Eth News and Links
Execution layer
- Candidate EIPs for the next upgrade (Shanghai)
- Erigon roadmap: alpha/beta designations dropped
- Besu v22.7.3: fixes for empty block proposals and improvements for missed attestations
- Erigon v2022.09.03: improves sync stability
- Verkle transition prototyped using Erigon at ETHBerlin
- Microsoft research claims 6x EVM execution speed improvement with Forerunner speculative transaction execution
Consensus layer
- View-merge potential replacement for proposer boost, defend against balancing & ex-ante attacks
- Censorship resistance list (crList) proposal, builders forced to fully use block space otherwise they must include proposer-selected transactions in the unused space
- Consensus layer call video. Notes from Christine Kim, next CL call November 3
- Lodestar v1.1.0: stability improvements and configure proposer metadata per validator
- Nimbus v22.9.1: fixes for several reported issues and minor performance improvements
- Teku v22.9.1: performance improvements
- consensus-specs v1.2.0: mainnet Bellatrix specs, R&D for withdrawals & EIP4844
- MEV order flow auction options to address exclusive order flow
- Superlight client with logarithmic sync time, assumes connected to one honest full node
Stakers
- Somer: reasons some solo-stakers experienced degraded performance
- Ben Edgington: stakers shouldn’t expect a bail out if they outsource block building
- MEV-Boost:
- Anish’s dashboard: 24% of blocks built by relays, 83% of relayed blocks via Flashbots
- Flashbots relay and builder metrics dashboard
- MEV-Boost getPayload bug when deposits included in the block, 3 slots missed
- bloXroute relay outage, 88 slots missed, refunding validators
- Zeromev-Geth: orders transactions by receive time, mitigates front running, stakers can choose to back run transactions
Layer 2
- Optimism Quests: incentivizes trying dapps with NFTs
- Vitalik: kinds of layer 3s that make sense
EIPs/Standards
- EIP5659: Social media URI propagation event
- EIP5679: Token minting and burning
- EIP5700: Bindable token
This newsletter is made possible thanks to Starbloom Ventures!
Starbloom Ventures is a first round venture fund founded by Evan Van Ness to invest in the future of web3.
We pledge 10% of investing profits to support Ethereum public goods.
Stuff for developers
- execTransaction: pattern to allow an NFT contract owner to execute any transaction, don’t use if contract manages user funds/allowances
- Whitenoise CTF optimize challenge on Optimism
- Impersonator: adds viewing dapps in iFrame to impersonate an address
- Embed.Art: shareable NFT pages for social media, supports SVG
- Mockthereum: mock a node or proxy to an actual node
- Zerokit v0.1: zk library in Rust, RLN Module, use Rust API or C FFI, beta
- Isokratia: trust minimized governance with off-chain voting using recursive SNARKs, proof of concept
Security
- Wintermute (market maker) $160 million exploit, trading address with leading zeroes compromised, likely linked to Profanity address generator vulnerability
- Arbitrum bridge uninitialized address vulnerability disclosed, 400 ETH bounty paid, bounty hunter started learning Solidity 6 months ago
- OpenZeppelin Contracts TimelockController misconfigured by multiple projects, deployer has admin permissions until revoked
- dYdX malicious npm packages published
Ecosystem
- ETHBerlin hackathon winners
- PSE grants to integrate Semaphore anonymous signaling protocol
- Reminder: Merge data analysis/visualization blog post challenge, Twitter space recording for ideas
- Create a satellite Devcon watch party, for communities who can’t be in Bogotá
Application layer
- OpenSea adds Arbitrum One NFTs, creators need to setup royalties
- Coinbase NFT aggregating listings from OpenSea, LooksRare and Coinbase
- Sound Protocol: permissionless music NFTs with custom metadata, minting formats & metadata
- Volmex Implied Volatility Index: 30-day expected volatility of BTC & ETH options market
- YieldSpaceTV: Yield’s token vaults deploy into Euler for additional LP yield
- Tribe DAO voted to repay Fuse exploit victims
- GasHawk: saves money by buffering transactions until gas prices are low, beta
Job Listings
- Remix: frontend React/Typescript dev
- EF’s Privacy & Scaling Explorations team: Web3 Engineer
- Bobhub multichain oracle is hiring a Technical writer!
- Ethereum Foundation seek a generalist ecosystem developer
Job listings: $600 for four issues (75 character limit), payable in ETH/DAI/USDC to abcoathup.eth on mainnet or Layer 2. Pay with one click using 3cities. Questions? abcoathup at-gmail
Regulation/business/tokens
- US CFTC fined bZeroX & founders $250k and taking action against bZx/Ooki DAO defined as unincorporated association of token holders who voted on governance proposals
- US SEC settled with Sparkster (no code platform) for unregistered sale of securities, $35 million to be paid to harmed investor fund; case against influencer Ian Balina claimed jurisdiction for transactions partly due to cluster of Ethereum nodes in US
- US Treasury digital assets RFC [PDF] on responsible development
- Vitalik: importance of decentralization for DAOs, making better decisions in concave environments, censorship resistance and credible fairness
- GitHub re-published as read-only the Tornado Cash repo and its contributor’s accounts
General
- OxPARC: recursive zkSNARKs implemented in Circom/groth16
- Zero knowledge proofs of software vulnerabilities
- US military bought access to internet monitoring tool Augury, includes email data, browsing history and cookies
- Browser enhanced spellcheck sends passwords to Google/Microsoft
- Python tarfile path traversal 15 year old bug allows overwriting arbitrary files
Follow @WeekinEthNews to find out what the most clicked links are. Follow @evan_van_ness and @abcoathup to get most of the week’s news in real time.
Permalink for this week’s issue: https://weekinethereumnews.com/week-in-ethereum-news-september-24-2022
Upcoming Dates of Note
(new/changes in bold)
- Oct 6-8 – Web3 Lagos
- Oct 7-16 – Devcon week (Bogotá)
- Oct 7-9 – ETHBogotá (ETH Global)
- Oct 7-9 – Infinite hackathon (Bogotá)
- Oct 11-14 – Devcon 6 (Bogotá)
- Oct 14 – Semaphore grants deadline
- Oct 18-23 – Eth Medellin (Colombia)
- Oct 26-28 – Eth Panama
- Oct 28-30 – ETH Lisbon
- Oct 31 – Merge data challenge deadline
- Nov 3 – US Treasury digital assets RFC [PDF] deadline
- Nov 4-6 – ETHSanFrancisco (ETH Global)
- Nov 11-13 – ETHBrno (Czech Republic)
- Nov 18-20 – Web3 Weekend (ETH Global)
- Nov 25-27 – ETH Vietnam
- Dec 2-4 – ETHIndia (ETH Global)
- Mar 2-5 – ETHDenver
Sign up to receive this newsletter weekly