Ethereum’s Constantinople Upgrade Faces Delay Due to Security Vulnerability

Ethereum’s Constantinople Upgrade Faces Delay Due to Security Vulnerability 1

Ethereum’s long-anticipated Constantinople upgrade has just been delayed after a critical vulnerability was discovered in one of the planned changes.

Smart contract audit firm ChainSecurity flagged Tuesday that Ethereum Improvement Proposal (EIP) 1283, if implemented, could provide attackers a loophole in the code to steal user funds. Speaking on a call, ethereum developers, as well as developers of clients and other projects running the network, agreed to delay the hard fork – at least temporarily – while they assessed the issue.

Participants included ethereum creator Vitalik Buterin, developers Hudson Jameson, Nick Johnson and Evan Van Ness, and Parity release manager Afri Schoedon, among others. A new fork date will be decided during another ethereum dev call on Friday.

Discussing the vulnerability online, the project’s core developers reached the conclusion that it would take too long to fix the bug prior to the hard fork, which was expected to execute at around 04:00 UTC on Jan. 17.

Called a reentrancy attack, the vulnerability essentially allows an attacker to “reenter” the same function multiple times without updating the user about the state of affairs. Under this scenario, an attacker could essentially be “withdrawing funds forever,” said Joanes Espanol, CTO of blockchain analytics firm Amberdata in a previous interview with CoinDesk.

He explained:

“Imagine that my contract has a function which makes a call to another contract… If I’m a hacker and I’m able to trigger function a while the previous function was still executing, I might be able to withdraw funds.”

This is similar to one of the vulnerabilities found in the now-infamous DAO attack of 2016.

ChainSecurity’s post explained that prior to Constantinople, storage operations on the network would cost 5,000 gas, exceeding the 2,300 gas usually sent when calling a contract using “transfer” or “send” functions.

However, if the upgrade was implemented, “dirty” storage operations would cost 200 gas. An “attacker contract can use the 2300 gas stipend to manipulate the vulnerable contract’s variable successfully.”

Constantinople was previously expected to activate last year, but was delayed after issues were found while launching the upgrades on the Ropsten testnet.

Ethereum image via Shutterstock

Ethereum’s Constantinople Upgrade Faces Delay Due to Security Vulnerability 2
About the author

E-Crypto News was developed to assist all cryptocurrency investors in developing profitable cryptocurrency portfolios through the provision of timely and much-needed information. Investments in cryptocurrency require a level of detail, sensitivity, and accuracy that isn’t required in any other market and as such, we’ve developed our databases to help fill in information gaps.

Related Posts

E-Crypto News Executive Interviews



bitcoin
Bitcoin (BTC) $ 44,772.00
ethereum
Ethereum (ETH) $ 3,146.09
cardano
Cardano (ADA) $ 2.26
tether
Tether (USDT) $ 1.00
binance-coin
Binance Coin (BNB) $ 382.77
xrp
XRP (XRP) $ 0.995978
solana
Solana (SOL) $ 148.73
polkadot
Polkadot (DOT) $ 32.75
usd-coin
USD Coin (USDC) $ 1.00
dogecoin
Dogecoin (DOGE) $ 0.222678
USD
EUR
GBP
bitcoinBitcoin (BTC)
$ 44,772.00
ethereumEthereum (ETH)
$ 3,146.09
tetherTether (USDT)
$ 1.00
bitcoin-cashBitcoin Cash (BCH)
$ 549.72
litecoinLitecoin (LTC)
$ 163.99
bitcoinBitcoin (BTC)
38.176,95
ethereumEthereum (ETH)
2.682,66
tetherTether (USDT)
0,852697
bitcoin-cashBitcoin Cash (BCH)
468,74
litecoinLitecoin (LTC)
139,83
bitcoinBitcoin (BTC)
32,823.47
ethereumEthereum (ETH)
2,306.48
tetherTether (USDT)
0.733125
bitcoin-cashBitcoin Cash (BCH)
403.01
litecoinLitecoin (LTC)
120.23

Automated trading with HaasBot Crypto Trading Bots

Crypto Scams

Crypto Scams
Crypto Scams Still Persistent In 2021, SEC Warns About Red Flags To Watch
September 9, 2021
Poly Network
Here’s How Hackers Stole Over $600 million in the Poly Network Attack
August 12, 2021
The World’s Most Infamous Crypto Hacks and Scams
July 31, 2021
Cryptocurrency Exchanges
Cryptocurrency Exchanges and the Plague of Scams and Bans
June 29, 2021
What Role Do Cryptocurrencies Play In The Era Of Ransomware Attacks?
June 9, 2021

Blockchain/Cryptocurrency Questions and Answers

Beginner’s Guide to Investing in Cryptocurrency
August 9, 2021
Short-Sell Cryptocurrency
How to Short-Sell Cryptocurrency: A Brief Overview
July 17, 2021
Klaytn
What Is Klaytn (KLAY) And How Does It Work?
July 16, 2021
Cryptocurrencies
Our Crypto Roundup Interview Asks- Do Cryptocurrencies Have a Future?
July 15, 2021
Solana
What Is Solana (SOL) And How Does It Work?
June 26, 2021


CryptoCurrencyUSDChange 1hChange 24hChange 7d
Bitcoin44,806 0.01 % 2.75 % 7.02 %
Ethereum3,150.5 0.22 % 3.54 % 12.39 %
Cardano2.250 0.53 % 0.46 % 9.79 %
Tether0.9986 0.03 % 0.08 % 0.23 %
Binance Coin382.73 0.09 % 1.34 % 10.98 %
XRP0.9951 0.26 % 0.15 % 11.06 %
Solana149.26 0.23 % 0.48 % 5.89 %
Polkadot30.87 2.19 % 17.29 % 10.73 %
USD Coin1.000 0.15 % 0.29 % 0.31 %
Dogecoin0.2230 0.04 % 1.98 % 9.85 %

bitcoin
Bitcoin (BTC) $ 44,772.00
ethereum
Ethereum (ETH) $ 3,146.09
cardano
Cardano (ADA) $ 2.26
tether
Tether (USDT) $ 1.00
binance-coin
Binance Coin (BNB) $ 382.77
xrp
XRP (XRP) $ 0.995978
solana
Solana (SOL) $ 148.73
polkadot
Polkadot (DOT) $ 32.75
usd-coin
USD Coin (USDC) $ 1.00
dogecoin
Dogecoin (DOGE) $ 0.222678