{"id":253164,"date":"2021-05-19T05:51:45","date_gmt":"2021-05-19T02:51:45","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/patched-vulnerability-couldve-crippled-eth-over-the-past-2-years-ethereum-foundation\/"},"modified":"2021-05-19T05:51:45","modified_gmt":"2021-05-19T02:51:45","slug":"patched-vulnerability-couldve-crippled-eth-over-the-past-2-years-ethereum-foundation","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/patched-vulnerability-couldve-crippled-eth-over-the-past-2-years-ethereum-foundation\/","title":{"rendered":"# Patched vulnerability could\u2019ve crippled ETH over the past 2 years: Ethereum Foundation"},"content":{"rendered":"

“# Patched vulnerability could\u2019ve crippled ETH over the past 2 years: Ethereum Foundation <\/strong>”
\n<\/p>\n

The Ethereum Foundation has published a blog post outlining a potentially catastrophic vulnerability that could have resulted in the mainnet being brought down at a cost of less than five-figures up until the execution of the Berlin hardfork last month.<\/p>\n

A May 18 blog post<\/a> describes the vulnerability as having posed \u201ca severe threat against the Ethereum platform\u201d until April\u2019s upgrades allowed it to dodge the bullet.<\/p>\n

The report describes the threat as having been an \u201copen secret,\u201d noting it was once publicly disclosed by mistake. Following the implementation of the Berlin hard fork, the foundation estimates the threat is low enough to warrant full disclosure at this time, stating:<\/p>\n

\u201cIt\u2019s important that the community is given a chance to understand the reasoning behind changes that negatively affect the user experience, such as raising gas costs and limiting refunds.\u201d<\/p><\/blockquote>\n

The post details that Ethereum\u2019s state consists of a patricia-merkle trie, conceptually likening new accounts on the Ethereum network to new leaves growing on a tree. With the growth of the Ethereum network, increases to gas costs have been implemented from October 2016 to protect against denial-of-service attacks, including the controversial Ethereum Improvement Proposal, or EIP-1884.<\/p>\n

\n

#Ethereum<\/a>‘s DoS that never came to be.<\/p>\n

For over a year, mainnet could have been brought down with a few thousand $. As we’ve left it in the past, it’s time to shed some light on those troubled times.https:\/\/t.co\/xbPgbyWpcp<\/a><\/p>\n

\u2014 Go Ethereum (@go_ethereum) May 18, 2021<\/a><\/p><\/blockquote>\n