ERC-7562 moves to Review
(forshtat) was merged; it holds the validation rules for ERC-4337 account abstraction.
Cross-model collaboration on AA standards
EIP-8141: optional sender-keyed authority read for a shared authorization step
(AnkushinDaniil, later closed). A `VERIFY` frame can only read `tx.sender` storage today, so it cannot read an authority record in a keystore contract that is keyed to the account and writable only by it, which blocks keystore and frame accounts from sharing an authorization step.
EIP-8130: optional model-neutral change digest
Where the signed digest binds only domain, chainId, account, actorId and the old and new config, with no signer identity or transaction, so the same signature authorizes the same change through 8130, another native AA model, or another chain.
EIP-7906: abstract covers all three opcodes and the POST_TX frame mode
One of three updates merged.
More uses for recursive STARKs
ethresear.ch: scaling Ethereum with recursive STARKs and the Trustless Log Index
19:37 (zsfelfoldi). Because PQ signatures are large, EIP-8288's recursive STARK pre-authorization is a very likely upgrade path; then the onchain cost of any statelessly verifiable witness data drops sharply, including log query proofs based on EIP-8304's index tables.
ethresear.ch: post-quantum lattice or hash-based
21:49, with interviews including Peter Schwabe, co-designer of ML-DSA and SLH-DSA.
Other updates
EIP-8081: DFI decisions from ACDE #245
Merged.
soispoke on edge_pod about Ethereum's protocol privacy roadmap
18:47, covering 7805, 8181, 8250, 8272 and PQ privacy.
EF: Round Two of ETHSecurity Initiatives from the DAO Fund is live
23:41.
donnoh: L2BEAT's ossification score, where 67 means 67% of exploits over $1k targeted younger code
21:44.
Community
Trail of Bits: 1Password's report that AI produces a clean security fix only 26% of the time should not be taken seriously by defenders
18:15.