Get ahead of the curve with the latest insights, trends, and analysis in the tech world.
Members of the Ethereum R&D team and the Zcash Company are collaborating on a research project addressing the combination of programmability and privacy in blockchains. This joint post is being concurrently posted on the Zcash blog,and is coauthored by Ariel Gabizon (Zcash) and Christian Reitwiessner (Ethereum). Ethereumβs flexible smart...
Published on: January 19, 2017 | Source:The first version of the Light Ethereum Subprotocol (LES/1) and its implementation in Geth are still in an experimental stage, but they are expected to reach a more mature state in a few months where the basic functions will perform reliably.The light client has been designed to function more or...
Published on: January 07, 2017 | Source:December marks a month of continued progressin the Ethereum ecosystem. Research on proof of stake and sharding continues after the research team's workshop in Singapore in November, the light client slowly keeps getting better, Whisper and Swarm keep moving forward, and discussions on protocol economics and community governance co...
Published on: December 31, 2016 | Source:On December 16, we were made aware that someone had recently gained unauthorized access to a database from forum.ethereum.org. We immediately launched a thorough investigation to determine the origin, nature, and scope of this incident. Here is what we know: The information that was recently accessed is...
Published on: December 19, 2016 | Source:With the long awaited geth 1.5 ("let there bee light") release, Swarm made it into the official go-ethereum release as an experimental feature. The current version of the code is POC 0.2 RC5 -- "embrace your daemons" (roadmap), which is the refactored and cleaner version of the codebase that was...
Published on: December 15, 2016 | Source:This chapter describes the game theory and economic security modelling we were doing in the Fall of 2014. It recounts how the "bribing attacker model" led our research directly to a radical solution to the long range attack problem....
Published on: December 07, 2016 | Source:Vitalik suggested last week that I share my basic research and design philosophy in a blog post, I agreed but complained that it was still changing. My friend Jon West told me that everyone would really appreciate it if I told everyone about my Casper research, I mostly agreed. Then...
Published on: December 06, 2016 | Source:The possibilities of zkSNARKs are impressive, you can verify the correctness of computations without having to execute them and you will not even learn what was executed - just that it was done correctly. Unfortunately, most explanations of zkSNARKs resort to hand-waving at some point and thus they remain something...
Published on: December 05, 2016 | Source:This week marks the completionof our fourth hard fork, Spurious Dragon,and the subsequent state clearing process, the final steps in the two-hard-fork solution to the recent Ethereum denial of service attacks that slowed down the network in September and October. Gas limits are in the proce...
Published on: December 04, 2016 | Source:Security Alert Affected configurations: Geth Severity: High Summary: An issue has been identified with Geth's journaling mechanism. This caused a network fork at block #2686351 (Nov-24-2016 14:12:07 UTC). The...
Published on: November 25, 2016 | Source:The Ethereum network will be undergoing a hard fork at block number 2,675,000, which will likely occur between 15:00 and 16:00 UTC on Tuesday, November 22, 2016. A countdown timer can be seen at https://fork.codetract.io/. The Morden test network will be undergoing a hard fork at block number 1,885,000....
Published on: November 18, 2016 | Source:The Go Ethereum team isvery proud to finally release Geth 1.5, which can almost be called a complete internal rewrite of the Go Ethereum (go-ethereum) codebase. We've packed a huge number of changes into this release, and simply listingthem wouldn't do them justice. Instead, we've decided to write them...
Published on: November 17, 2016 | Source:This blog post providesan update onour findings following the discovery of the storage corruption bug last week. Insummary, the bugwasmuch less severe than we initially thought. The small number of affected contracts we found is either only exploitable by the owner, or the exploit can only cause a disruption in...
Published on: November 09, 2016 | Source:Summary: In some situations, variables can overwrite other variables in storage. Affected Solidity compiler versions: 0.1.6 to 0.4.3 (including 0.4.4 pre-release versions) Detailed description: Storage variables that are smaller than 256 bits are packed together into the same 256 bit slot if they can fit. If a...
Published on: November 01, 2016 | Source:One of the important indicators of how much load the Ethereum blockchain can safely handle is how the uncle rate responds to the gas usage of a transaction. In all blockchains of the Satoshian proof-of-work variety, any block that is published has the risk of howbecoming a "stale", ie. not...
Published on: October 31, 2016 | Source:Mist leaks some low level APIs, which Dapps could use to gain access to the computer's file system and read/delete files. This would only affect you if you navigate to an untrusted Dappthatknows about these vulnerabilities and specifically tries to attack users. Upgrading Mist is highly recommended to prevent exposure...
Published on: October 27, 2016 | Source:The Ethereum network will be undergoing a hard fork at block number 2463000, which will likely occur between 12:00 and 13:00 UTC on Tuesday, October 18, 2016. A countdown timer can be seen at https://fork.codetract.io/....
