Ethereum patches Glamsterdam deposit flaw that could have diverted staking ETH

What sources claim

• Researcher Avsetsin wrote that under draft rules an operator who registers as a builder with a particular public key could have both a builder deposit and a staking service's validator deposit credited to the builder, allowing the operator to withdraw the protocol's funds.
• Avsetsin called the findings "conditional code findings, not confirmed live exploits" and said existing checks rejecting an earlier builder deposit could stop the attack; no losses have been reported.
• The fix was closed on October 19 because there was not enough client support, then reopened after further review and merged by Justin Traglia, who maintains Ethereum's consensus specifications.

Still unresolved

• Will the postponed October 26 Glamsterdam launch on the Hoodi test network get a new date, which Ethereum needs before a mainnet launch can be scheduled?
• When will client teams build the consensus-specification change into their software, and would live deployments handle same-key builder and validator deposits as the patched rules intend?

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished.

Measured from the sample nearest site detection, on the same source and quote currency.