# Ethereal news weekly #41

> Glamsterdam upgrade on Sepolia testnet October 6, Vitalik: the cryptographic world computer, Hegotá upgrade focil-devnet-0 live

Date: 2026-10-02
Source: https://ethereal.news/ethereal-news-weekly-41/
Editor: Andrew B Coathup

*Glamsterdam upgrade on Sepolia testnet October 6, Vitalik: the cryptographic world computer, Hegotá upgrade focil-devnet-0 live*

### Ecosystem

* 🐻‍❄️ [Glamsterdam upgrade on Sepolia testnet](https://blog.ethereum.org/2026/09/17/glamsterdam-testnet-announcement) activates October 6, 13:53:36 UTC  
  * Glamsterdam security vulnerabilities (specs, EIPs & specific client releases) in scope for bug bounty program  
* Vitalik: transforming Ethereum into [the cryptographic world computer](https://vitalik.eth.limo/general/2026/09/27/the_cryptographic_world_computer.html) by 2030 using recursive STARKs, automated formal verification, optimized consensus algorithms & quantum safe cryptography  
* Ethlabs: [Chainlink CCIP 2.0 integrated fast confirmation rule](https://ethlabs.org/writings/fcr-chainlink-ccip.html), transactions confirmed in 12-24 seconds rather than 13 minutes  
* Ethereum Foundation:  
  * Will Corcoran [Protocol cluster monthly update](https://x.com/corcoranwill/status/2104283555018731995): Glamsterdam upgrade (faster benchmarking, devnets, testnets & security), Hegotá upgrade (headliner devnets) and research (post quantum roadmap, fast block propagation & autoresearch)  
  * Yukon [sig.golf](https://www.yukon.org/sig.golf): autoresearch challenge for stateless hash based post quantum signatures, reduce signature bytes x verification cycles  
* ETHGlobal Tokyo [hackathon finalists](https://x.com/ETHGlobal/status/2104115871883162007) from [254 projects](https://ethglobal.com/showcase?events=tokyo2026)  
* ETHTaipei [videos](https://www.youtube.com/playlist?list=PLaPf350W-zTc)  
* ETH metrics:  
  * [Gas](https://ultrasound.money/#gas) (gwei): 0.6 average, 0 \- 14.5 (13.5 for zero net issuance)  
  * [ETH supply](https://ethsupply.fyi/): 122.1M, 20k net issuance  
  * [ETHUSD](https://www.coingecko.com/en/coins/ethereum): \$2,637 \- \$2,768 (all time high \$4,946, August 24, 2025\)  
  * [ETHBTC](https://ratiogang.com/): 0.032 (0.165 for the Flippening)

---

### Sponsor: [MetaMask](https://metamask.io)

**Understanding Basic Functionality in MetaMask**

We're always working to make your wallet more secure and easier to use, while giving you control over your privacy and data. As part of that, we're bringing MetaMask's profile and privacy settings together under one unified setting, Basic Functionality, so every user can benefit from the best security protections by default.

[Basic Functionality in MetaMask](https://metamask.io/news/basic-functionality-profile-setting)  

---

### Enterprise

* Open Standard [Open USD](https://joinopenstandard.com/blog/ousd-is-live) (OUSD consortium stablecoin) live, includes [mainnet](https://etherscan.io/token/0x9f6F3991D525015a6F8CaF062C83b62fD3AC4436) & [Base](https://basescan.org/token/0xB2000000000000000000002fEb517dFeC7415344)  
* [Citi x Coinbase](https://www.citigroup.com/global/news/press-release/2026/citi-coinbase-expand-collaboration-connect-digital-fiat-payments-corporations-consumers): Coinbase Virtual Accounts will automatically convert fiat to stablecoins & Spring by Citi enables stablecoin payments at checkout (converted to fiat)  
* [Baillie Gifford enhanced yield fund](https://x.com/BGDA_UK/status/2104926672877150716) (BAGEY): native UK regulated tokenized fund, token is investor holding (not a wrapper), open for investment