Published on: October 18, 2016 | Source:During the last couple of weeks, the Ethereum network has been the target of a sustained attack. The attacker(s) have been very crafty in locating vulnerabilities in the client implementations as well as the protocol specification. While the recent patches have led to an overall increased resiliency in the...
Published on: October 13, 2016 | Source:Today the network was attacked by a transaction spam attack that repeatedly called the EXTCODESIZE opcode (see trace sample here), thereby creating blocks that take up to 20-60 seconds to validate due to the 50,000 disk fetches needed to process the transaction. The result of this was a ~2-3x reduction...
Published on: September 22, 2016 | Source:URGENT ALL MINERS: The network is under attack. The attack is a computational DDoS, ie. miners and nodes need to spend a very long time processing some blocks. This is due to the EXTCODESIZE opcode, which has a fairly low gasprice but which requires nodes to read state information from...
Published on: September 22, 2016 | Source:Security Alert Affected configurations: Geth Likelihood: High Severity: High Summary: geth nodes running out of memory and crashing on block https://etherchain.org/block/2283416 Details: TBD Solution: [Geth 1.4.12](http...
Published on: September 18, 2016 | Source:Today, I am delighted to announce that Yoichi Hirai (pirapira on github) is joining the Ethereum project as a formal verification engineer. He holds a PhD from the University of Tokyo on the topic of formalizing communicating parallel processes and created formal verification tools for Ethereum in his spare time....
Published on: September 01, 2016 | Source:The primary expense that must be paid by a blockchain is that of security. The blockchain must pay miners or validators to economically participate in its consensus protocol, whether proof of work or proof of stake, and this inevitably incurs some cost. There are two ways to pay for this...
Published on: July 27, 2016 | Source:The foundation has committed to support the community consensus on the admittedly difficult hard fork decision. Seeing the results of various metrics, including carbonvote, dapp and ecosystem infrastructure adoption, this means that we will focus our resources and attention on the chain which is now called ETH (ie. the fork...
Published on: July 26, 2016 | Source:The DAO soft-fork attempt was difficult. Not only did it turn out that we underestimated the side effects on the consensus protocol (i.e. DoS vulnerability), but we also managed to introduce a data race into the rushed implementation that was a ticking time bomb. It was not ideal, and even...
Published on: July 22, 2016 | Source:We would like to congratulate the Ethereum community on a successfully completed hard fork. Block 1920000 contained the execution of an irregular state change which transferred ~12 million ETH from the "Dark DAO" and "Whitehat DAO" contracts into the WithdrawDAO recovery contract. The fork itself took place smoothly, with roughly...
Published on: July 20, 2016 | Source:The DAO, though not a product developed by the Ethereum Foundation, has been a hot topic as of late, both internally in the organisation as well as within our community.The Hard Fork is a delicate topic and the way we see it, no decision is the right one. As this...
Published on: July 15, 2016 | Source:Ethereum is not meant to be a platform to build esoteric smart contract applications that require a STEM degree to understand, but it aims to be one pillar of a different architecture for applications on the world wide web. With this post we will try to elucidate how this can...
Published on: July 12, 2016 | Source:Hey everyone, I spent some time with our Canadian friends in Toronto after presenting "Ethereum: The World Computer" at Blockchain Training Conference last month and I wanted to provide a quick update on some of the exciting happenings in the Ethereum dev ecosystem. Lots of things are brewing behinds the...
Published on: July 11, 2016 | Source:Since the last C++ DEV Update, a lot of things happened in the engine room which were not really visible to the outside. This post wants to give an overview about what we are currently working on. Apart from the features side, Bob has been working on a proposed...
Published on: July 08, 2016 | Source:The Devcon2 web site is officially live now! You can find it athttps://ethereumfoundation.org/devcon/ Thanks foreveryone's interest, proposals, support and enthusiasm. We have an amazing community and areexcited to present the first Ethereum Foundation event in Asia. This year, Devcon2 (September 19, 20, 21) will be a featured conference...
Published on: July 08, 2016 | Source:Affected configurations: geth 1.4.8 Likelihood: High Severity: High Details: An attack vector has been identified in the freshly released implementation of the DAOsoft fork. The fork enactment code in geth (and other clients) allows execution ofEVM code up to the block gas limit without paying for...
Published on: June 28, 2016 | Source:The last week was quite hectic for all of us in the Ethereum ecosystem. The DAO has shown us that it takes much more effort to write smart contracts than we originally anticipated; but also that it takes a surprising amount ofdebateto reach a consensus onissues of this scale. ...
Published on: June 24, 2016 | Source:Affected configurations: All smart contract wallets created using Ethereum Wallet Frontier, version 0.4.0 (Beta 7) or earlier. Wallets created with Ethereum Wallet 0.5.0 and all later versions released after March 3, 2016, are not affected. Likelihood: Low Severity: High...
Published on: June 24, 2016 | Source: