application layer):
- ERC7570: Security token interface for confidentiality & legal status transparency
- ERC7571: Shadow events
- ERC7572: Contract-level metadata via contractURI

Stuff for developers

Solidity developer survey 2023: feedback to the Solidity team
Shadow logs: add custom events for contracts to offchain shadow fork, access via RPC
Foundry Go differential fuzzing template to compare Solidity & Go implementations
Wagmi-permit: sign ERC2612/DAI permits with viem/wagmi
Guide to web3.py typed data message signing
EF Python team: Ethereum Python user survey
OpenZeppelin access manager explorer for contract permissions
Protolambda’s Grug wallet design

Security

OpenZeppelin: contracts integrating both Multicall & ERC2771 vulnerable to address spoofing
- Thirdweb vulnerability, impacted pre-built contract deployers need to mitigate

Ecosystem

Blocknative Ethernow transaction explorer (including live transaction pool), desktop only
Parsec block explorer, supports mainnet & L2s, transaction heat map and custom layouts for address types
MEV searching strategy: blind arbs on private orderflow
EF run a node grantees: 35 recipients from 23 countries
Optimism’s RetroPGF3 voting ended, 502 projects qualified for share of 30M OP

Enterprise

Onchain stats

Gas fees (via ultrasound.money): 21.4 to 144.2 gwei, with 45.2 gwei average
- Zero net issuance currently at 21.8 gwei
- 17.6k ETH net burn this week
ETHUSD: $2,086 - $2,385, currently $2,361
ETHBTC: currently 0.053 (Flippening at ~0.16)

Notable at app layer

Safe RecoveryHub: set multisig recoverer(s), recovery attempt can be canceled within review window
Coinbase Wallet links: send USDC via a shareable link, returned if not claimed within 2 weeks
Matcha cross chain swaps live on mainnet, L2s & sidechains
Proof of P2P: soulbound NFT, zk proof of unique human with P2P account, requires Venmo
Optimism We ❤️ the Art (NFT creator contest) extended to January 8

Job listings: $600 for four issues (75 character limit). Pay using 3cities. Questions? abcoathup at-gmail

Regulation/business/tokens

Russian owner of Bitzlato exchange pleaded guilty to unlicensed money transmitting [back in January US DoJ pre-announced enforcement action]
Platypus hackers acquitted by Paris court, as deemed smart contract interaction

General

Governments obtained push notification metadata from Apple (subpoena) & Google (court order)
Security self audit: Telegram and Google account

Follow @WeekinEthNews to find out what the most clicked links are. Follow @abcoathup and @evan_van_ness to get most of the week’s news in real time.

(new/changes in bold)

Sign up to receive this newsletter weekly