soispoke published MATCHA. With frame transactions and keyed nonces, one sender may have several pending transactions, which creates a DoS risk; MATCHA lets a sender earn extra "width" only from the gas it actually used in finalized blocks. Gottfried Herold suggested EIP-8250 use the first byte of the nonce key to tell one-shot nonces from counter nonces, so Bloom filters can later reduce storage for stateless nodes. Trezor began supporting ERC-7730 clear signing.
20:52, with the ethresear.ch post. EIP-8141 normally admits one pending transaction per sender; EIP-8250 lets many users of a privacy app share one sender without nonce conflicts, which opens the door to admitting several. The risks: a malicious app could submit many valid spends and then invalidate the whole set with one onchain settings change, repeating the revalidation burden; or a malicious user could crowd out an honest privacy app's capacity with low-fee transactions. MATCHA, a local mempool policy, makes every admission beyond the first spend "width" assigned to the sender, earned only from the gas that sender actually used in finalized blocks and not returned when a transaction leaves the mempool. The FOCIL extension for frame transactions (EIP-8369) would make flooding transactions more likely to be included, making the attack costlier.
Soispoke: new post, MATCHA, 20:52, with the ethresear.ch post. EIP-8141 normally admits one pending transaction per sender; EIP-8250 lets many users of a privacy app share one sender without nonce conflicts, which opens the door to admitting several. The risks: a malicious app could submit many valid spends and then invalidate the whole set with one onchain settings change, repeating the revalidation burden; or a malicious user could crowd out an honest privacy app's capacity with low-fee transactions. MATCHA, a local mempool policy, makes every admission beyond the first spend "width" assigned to the sender, earned only from the gas that sender actually used in finalized blocks and not returned when a transaction leaves the mempool. The FOCIL extension for frame transactions (EIP-8369) would make flooding transactions more likely to be included, making the attack costlier.
21:27, with the ethresear.ch post (Gottfried Herold). It suggests EIP-8250 tag the nonce type with the first byte of the nonce key, separating one-shot from counter nonces, to stay compatible with future use of Bloom filters to reduce VOPS storage.
Soispoke: new post, Bloom filters and keyed nonces, 21:27, with the ethresear.ch post (Gottfried Herold). It suggests EIP-8250 tag the nonce type with the first byte of the nonce key, separating one-shot from counter nonces, to stay compatible with future use of Bloom filters to reduce VOPS storage.
22:06, from the Trillion Dollar Security Initiative's Clear Signing Working Group. The same day an ERC-7730 PR corrected the proxy guidance so descriptor files bind to implementation addresses.
EF: Trezor now supports clear signing via ERC-7730, 22:06, from the Trillion Dollar Security Initiative's Clear Signing Working Group. The same day an ERC-7730 PR corrected the proxy guidance so descriptor files bind to implementation addresses.
