EIP-8130: renumber AA transaction types and add an eth_call/eth_estimateGas RPC extension
Merged.
Accounts and transaction assertions
EIP-7906: add per-address TXDIFF views and account change flags
(forshtat), merged, extending the `TXDIFF` opcode with params `0x06` to `0x0A` so per-contract questions such as "did it change?" and "did it emit?" can be answered directly.
EIP-7928: exclude the recipient when a runtime halt precedes its access
(nerolation), merged; EIP-2780: clarifications and alignment with recent changes, merged.
EIP-2780: clarifications
EIP-7928: exclude the recipient when a runtime halt precedes its access (nerolation), merged; EIP-2780: clarifications and alignment with recent changes, merged.
alignment with recent changes
EIP-7928: exclude the recipient when a runtime halt precedes its access (nerolation), merged; EIP-2780: clarifications and alignment with recent changes, merged.
Security and privacy
EF blog: the triage is the product, running AI agents against Ethereum's protocol code
(Nikos Baxevanis), with the EF post at 22:58. The Protocol Security team runs coordinated AI agents against systems software, cryptographic code and contracts and found real bugs; one now public is a remotely triggerable panic in libp2p's gossipsub, CVE-2026-34219. The surprise was how much of the work went into telling real bugs from ones that only looked real.
EF post
EF blog: the triage is the product, running AI agents against Ethereum's protocol code (Nikos Baxevanis), with the EF post at 22:58. The Protocol Security team runs coordinated AI agents against systems software, cryptographic code and contracts and found real bugs; one now public is a remotely triggerable panic in libp2p's gossipsub, CVE-2026-34219. The surprise was how much of the work went into telling real bugs from ones that only looked real.
ameensol: building Privacy Pools v2
22:59: in shielded pools each deposit gets an individually approved ID that can still be revoked later (unlike Railgun's one-time PPOI), and every private transfer carries a `deposit_ID`.
L2BEAT: Zama confidential tokens added to the privacy dashboard
20:19.
Other updates
Solidity v0.8.36 is out
21:32, with Amsterdam EVM support and important fixes for inheritance linearization and the Yul optimizer.
New EIP: bundled attestation propagation
(sukunrt), submitted, deduplicating attestation broadcast in subnets for up to 50% bandwidth savings, backward compatible and deployable without a fork.
EIP-7723: update the upgrade Meta EIP process
Submitted; EIP-7904: move to Review, merged.
EIP-7904: move to Review
EIP-7723: update the upgrade Meta EIP process, submitted; EIP-7904: move to Review, merged.
Community
Eli Ben-Sasson: the STRK20 privacy pool one month after launch
16:46.
zooko: using Claude Fable 5 on a Zcash anti-eavesdropping security project
03:12.