Ethereum Foundation Flags Gas Invariants Broken by Glamsterdam

The Ethereum Foundation published a call to action on November 6, 2026, warning that two gas-accounting changes bundled into the upcoming Glamsterdam upgrade will break assumptions that some live contracts currently depend on. The post states that security firm Chainsecurity identified several projects that would become vulnerable once EIP-8037 and EIP-8038 activate, because those projects rely on invariants around how gas is charged for certain operations and for state access that the two EIPs rework.

What EIP-8037 and EIP-8038 change

EIP-8037 and EIP-8038 are both gas-repricing proposals bound for Glamsterdam, Ethereum's next major network upgrade following Ethereum's Pectra fork. Per the Ethereum Foundation's post, the two EIPs alter how much gas is charged for specific opcodes and for state-related operations — changes designed to better reflect the real computational and storage cost of those operations on the network.

The blog post does not name the specific projects Chainsecurity flagged, nor does it publish a complete list of affected invariants beyond describing them as assumptions "broken by EIP-8037 and EIP-8038." The Foundation's post functions as a direct call to action: contract developers and auditors are asked to review their code against the new gas-accounting model before Glamsterdam activates on mainnet.

This disclosure follows separate reporting from Cointelegraph on October 23, 2026, which said Ethereum delayed a Glamsterdam testnet fork on Hoodi over gas-related security concerns. The Ethereum Foundation's November 6 post does not explicitly reference that earlier delay, and CoinsCipher could not confirm from the blog post alone whether the invariant issues described are the same ones that prompted the Hoodi postponement reported by Cointelegraph.

Why contract developers need to check now

The practical risk is straightforward: a smart contract that hard-codes assumptions about gas costs — for example, gas-based reentrancy guards, gas-stipend checks, or fixed gas limits passed to external calls — can behave unexpectedly once the underlying gas schedule changes. If an operation that used to cost a fixed amount of gas costs more or less after Glamsterdam, logic built on the old numbers can fail silently or open new attack surfaces.

The Ethereum Foundation's own guidance, as stated in the November 6 post, is for developers and auditors to proactively check contracts against the eight invariants rather than wait for an incident. No list of affected production contracts has been published alongside the advisory, and the Foundation has not stated a firm mainnet activation date for Glamsterdam in this post. CoinsCipher will update this article if the Foundation publishes a complete invariant list or a finalized upgrade timeline.