Ethereum Fixes Validator Signature Flaw Ahead of Glamsterdam Upgrade

Ethereum developers have fixed a vulnerability that could cause validator signature errors ahead of the network’s next major upgrade, Glamsterdam, U.Today reported on November 13.

A code patch to address a validator public-key cache poisoning flaw in one of Ethereum’s consensus clients has been merged on GitHub, the report said.

The vulnerability is tied to Gloas, a consensus-layer change included in the Glamsterdam upgrade. Under certain conditions, validator public-key data could be stored incorrectly, causing some nodes to treat valid signatures as invalid.

If exploited, the flaw could trigger a chain fork that separates some nodes from the main blockchain.

The core change in the patch is that validator public keys are now stored in the global cache only after their activation eligibility has been finalized. That is meant to prevent conflicts between validator data on different chains.