以太坊研究日报

Ethereum Research Daily

A daily record of what changed in Ethereum protocol work, research and the ecosystem.

Page 2 of 15 · October 29, 2026 to November 4, 2026

Image for November 4, 2026
  • EIP-8477
  • EIP-8141
  • MAX_VERIFY_GAS
  • Glamsterdam spec errata
  • ETHBEAT

Responding to the 7702 authorizations that were stored and replayed in the Binance incident, EIP-8477 proposes binding every authorization to one of the last 256 blocks so that it expires. Frame Transaction got two revisions: lightclient added lean SPHINCS post-quantum signatures, and nerolation proposed leaving the calldata cost of signatures out of MAX_VERIFY_GAS. A batch of non-author PRs corrected the wording of EIP-2780, EIP-8037, EIP-8038 and other Glamsterdam specs. L2BEAT was renamed ETHBEAT.
Image for November 3, 2026
  • Devcon 8 opens
  • Aztec Tierra
  • Privacy Pools v2
  • EIP-7702 and Binance
  • replay-protection storage

Devcon 8 opened in Mumbai, and Vitalik's opening talk placed formal verification, open hardware and private communication within Ethereum's mission. Privacy shipped in a cluster: Aztec Tierra (Alpha V6) launched and Privacy Pools v2 was released during Devcon. Binance's preliminary report says that once the attacker controlled its signing service, it set up delegation with EIP-7702 authorizations, and pausing withdrawals could not invalidate them. ethresear.ch looked at the storage cost of nonces and nullifiers.
Image for November 2, 2026
  • account-level vs asset-level protection
  • priority fees
  • EIP-8483
  • EIP-8288
  • Glamsterdam spec fixes

After the Binance incident, researchers began asking whether rate limits and recovery should live in the asset (the token contract) rather than only in account code, and two ERC-20 limit proposals, ERC-8474 and ERC-8475, appeared on Magicians. potuz publicly questioned MetaMask and Rabby for defaulting to a priority fee close to 1 gwei. potuz also submitted EIP-8483 so validators can register post-quantum material, and EIP-8288 was proposed for compressing PQ signature data on the OP Stack.
Image for November 1, 2026
  • EIP-7702 opt-out
  • EIP-8141
  • Binance incident
  • post-quantum
  • Devcon 8

After the Binance theft, account security is the main thread. A revision to EIP-8151 would let EOAs that permanently disable 7702 delegation through EIP-8476 keep using permit signatures, and the Ethlabs weekly stresses that 7702 itself was not broken. Frame Transaction (EIP-8141) merged a breaking fix to its nonce boundary. On post-quantum work, EIP-8479 was submitted and @ethereum published video from the Cambridge PQ workshop.
  • Vitalik on digital minimalism
  • ethlambda v1.0.0
  • two new consensus clients in a week
  • EIP-8141 nonce boundary
  • ERC-8481 agent pre-sign risk report

Vitalik published "Digital minimalism", on using digital technology intentionally; for example, he has not left X the platform but posts through the Firefly multi-client instead. LambdaClass released ethlambda v1.0.0, a Lean Ethereum consensus client, which together with Gattaca's Silver, announced on October 29, makes two new consensus clients in a week. EIP-8141 fixed its transaction nonce check boundary. In the aftermath of the Binance incident, SEAL described how incident response has to be coordinated within minutes.
Image for October 30, 2026
  • Binance security incident
  • EIP-7702 debate
  • EIP-8476 permanent EOA delegation opt-out
  • EIP-8477 recent block bound authorizations
  • EIP-8141 EXTCODEHASH restrictions

Binance suffered a $6.3B security incident, and about $3B was frozen within hours. Rumors blamed EIP-7702, but Derek Chiang and Martin Köppelmann both said 7702 itself is not broken and was only used to carry out the attack efficiently. Two new 7702 proposals appeared the same day: EIP-8476 lets an EOA permanently disable delegation, and EIP-8477 requires authorizations to be anchored to a block within the last 256.
  • ACDC #190
  • Alex Stokes steps down as facilitator
  • Hegotá consensus layer scoping
  • ERC-8441 hybrid post-quantum stealth addresses
  • leanXMSS

At ACDC #190, Alex Stokes stepped down as consensus call facilitator, with Ben Edgington taking over as lead and Will Corcoran as deputy. Hegotá consensus layer scoping finished: EIP-8015 is SFI, and EIP-8205 was declined, to be solved through a post-quantum deposit contract instead. ERC-8441 hybrid post-quantum stealth addresses was merged, and leanXMSS has a first working version in Lean4, planned for EIP-8450.