Unknown attackers cause headaches during the PECTRA upgrade from SEPOLIA.
Etherrium developer recently says that the PECTRA upgrade of SEPOLIA Testnet has resulted in an error, and the attacker has worsened after causing mining of empty blocks using “edge case”.
PECTRA was released on March 5 at 7:29 am on the final test net Sepolia, but Ethereum developer Marius Van der Wijden said in a March 8 post that the team immediately saw an error message on the Geth node and mine empty blocks.
According to Van der Wijden, the deposit contract has caused the wrong type of event (transfer event instead of deposits).
Although the modification began, Van der Wijden said he missed one edge case, and unknown users sent 0-TOKEN remittances to the deposit address and triggered the error again.
“A few minutes later we saw the empty block again, so we looked back on the trading pool and found another unpleasant deal that caused the same edge case.”
source: Marius Van Der Widen
“First, we thought that someone on a reliable validation test had made a mistake, but this transaction quickly realized that the faucet came from a new account that supported funds.”
The ERC-20 standard does not prohibit zero token transmission. Through this, even if you do not own a token, others can send them to other addresses realized by unknown users, Van der Wijden said.
“The only way to stop the attack is to filter all transactions that interact with the deposit contract. So we created the following personal modifications:
“We decided not to disclose the modifications because we suspected that the attacker was reading some of the chat, but we only updated a few nodes that controlled to get more blocks in the network.”
source: Marius Van Der Widen
By 2 pm, all nodes have been updated with modifications, and unknown user transactions have been successfully mined.
Van der Wijden said he did not lose his finals during the incident, and it was isolated from Sepolia because he was using a token gate deposit contract instead of a general main net deposit contract.
Previously, developers tested PECTRA upgrades on Holesky Testnet on February 26 and had a problem.
As a result, the developer decided to postpone the PECTRA upgrade until more tests could be performed.
relevant: Ether sentiment is low every year, but it can be a good thing: Santimate
The PECTRA WORK has reduced the trading fee of the Layer-2 network along with the Dencun upgrade of the network and improved the economy of Ether Leeum rollup. Dencun Hard fork was released on March 13, 2024.
The Ethereum Foundation recently led a new leadership structure with the two co-supervisors of the Foundation of the Hsiao-WEI WANG and TOMASZ STACZAK.
magazine: Megaeth Launch can save Etherrium. But what is the cost?