### Applications

* Aave: [Coinbase tokenized stocks live on V4](https://aave.com/blog/coinbase-tokenized-stocks), not available in US  
* EF x Open Anonymity Project [zkAPI](https://blog.ethereum.org/en/2026/10/01/introducing-zkapi): private usage credits for paid APIs, live on mainnet  
* [zk.money](https://x.com/zk_money/status/2104966293199945975) on Aztec Network, send/receive privately, reserve/buy tag (ENS name)  
* Fairblock [confidential USD](https://x.com/0xfairblock/status/2105294763499102394) (CUSD) live on Arbitrum, built on PYUSDx  
* [Balancer](https://x.com/Balancer/status/2105006446752731615) winding down, pools withdrawal only from October 30  
* Chainlink [CCIP 2.0](https://chain.link/blog/introducing-ccip-2-0) live, adds user attestations, additive security, built in compliance functionality & configurable finality speeds  
* [Stuckfunds](https://stuckfunds.eth.limo): check address for unclaimed bridge withdrawals  
* [Punk to bricks](https://hs7j4yk4sz-boop.github.io/punk-to-bricks/): generate instructions & parts list to build Lego bust of CryptoPunk

### Developers

* Argot Collective [Fe 26.4](https://blog.fe-lang.org/posts/release-26-4/) (language): experimental native executables, access Solidity storage layouts, helpers for external calls & tokens, deterministic deployment, full precision arithmetic, Merkle proof support and text formatting  
* Foundry (dev framework):  
  * Foundry [v1.8.4](https://github.com/foundry-rs/foundry/releases/tag/v1.8.4): script recovery, native Base support, VS Code & Zed language server clients, external compiler adapter support and expanded block access list support  
  * [forge-std v1.17.0](https://github.com/foundry-rs/forge-std/releases/tag/v1.17.0) (helpers): adds secp256k1 helpers, expanded cheatcode interface, state gas reporting, more reliable stdStorage & load chain config without RPC  
* [Remix v2.6.4](https://ethereumremix.substack.com/p/remix-release-v264) (IDE): adds x402 endpoints to select a Solodit security checklist & run a review, QuickDapp multi contract support and transaction history with replay  
* [Nethereum 7.0.0](https://github.com/Nethereum/Nethereum/releases/tag/7.0.0) (.NET SDK & node toolkit): unified EVM engine (node, simulation & zkVM guest) with Glamsterdam support, DevP2P networking with snap sync, beacon light client and account abstraction adds passkeys, social recovery & in process bundler  
* L2Beat [privacy treasure hunt](https://privacyhunt.gwei.domains): trace funds sent via privacy protocols back to source, solutions revealed next week  
* Application layer standards (ERCs):  
  * [ERC8426](https://github.com/ethereum/ERCs/pull/2036/changes): Wallet pass extension for NFTs  
  * [ERC8427](https://github.com/ethereum/ERCs/pull/2037/changes): Portable spend grants  
  * [ERC8428](https://github.com/ethereum/ERCs/pull/2038/changes): ERC721 lineage registry  
  * [ERC8431](https://github.com/ethereum/ERCs/pull/2039/changes): Holding time auto staking for NFTs  
  * [ERC8432](https://github.com/ethereum/ERCs/pull/2040/changes): Onchain IP asset & license registry  
  * [ERC8434](https://github.com/ethereum/ERCs/pull/2044/changes): Agent identity

### Security

* Payy [exploit postmortem](https://polybase.notion.site/Payy-USDC-withdrawal-exploit-postmortem-v4-final-3ea822fadf1e8097abb4dae2bc3c18cf), \~\$1.9M unauthorized withdrawals, invalid burn proof accepted by deployed verifier  
* Cantina Security [Apex Flash-1](https://www.cantina.security/apex-flash): open weights model for security research, reinforcement learning fine tune of GLM-5.3-Flash  
* [Arbitrum security program](https://blog.arbitrum.foundation/introducing-the-arbitrum-security-program-apply-to-secure-your-smart-contracts/): projects building on Arbitrum can apply for subsidized security review

