WETH
Giáo trìnhTesting and security

Incidents

Các sự cố bảo mật và lỗi giao thức trong lịch sử Ethereum

Notable mainnet incidents

:warning: This article is a stub, help the wiki by contributing and expanding it. Incidents are the disruptions, vulnerabilities and attacks faced by the network which has questioned it's stability and security. Below are some incidents that affected the network and their sources.

Overview

The Ethereum network has faced various challenges and incidents throughout its history. These incidents have helped improve the network's resilience and security through careful analysis and implementation of preventive measures. This page documents notable incidents that have affected the Ethereum.

For a comprehensive list of Ethereum incidents and their detailed analysis, you can refer to the EthStaker Incidents Page.

Recent Incidents

  • Post-Mortem, Holesky Finality Issue (24/02/2025) In February 2025, after Pectra upgrade on Holesky testnet, blocks were not getting finalized due to many EL clients having incorrect deposit contract address configurations. This caused some EL clients to reject the invalid blocks while others accepted them, resulting in network split.

  • Post-Mortem, Blob Propagation Issues (27/03/2024) In March 2024, after Dencun upgrade, blobs attached to blocks from certain builders propagated too slowly over p2p which caused a client implementation to miss few slots.

  • Post-Mortem Report: Ethereum Mainnet DOS Incident (07/02/2024) It was discovered that there was a possibility for a Denial-of-service attack dating from when the merge happened to the dencun hard fork. An attacker could create a block exceeding the specified limit of 5mb and adding multiple transactions into the block each not up to 128kb while also making sure that the transactions within the block have a collective gas which is below 30 million. With this action most nodes will reject the blocks which will lead to minority nodes acceptance creating forked blocks and missed proposer rewards.

  • Post-Mortem Report: Ethereum Mainnet Finality (05/11/2023) The Mainnet had some disruptions, which led to blocks not getting produced leading to a significant delay in transactions reaching finality, this continued for two days and resulted in an inactivity consequence, the network fully recovered without intervention.

  • Reth Mainnet State Root Mismatch (01/09/2025 A bug in Reth’s handling of trie updates caused trie tables in Reth nodes to contain incorrect information, resulting in nodes computing an incorrect state root at later blocks.

Historical Incidents

  • Post-Mortem Report: Minority Split (2021-08-27) This happened when Geth tried to assign data back into memory after the datacopy operation. Instead of saving the data in a new location, it accidentally overwrote the original data, causing it to become corrupted.

  • The DAO Attack (2016) One of the most significant incidents in Ethereum's history, where a vulnerability in The DAO smart contract was exploited, leading to the loss of approximately 3.6M ETH. This incident ultimately led to a hard fork of the Ethereum blockchain, creating Ethereum Classic (ETC) and the current Ethereum (ETH) chain.

  • Shanghai DOS Attacks (2016) The network faced a series of DOS attacks during DevCon2 in Shanghai, where attackers exploited underpriced EVM opcodes (particularly EXTCODESIZE) to slow down block processing resulting in network congestion. This led to subsequent hard forks (Tangerine Whistle and Spurious Dragon) that adjusted gas costs for targeted opcodes to prevent similar attacks.

On this page