ACDE #248 · Hoodi fork cancelled indefinitely Mainnet delay unavoidable
AllCoreDevs - Execution #248 · 2026-10-22
The fork was halted after a warning that gas repricing could break existing contracts.
After Chainsecurity disclosed a vulnerability in which the Glamsterdam gas repricing EIPs make malicious transactions that previously failed succeed, the Hoodi testnet fork scheduled for October 26 was cancelled indefinitely, and the decision on a mainnet date was postponed until the impact analysis is finished.
Why it matters
Glamsterdam, which aims to scale by changing the gas fee structure, could make already deployed DeFi contracts attackable, and 13 projects have been identified as affected. The mainnet upgrade that was expected in December is now more likely to slip to 2027, and the spec itself may change depending on the results of the security analysis.
Decisions
- Hoodi fork cancelled: The Hoodi Glamsterdam hard fork scheduled for October 26 was cancelled indefinitely, and no new date was set. The decision keeps one testnet on the pre-fork spec in case the spec changes.
- Mainnet schedule on hold: The decision on the mainnet Glamsterdam fork date was postponed until the full impact analysis is complete. A December 2026 fork has become very difficult, and 2027 is likely.
- ACDT extended to 90 minutes: The ACDT call will grow from 60 to 90 minutes. The change gives breathing room to a testing call that was short on time every session.
- Bogota devnet-2: The scope of bogota-devnet-2 was fixed at four EIPs, EIP-8253, EIP-4758, EIP-8298 and EIP-8151, and it will launch next week with three clients: Nethermind, Geth and ethrex. It is an experimental network for running Hegotá candidate EIPs on a real network.
- Timing of the integrated devnet: The first EL+CL integrated devnet (hegota-devnet-0) is set for after Devcon, and the discussion of how FOCIL and Frames interact will start in person at Devcon. Because the two features affect each other, the aim is to align the design first.
- Devcon week ACDE cancelled: The ACDE for Devcon week, two weeks from now, is cancelled, and the next ACDE will be held four weeks from now. Developers gathering at Devcon will continue the discussion on site.
Discussion
Is Glamsterdam allowed to break deployed contracts
Chainsecurity disclosed a vulnerability in which malicious transactions that previously failed succeed under the gas repricing EIP-8037/8038, which made it a point of contention whether a protocol change may break user contracts.
Outcome: Postponement decided 00:47:12
Whether to halt the Hoodi fork
With the Hoodi testnet fork on October 26 only four days away, the call had to decide whether to push ahead or cancel until the security analysis is finished.
Outcome: Cancellation decided 00:49:52
Is CFI inclusion by default
With nearly 19 EIPs in CFI status piled up for Hegotá, an issue was raised to correct the practice of treating CFI as effectively confirmed inclusion.
Next devnet: EL-only or integrated
Before Devcon, the call had to decide whether to launch one more EL-only devnet (bogota-devnet-2) or go straight to an integrated EL+CL devnet (hegota-devnet-0), and what its scope should be.
Outcome: Scope confirmed 01:36:58
Glossary
- SFI: Scheduled for Inclusion, the EIP status meaning inclusion in the fork is confirmed
- CFI: Considered for Inclusion, the stage where inclusion is being evaluated and tested on devnets
- PFI: Proposed for Inclusion, the stage where inclusion has been proposed and the EIP has been accepted as a candidate
- DFI: Declined for Inclusion, the status of having been dropped from fork candidates
- Gas repricing: A protocol change that resets the gas cost of each operation
- Devnet: A temporary development network where client teams try out new features
- FOCIL: A proposal to force a transaction inclusion list into blocks for censorship resistance
- Frames: The new format in EIP-8141 that changes the transaction structure