### All core devs (main protocol calls)

#### All core devs \- consensus (ACDC) [\#188](https://forkcast.org/calls/acdc/188/)

* [Hegotá](https://forkcast.org/upgrade/hegota/) upgrade (targeting 2027):  
  * Non headliner scoping used [EIPs by average client rating](https://forkcast.org/upgrade/hegota/client-priority/?quick=cl)  
  * 2 EIPs [Considered for Inclusion](https://forkcast.org/upgrade/hegota/#considered-for-inclusion) (CFI):  
    * [EIP8365](https://forkcast.org/eips/8365/) disallow new 0x00 validators  
    * [EIP8198](https://forkcast.org/eips/8198/) quick slots, Barnabé Monnot (Ethlabs) [presentation](https://docs.google.com/presentation/d/1e8oYeHZ-E4qKplWsL28xt3fpQTNehY_90ENwxh_29N0/edit), post quantum impact & testing concerns  
  * 2 EIPs Withdrawn:  
    * [EIP8363](https://forkcast.org/eips/8363/) tapered issuance burn  
    * [EIP8333](https://forkcast.org/eips/8333/) align checkpoint with epoch boundary block  
  * 1 EIP [Declined for Inclusion](https://forkcast.org/upgrade/hegota/#declined-for-inclusion) (DFI):  
    * [EIP8379](https://forkcast.org/eips/8379/) top up sync

#### All core devs \- testing (ACDT) [\#98](https://forkcast.org/calls/acdt/098/) \+ [consensus layer breakout](https://forkcast.org/calls/acdt/098/?breakout=cl)

* [Glamsterdam](https://forkcast.org/upgrade/glamsterdam/) upgrade (targeting 2026):  
  * Maria Inês Silva (EF): 200M gas limit deemed safe on execution time  
* Fast confirmation rule (FCR): new confirmed block tag requested rather than reusing safe tag

### Layer 1

* [Glamsterdam](https://forkcast.org/upgrade/glamsterdam/) upgrade (targeting 2026):  
  * [Sepolia testnet shadow fork](https://forkcast.org/networks/glamsterdam-sepsf-1/) live  
  * Chase Wright (EF): ENRScout (crawler) [Sepolia testnet readiness](https://enrscout.ethnodeops.xyz/forks?network=sepolia)  
  * Feel Your Protocol: [EIP2780 resource based intrinsic transaction gas](https://feelyourprotocol.org/eip-2780-intrinsic-transaction-gas) interactive explainer  
* [Hegotá](https://forkcast.org/upgrade/hegota/) upgrade (targeting 2027):  
  * EIP8363 tapered issuance burn [withdrawn](https://ethereum-magicians.org/t/eip-8363-tapered-issuance-burn/29263/271), needs dedicated process for broad consensus on issuance policy, forums/workshops proposed  
  * [focil-devnet-0](https://forkcast.org/networks/focil-devnet-0/) live  
  * FOCIL breakout [\#43](https://forkcast.org/calls/focil/043/)  
* I\* upgrade (targeting 2027/2028):  
  * Francesco (Ethlabs) [proposal for decoupled consensus](https://x.com/fradamt/status/2103501375279706556) formally verified  
* banteg [trace-interop](https://github.com/banteg/trace-interop#readme): tests & compatibility reports for standardizing trace APIs  
* Daisugi [0.2](https://x.com/asanso/status/2104491639251050555) (post quantum testnet): adds Frame transaction support  
* Ethereum improvement proposals (EIPs):  
  * [EIP8425](https://github.com/ethereum/EIPs/pull/12383/changes): Quantum freeze & account recovery  
  * [EIP8429](https://forkcast.org/eips/8429/): Escalating gas for repeated calls  
  * [EIP8430](https://forkcast.org/eips/8430/): Account abstraction transaction type (split out from [EIP8130](https://forkcast.org/eips/8130/))  
  * [EIP8433](https://forkcast.org/eips/8433/): Retire 0x00 validators

### Staking

* MetaMask [investigating security incident affecting part of their infrastructure](https://metamask.io/news/user-update), exiting affected validators as a precaution, no indication so far that MetaMask wallets or customer funds affected  
* [Client diversity](https://clientdiversity.org/#distribution):  
  * Consensus layer: Lighthouse \~53% (data may not be accurate)  
* [Staking market share](https://dune.com/hildobby/eth2-staking): Lido 21.9% \[Note: [dual governance](https://dg.lido.fi/)\]  
* [Validators](https://pectrified.com/mainnet): 876k active (target 128k), 23k accumulating (0x02 withdrawal credentials)  
  * [beaconcha.in consolidations dashboard](https://beaconcha.in/validators/consolidations): adds staking provider leaderboard  
* Client releases:  
  * Consensus layer:  
    * ChainSafe [Lodestar v1.49.0](https://github.com/ChainSafe/lodestar/releases/tag/v1.49.0) (recommended): Glamsterdam on Sepolia, deduplicates archived execution payloads by default  
    * Consensys [Teku 26.9.1](https://github.com/Consensys-Incorporated/teku/releases/tag/26.9.1) (recommended): Glamsterdam on Sepolia, default 60M gas limit  
    * [Grandine 3.0.0-rc.0](https://github.com/grandinetech/grandine/releases/tag/3.0.0-rc.0) (testnet only): Glamsterdam on Sepolia  
    * Offchain [Prysm v7.2.0](https://github.com/OffchainLabs/prysm/releases/tag/v7.2.0): Glamsterdam on Sepolia, default 60M gas limit  
    * Sigma Prime [Lighthouse v8.2.3](https://github.com/sigp/lighthouse/releases/tag/v8.2.3) (medium): security fixes; [Lighthouse v8.3.0-rc.0](https://github.com/sigp/lighthouse/releases/tag/v8.3.0-rc.0): Glamsterdam on Sepolia  
    * Status [Nimbus v26.9.0](https://github.com/status-im/nimbus-eth2/releases/tag/v26.9.0) (medium): Glamsterdam on Sepolia; [Nimbus v26.9.1](https://github.com/status-im/nimbus-eth2/releases/tag/v26.9.1) (medium): validator client allows mixed beacon node configurations  
  * Execution layer:  
    * [Besu 26.9.0](https://github.com/besu-eth/besu/releases/tag/26.9.0) (upgrade promptly): security fixes, Glamsterdam on Sepolia, exits on out of memory  
    * [Erigon v3.7.1](https://github.com/erigontech/erigon/releases/tag/v3.7.1) (recommended): Caplin ready for Glamsterdam on Sepolia & fixes  
    * EF [Geth v1.17.7](https://github.com/ethereum/go-ethereum/releases/tag/v1.17.7): Ubuntu PPA publishing fix, choose history pruning point  
    * Lambda [ethrex v28.0.0](https://github.com/lambdaclass/ethrex/releases/tag/v28.0.0): Glamsterdam on Sepolia, adds EIP8189 snap/2  
    * [Nethermind v2.1.0](https://github.com/NethermindEth/nethermind/releases/tag/2.1.0) (required for Sepolia): Glamsterdam on Sepolia  
    * Paradigm [Reth v2.7.0](https://github.com/paradigmxyz/reth/releases/tag/v2.7.0): Glamsterdam on Sepolia & fixes

### Research

* George Kadianakis & Kev Wedderburn (EF): [trusted computing base of a client](https://ethresear.ch/t/ethereums-tcb-part-1-the-client/26086), options for end to end formal verification

### Layer 2

* Base [Cobalt upgrade](https://blog.base.dev/cobalt) live, adds validity transactions (valid when user specified criteria met) & B20 token enhancements (combine allow/block lists, schedule multiplier updates & seize with onchain memo)  
* GIWA Chain [mainnet not launched yet](https://x.com/GIWA_by_Upbit/status/2104108336228843590), 766 ETH stolen via [fake RPC & bridge](https://x.com/apoorveth/status/2104144582766408040)

### Regulation

* US SEC:  
  * [Crypto custody rules for investment advisers & funds](https://www.sec.gov/newsroom/press-releases/2026-100-sec-proposal-would-address-how-investment-advisers-funds-can-custody-crypto-assets-under-federal) proposal  
  * [Staff crypto FAQs](https://www.sec.gov/about/divisions-offices/division-corporation-finance/faqs-crypto-assets): liquid staking tokens may be commodities, token buybacks not investment contract where system is functional with no central party  
  * [Hester Peirce](https://x.com/hesterpeirce/status/2103532228667965651) resigned as commissioner

### General

* Vitalik finished writing [Snowmoon](https://vitalik.eth.limo/snowmoon/), decentralized governance scifi  
* Security Alliance (SEAL) Intel: [social engineering attacks](https://radar.securityalliance.org/from-gmail-compromise-to-fake-support-call-a-social-engineering-pattern-on-the-rise/) via fake Google support call to compromise inbox, then fake wallet/exchange email & call to steal crypto

---

*Editor: [@abcoathup](https://x.com/abcoathup)*  
*Permalink: [ethereal.news/ethereal-news-weekly-41/](https://ethereal.news/ethereal-news-weekly-41/)*  
*Markdown: [ethereal.news/ethereal-news-weekly-41.md](https://ethereal.news/ethereal-news-weekly-41.md)*  

---