Back to all reports

以太坊研究日报

Ethereum Research Daily

After the Binance incident, researchers began asking whether rate limits and recovery should live in the asset (the token contract) rather than only in account code, and two ERC-20 limit proposals, ERC-8474 and ERC-8475, appeared on Magicians. potuz publicly questioned MetaMask and Rabby for defaulting to a priority fee close to 1 gwei. potuz also submitted EIP-8483 so validators can register post-quantum material, and EIP-8288 was proposed for compressing PQ signature data on the OP Stack.

Image for November 2, 2026

Image: ethresear.ch, It's time to scale the trust: EIP-8288 on OP Stack

Account protection after Binance: the account layer or the asset layer

ethresear.ch: asset-level spending limits and recovery

Posted at 00:15 by dlebee. Smart wallets, ERC-7579 modules, social recovery and EIP-7702 delegation all put policy in account code, and that leaves two gaps. First, a contract that already holds a `transferFrom` approval can bypass the wallet's daily limit. Second, under 7702 a stolen EOA key can re-delegate and replace the original protection. Asset-level checks cover every path that reduces a balance, and in the long run the protocol could even apply them to native ETH.

https://ethresear.ch/t/asset-level-spending-limits-and-recovery-should-rate-limiting-live-in-the-asset-rather-than-the-account/26205

Magicians: how Arbitrum's freezes send transactions from an address without its key

Posted at 13:48, breaks down the L1 transaction in which the Arbitrum Security Council froze 8,425 ETH and about 74.56 million ARB on addresses linked to the Binance incident on October 30: a 9-of-12 Safe called the UpgradeExecutor, temporarily swapped the Inbox implementation and sent the message.

https://ethereum-magicians.org/t/how-arbitrums-freezes-send-transactions-from-an-address-without-its-key/30175

Transaction fees: wallet default tips are too high

Post-quantum: validator PQ material registration and L2 signature aggregation

ethresear.ch: scaling the trust with EIP-8288 on OP Stack

Posted at 09:05. If every L2 user switched to PQ signatures, signatures would take 99% of transaction data and the transfers that fit in 6 blobs would fall from about 6,600 to about 155. With EIP-8288 (mempool signature and proof aggregation), signatures move out of the transaction and a single leanVM aggregate proof goes onchain, bringing a transaction signed with leanSPHINCS down to 100 to 129 bytes.

https://ethresear.ch/t/its-time-to-scale-the-trust-eip-8288-on-op-stack/26208

Other updates

Community