Week in Ethereum News -The Latest Ethereum News and Upcoming Events This Week

2023-08-14, 01:18

[//]:content-type-MARKDOWN-DONOT-DELETE
![](https://gimg2.gateimg.com/image/article/1690791817Ethereumweekly.jpeg)
## Eth News and Links
### Dencun (Cancun + Deneb) upgrade
Latest all core devs – consensus (ACDC) [call video](https://www.youtube.com/watch?v=LJt4cu3eG2g&t=23s "call video"). Notes from [Terence](https://github.com/ethereum/pm/issues/844#issuecomment-1673359012 "Terence") and [Christine Kim](https://www.galaxy.com/insights/research/ethereum-all-core-developers-consensus-call-115/ "Christine Kim"):

Devnet 8 planned for early next week

Fork-choice filtering change will be bundled with Deneb release

EIP4788 (beacon block root in EVM) [draft assembly contract](https://github.com/lightclient/4788asm#readme "draft assembly contract"), optimizations for gas welcome

Latest Dencun testing [call video](https://www.youtube.com/watch?v=fQ6ugSRi3DA&t=160s "call video") (previously EIP4844 call)

[KZG Ceremony](https://ceremony.ethereum.org/ "KZG Ceremony") has 136k contributions, lobby closes August 23
### Layer 1
EthereumJS [v7](https://twitter.com/efjava_script_/status/1689653616079208449 "v7"): ESM support, removed Buffer, reduced dependencies & build sizes, default now Shanghai and Cancun support

[Holešky testnet to start with 1.4M validators](https://twitter.com/parithosh_j/status/1689753694487646208 "Holešky testnet to start with 1.4M validators") (twice the validators of mainnet) after EF devops spun up 3 large testnets to check sizing (2.1M validators had issues)

[Kurtosis package](https://ethereum-magicians.org/t/introducing-eth2-package-a-tool-for-spinning-up-private-testnets-in-a-single-command/15390 "Kurtosis package") to spin up multi-node EL/CL testnets in the cloud with any client combination (including Reth), comes with Grafana & Prometheus

Verkle Tries

[Verkle preimage](https://hackmd.io/jsign/vkt-preimage-generation-and-distribution "Verkle preimage") generation & distribution strategy

[Verkle Trie migration options](https://notes.ethereum.org/rudolf/migration "Verkle Trie migration options"): read-only vs writeable Merkle Trees

[Flashbots builder glitch](https://twitter.com/EigenPhi/status/1689887764077273088 "Flashbots builder glitch") included reverting transactions
### For stakers
Beacon chain [churn limit turned up to 11 per epoch](https://twitter.com/superphiz/status/1689918550050291713 "churn limit turned up to 11 per epoch")

[NanoPC-T6](https://twitter.com/EthereumOnARM/status/1689327953052577804 "NanoPC-T6"): run a full node on ~$300 hardware

[bloXroute ethical relay](https://twitter.com/bloxroutelabs/status/1690065892778926080 "bloXroute ethical relay") being sunset (filtered generalized frontrunning & sandwiching)
### Client releases
Execution layer:

Geth [v1.12.1](https://github.com/ethereum/go-ethereum/releases/tag/v1.12.1 "v1.12.1"): maintenance release, includes development for Dencun

Reth [v0.1.0-alpha.6](https://github.com/paradigmxyz/reth/releases/tag/v0.1.0-alpha.6 "v0.1.0-alpha.6"): follow up to fix in alpha.5 that handles reorgs 
### Research
[Second slot reorgs](https://ethresear.ch/t/the-second-slot-itch-statistical-analysis-of-reorgs/16333 "Second slot reorgs"): slot indices impact likelihood of being reorged

[Builders’ Behavioral Profiles](https://ethresear.ch/t/empirical-analysis-of-builders-behavioral-profiles-bbps/16327 "Builders’ Behavioral Profiles") (BBPs): metrics covering features & strategies when building blocks and bidding during MEV-Boost auctions

[Protocol-Enforced Proposer Commitments](https://mirror.xyz/ohotties.eth/lBEXiiU7yK91OuSn8QyJPM9Db8GuyDFzCEUAj60BWyI "Protocol-Enforced Proposer Commitments") (PEPC) explainer

