Technology

Ethereum’s Constantinople Upgrade is Delayed Due to the Potential Vulnerability

The news broke out on January 15th, revealing that the long-anticipated Ethereum Constantinople, also dubbed Ethereum Improvement Proposal (EIP) 1283, is delayed. The delay was a result of the publication from the security research team from ChainSecurity, which explicitly described the programming flaw which could be exploited to steal users’ Ether (ETH) out of the PaymentSharer contract.

Reentry attack possibility

The possible attack is called “reentrancy”. This vulnerability makes it possible for an attacker to “reenter” the same function multiple times without revealing it to users. This would allow the attacker to withdraw funds endlessly.

“Imagine that my contract has a function which makes a call to another contract,” CTO of blockchain analytics firm Amberdata, Joanes Espanol, explained, and continued: “If I’m a hacker and I’m able to trigger function while the previous function was still executing, I might be able to withdraw funds.”

“Out of an abundance of caution, key stakeholders around the Ethereum community have determined that the best course of action will be to delay the planned Constantinople fork that would have occurred at block 7,080,000 on January 16, 2019,” stated the announcement on the Ethereum Blog, published the same day, just four hours after ChainSecurity’s vulnerability report.

Update nodes and wait for the decision

The Ethereum Foundation informed everybody who only interacts with the Ethereum network, without running a node, do not have to take any steps, while miners, exchanges, and other node operators need to update Geth and/or Parity instances as they are officially released.

Afri Schoedon, the hard fork coordinator at Ethereum, revealed that further steps will be decided in the all-core-developers’ meeting on Friday. According to him, the Constantinople upgrade will surely not take place this week.

It is important to mention that the same day that postponement became a reality, it was also revealed that just three days before the fork, only 16% of nodes were upgraded and ready for the implementation of the new Constantinople network rules.

The situation was recognized as a “huge problem” by The Ethereum Foundation co-founder Taylor Gerring.

Constantinople upgrade

Constantinople is a system-wide, backward-incompatible upgrade of the Ethereum network, focused on optimizing the network, increasing efficiency and reducing transaction fees. It can be viewed as the second phase of the Metropolis hard fork.

The first phase, Byzantium, took place in October 2017, when developers implemented upgrades on the network to lay down foundations for upcoming changes.

This is not the first time that Constantinople was postponed. The upgrade should have taken place in November last year, but was delayed due to the issues found while launching the upgrades on the Ropsten testnet.

The market is quick to react

As a result of the upgrade delay, the price of Ether (ETH) suffered a heavy blow as it immediately took a 7% slide towards $119.

Tags

Luka Kapetanic

An ex-restaurant business owner turned cryptocurrency fanatic, with over 12,000 followers on investfeed.com. Miner, Investor, trader and, above everything else - a writer, with coinlive.io, and cryptodigest.com in his jobs portfolio.

Related Articles

44 Comments

  1. An fascinating dialogue is value comment. I believe that it is best to write more on this matter, it won’t be a taboo topic however generally persons are not sufficient to talk on such topics. To the next. Cheers

  2. A powerful share, I simply given this onto a colleague who was doing a little evaluation on this. And he the truth is bought me breakfast as a result of I discovered it for him.. smile. So let me reword that: Thnx for the treat! However yeah Thnkx for spending the time to debate this, I really feel strongly about it and love reading more on this topic. If possible, as you develop into experience, would you thoughts updating your weblog with more details? It’s highly useful for me. Large thumb up for this weblog put up!

  3. I do agree with all the ideas you’ve offered on your post. They’re really convincing and can certainly work. Still, the posts are too quick for beginners. Could you please prolong them a little from next time? Thank you for the post.

  4. I have learned a number of important things as a result of your post. I might also like to convey that there may be situation in which you will have a loan and don’t need a co-signer such as a Federal government Student Aid Loan. But if you are getting financing through a conventional banker then you need to be willing to have a cosigner ready to assist you. The lenders can base that decision using a few aspects but the greatest will be your credit history. There are some lenders that will additionally look at your work history and make up your mind based on that but in many instances it will be based on on your scores.

Close