[Quantum-resistant weak Verifiable Delay Function](https://eprint.iacr.org/2023/1197 "Quantum-resistant weak Verifiable Delay Function") but requires curves with unknown endomorphism rings as input
### Layer 2
Coinbase [Base](https://base.mirror.xyz/KPrKIukePtM2Iz945_3GpQJ-tgMf1hoato5isStLXJI "Base") (OP Stack rollup) open to the public ([Onchain Summer](https://onchainsummer.xyz/ "Onchain Summer") marketing campaign)
### EIPs/Standards
EIPs:
[EIP7480](https://github.com/ethereum/EIPs/pull/7480/files "EIP7480"): EOF - Data instructions
### Stuff for developers
Solmate [v6.2.0](https://github.com/transmissions11/solmate/pull/380 "v6.2.0"): fix silent overflow edge case in SignedWadMath:wadMul; [found](https://twitter.com/Montyly/status/1688603604062482433 "found") using Trail of Bits Medusa

[Iter](https://github.com/jtriley-eth/iter-sol#readme "Iter"): lazy evaluated iterators in Solidity

[Cove](https://twitter.com/msolomon44/status/1688656321053425664 "Cove"): contract verification, alpha is for Solidity Foundry projects using deployment tx hashes

EVM Diff [updated](https://twitter.com/msolomon44/status/1689656505652690945 "updated")

[Bulloak](https://github.com/alexfertel/bulloak#readme "Bulloak"): Solidity test generator based on branching tree technique

[Vyper compiler](https://jtriley.substack.com/p/the-vyper-compiler "Vyper compiler") deep dive

Fe [v0.24.0](https://github.com/ethereum/fe/releases/tag/v0.24.0 "v0.24.0"): adds support for user defined libraries

Halmos [v0.1.2](https://github.com/a16z/halmos/releases/tag/v0.1.2 "v0.1.2") (symbolic testing): adds support for DELEGATECALL, CALLCODE, CREATE2, struct types as test parameters and library linking

[Agent buttercup](https://github.com/Cozy-Finance/agent-buttercup#readme "Agent buttercup"): agent-based simulation engine for DeFi researchers/engineers, uses revm

yAcademy [zk auditing fellowship modules](https://twitter.com/yAcademyDAO/status/1687891681423634432 "zk auditing fellowship modules"): zk, Rate-limiting Nullifier & Spartan-ECDSA

CTFs:

Flashbots [MEV-Share CTF solutions](https://github.com/minaminao/ctf-blockchain/tree/main/src/MEVShareCTF#readme "MEV-Share CTF solutions")

Curta CTF [Billy the Bull solution](https://twitter.com/zachobront/status/1688247687613743105 "Billy the Bull solution")

[p0tion v1](https://mirror.xyz/privacy-scaling-explorations.eth/TuLZRdgCQsydC8JJgCNH4F7GzifRBQ6fr31DHGLFVWM "p0tion v1"): toolkit for Groth16 zk-application development

[Noble curves typosquat](https://blog.phylum.io/typosquat-of-popular-ethereum-package-steals-private-keys/ "Noble curves typosquat"): malicious npm package sends private key to remote server
### Security
Steadefi on Arbitrum & alt-L1 [$1.1 million stolen](https://twitter.com/steadefi/status/1688638572608552960 "$1.1 million stolen") via compromised deployer wallet

[UniswapX order vulnerability disclosed](https://kebabsec.xyz/posts/critical_vulnerability_in_uniswapx/ "UniswapX order vulnerability disclosed"), fixed with $200k bounty paid

[Vyper postmortem](https://hackmd.io/vyperlang/HJUgNMhs2 "Vyper postmortem") of non-reentrancy lock vulnerability in v0.2.15/16 & v0.3.0

[SEAL 911](https://twitter.com/samczsun/status/1688613385565528064 "SEAL 911"): contact the security community in an emergency via a Telegram bot
### Ecosystem
[Danny responds to those trying to normalize centralization conversations](https://twitter.com/dannyryan/status/1688644951230267392 "Danny responds to those trying to normalize centralization conversations"): Lido over 33% of ETH staked is a threat to <a href="/price/ethereum-eth" target="_blank" class="blog_inner_link">Ethereum</a>

EF Next Billion fellowship: [five human stories of cohort 3](https://blog.ethereum.org/2023/08/07/nb-fellows-cohort-3 "five human stories of cohort 3")

Etherscan [similar contract search](https://twitter.com/etherscan/status/1689984336274284544 "similar contract search") updated to search across Etherscan supported chains
### Enterprise
[PayPal USD stablecoin](https://newsroom.paypal-corp.com/2023-08-07-PayPal-Launches-U-S-Dollar-Stablecoin "PayPal USD stablecoin"), issued by Paxos

[PYUSD contract](https://github.com/paxosglobal/pyusd-contract#readme "PYUSD contract") is upgradeable, balances can be frozen & wiped

Visa experiments with [paying gas fees with card](https://usa.visa.com/solutions/crypto/paying-blockchain-gas-fees-with-card.html "paying gas fees with card") on Goerli testnet
### Notable at app layer
Rune’s [Maker endgame](https://twitter.com/runekek/status/1688571159367823360 "Maker endgame") and [SubDAO farming overview](http://forum.makerdao.com/t/sparkdao-spk-pre-farming-airdrop-general-subdao-farming-overview/21595 "SubDAO farming overview")

Maker [Enhanced DSR](https://twitter.com/runekek/status/1688991177843019778 "Enhanced DSR") (Dai Savings Rate) started at 8% and reduced to 5.8%

[Nexus Mutual](https://nexusmutual.io/blog/nexus-mutual-expands-cover-capacity-in-the-uk-with-on-chain-capital "Nexus Mutual") providing small UK retailers coverage via Retail Mutual

Safe [social login](https://twitter.com/safe/status/1689313162817093633 "social login"): sign up with Google or Apple ID on iOS, experimental

[MultiSafe](https://twitter.com/smoldapp/status/1689998191289139200 "MultiSafe"): clone or deploy a Safe to multiple chains with the same address

[Y00ts](https://twitter.com/y00tsNFT/status/1689404417072889867 "Y00ts") NFTs migrating to Ethereum after previously migrating from <a href="/price/solana-sol" target="_blank" class="blog_inner_link">Solana</a> to <a href="/price/polygon-matic" target="_blank" class="blog_inner_link">Polygon</a>

DAO’s shutting down & distributing Arbitrum airdrop: [Saddle](https://www.saddle.community/t/sip-x-protocol-operations-and-treasury-management/632 "Saddle") (Curve fork) & [Hundred Finance](https://twitter.com/hundredfinance/status/1689358397898887168 "Hundred Finance")

Base apps:

[BasePaint](https://basepaint.xyz/ "BasePaint"): shared pixel canvas, open edition NFT every 24 hours

[Words3](https://twitter.com/0xsmallbrain/status/1689404151166570496 "Words3"): scrabble with fluctuating price letter tiles, game ends this weekend

[Friend Tech](https://twitter.com/phabcd/status/1690061905468010496 "Friend Tech"): buy shares in people to DM, PWA on mobile, invite only
## Job Listings
[ZK circuits engineer](https://jobs.lever.co/ethereumfoundation/7a7da3a9-a080-40a9-8aed-9e81641650a4 "ZK circuits engineer") sought by EF Privacy & Scaling Explorations team

Wyoming Stable Token Commission seek [Executive Director](https://www.governmentjobs.com/careers/wyoming/jobs/4126743/stc-0419-executive-director-cheyenne-or-laramie "Executive Director")
### Regulation/business/tokens
[US Federal Reserve](https://www.federalreserve.gov/newsevents/pressreleases/bcreg20230808a.htm "US Federal Reserve") info on supervision program for banks crypto activities

[Bittrex $24M settlement with US SEC](https://www.sec.gov/news/press-release/2023-150 "Bittrex $24M settlement with US SEC") for operating as an unregistered broker

[SBF jailed](https://twitter.com/innercitypress/status/1690061503645229056 "SBF jailed"): bail revoked for intimidating witnesses

1 year anniversary of [Alex Pertsev’s unjust arrest](https://twitter.com/PeppersecCOM/status/1689771500717723650 "Alex Pertsev’s unjust arrest") 
### ZK
Justin Thaler: [Lasso (lookup argument with faster prover) and Jolt (zkVM design)](https://a16zcrypto.com/posts/article/introducing-lasso-and-jolt/ "Lasso (lookup argument with faster prover) and Jolt (zkVM design)")

Overview of [Folding schemes](https://taiko.mirror.xyz/tk8LoE-rC2w0MJ4wCWwaJwbq8-Ih8DXnLUf7aJX1FbU "Folding schemes"): Nova, Sangria, SuperNova, HyperNova & Protostar

[CycleFold](https://eprint.iacr.org/2023/1192 "CycleFold"): folding-scheme-based recursive arguments over a cycle of elliptic curves
### General computer security (Defcon edition)
[Milk Sad](https://milksad.info/ "Milk Sad"): Libbitcoin Explorer bx seed generated insecure private keys, only 32 bits of entropy

[BitForge](https://www.fireblocks.com/blog/bitforge-fireblocks-researchers-uncover-vulnerabilities-in-over-15-major-wallet-providers "BitForge"): MPC implementation vulnerabilities, including GG-18, GG-20 and Lindell17

CPU vulnerabilities: [Downfall](https://downfall.page/ "Downfall") (Intel including SGX) and [Inception](https://comsec.ethz.ch/research/microarch/inception/ "Inception") (AMD Zen CPU)

[VS Code secure token storage](https://cycode.com/blog/exposing-vscode-secrets/ "VS Code secure token storage"): malicious extensions could expose application tokens

[Acoustic side channel attack on laptop keyboards](https://arxiv.org/abs/2308.01074 "Acoustic side channel attack on laptop keyboards") using deep learning & phone microphones

## Upcoming Dates of Note
(new/changes in **bold**)
Aug 15-16 – [ETHToronto](https://www.ethtoronto.ca/ "ETHToronto") & [ETHWomen](https://www.ethwomen.com/ "ETHWomen")
Aug 15-29 – [Gitcoin Grants 18](https://twitter.com/gitcoin/status/1681747409435787264 "Gitcoin Grants 18")
Aug 16-19 – [Ethereum Argentina](https://twitter.com/EtherArgentina/status/1625857633260552200 "Ethereum Argentina") (Buenos Aires)
Aug 23 – [KZG Ceremony](https://ceremony.ethereum.org/ "KZG Ceremony") closes (extended)
Aug 28-30 – [Science of Blockchain Conference](https://cbr.stanford.edu/sbc23/ "Science of Blockchain Conference") (Stanford University)
Aug 30 - Sep 3 – [ETHWarsaw](https://www.ethwarsaw.dev/ "ETHWarsaw") conference & hackathon
Sep 1-3 – [Ethcon Korea](https://ethcon.kr/ "Ethcon Korea") hackathon
Sep 7-9 – [ETHAccra](https://www.ethaccra.xyz/ "ETHAccra") hackathon
Sep 10-12 – [Ethereum Singapore](https://www.ethereumsingapore.com/ "Ethereum Singapore") hackathon & conference
Sep 11-13 – [DappCon](https://www.dappcon.io/ "DappCon") (Berlin)
Sep 15 – [Protocol Berg](https://protocol.berlin/ "Protocol Berg") (Berlin)
Sep 15-17 – [ETHChicago](https://www.ethchicago.xyz/ "ETHChicago") conference & hackathon
Sep 15-16 – [ETHMobile Miami](https://www.ethmobile.io/ "ETHMobile Miami")
Sep 18-24 – [ETHSafari](https://ethsafari.xyz/ "ETHSafari") (Kilifi Kenya)
Sep 21–24 – [Pragma](https://ethglobal.com/events/pragma-newyork "Pragma") & ETHGlobal New York
Oct 5-6 – [ETHMilan](https://www.ethmilan.xyz/ "ETHMilan") conference
Oct 6-8 – [ETHRome](https://ethrome.org/ "ETHRome") hackathon
Oct 6–27 – [ETHOnline](https://ethglobal.com/events/ethonline2023 "ETHOnline") (ETHGlobal) virtual
Oct 13–15 – [Ethereum Kuala Lumpur](https://twitter.com/ethkl1/status/1670761473348624384 "Ethereum Kuala Lumpur") conference & hackathon
Oct 21 – [Ethereum México](https://twitter.com/ethereum_mexico/status/1684649652639924224 "Ethereum México")
Oct 22-24 – [ETH Hong Kong](https://www.ethhongkong.co/ "ETH Hong Kong")
Oct 27–29 – [ETH Miami](https://ethmiami.net/ "ETH Miami") festival + hackathon
Oct 27-29 – [ETH Vietnam](https://www.eth-vietnam.com/ "ETH Vietnam")
Oct 27-29 – [ETH London](https://www.encode.club/eth-london "ETH London") hackathon
Oct 28–30 – [ETH Lisbon](https://www.ethlisbon.org/ "ETH Lisbon") hackathon
Oct 31 – [Road to Devcon grants](https://blog.ethereum.org/2023/06/29/road-to-devcon7-grants "Road to Devcon grants") application deadline
Nov 3-5 –[ ETH Lisbon](https://www.ethlisbon.org/ " ETH Lisbon") hackathon
Nov 13-19 – [Devconnect](https://blog.ethereum.org/2023/04/20/announcing-devconnect-ist "Devconnect") (Istanbul)
Nov 16-19 – [Pragma](https://ethglobal.com/events/pragma-istanbul "Pragma") & ETHGlobal Istanbul

<div class="blog-details-info">
<div>Disclaimer
<div>Author: Andrew B Coathup and Evan Van Ness, WeekinEthereum.substack Team
<div>Editor: Gate.io Blog Team
<div class="info-tips">\*This article represents only the views of the author and does not constitute any investment suggestions.
<div>\*Copyright is reserved by WeekinEthereum.substack Team. Please contact us to remove any infringement.
</div>