Pinned Tweet
This week the ChainSecurity team is on stage 8 times across @summit_defi and @EFDevcon in Mumbai + running Glamsterdam 1:1s all week.
Our schedule is below - come find us. ☺️
We've been securing institutions and central banks and government-owned entities long before stablecoins were on everyone's roadmap.
Pietro brings that experience to Vienna Bluechip26: come find him 🔐
🔎 Stablecoins For Institutions: Weighing Risk Against Opportunity
Panel discussion at Bluechip26, featuring:
• Anna Petrenko (@Anna_Petrenkoo), Everstake
• Triv, Trezor
• TokenBrice (@TokenBrice), Pharos
• Chris Thomas, Yields Digital
• Pietro Carta (@PtrCarta), ChainSecurity
Bluechip26 is the world's first and leading conference dedicated to crypto safety. Get tickets at conference.bluechip.org.
📍 Nov 10-11 in Vienna
Our team flagged these issues, and it's great to see core devs put security ahead of the timeline.
Special thanks to @pcaversaccio for helping escalate it 🙏
LATEST: ⚡ Ethereum developers say they are delaying the Glamsterdam hard fork process and won't fork the Hoodi testnet until gas-repricing issues flagged by ChainSecurity are resolved.
ALT A glowing Ethereum logo floats in a dark, minimalist setting, with light emanating from its center, casting reflections on the surface below.
ALT A digital illustration of interconnected glowing blue cubes representing a blockchain network. The cubes are linked by bright lines with sparks and light trails, symbolizing data transfer and connectivity in a technological environment.
1
15
711
If you didn't catch our engineers at Devcon yet, come meet us at the Security Hub on Thursday.
⏲️ 15:40 - 17:30, Nov 5th
We will be there to answer all Glamsterdam questions!
Thursday, November 5
09:00–10:00 | Networking
10:00–10:20 | ART-ECDSA: Threshold Signing Light Enough for a Hardware Wallet
Sung-Hyun Jo, @crossbar_inc
10:30–11:10 | LeakDetectAI
Manu Gupta, @libp2p
11:20–12:00 | How to Defend Your Protocol in the AI Era
@saxenism, @bluethroat_labs
13:20–13:40 | Building an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
@d0rsky, @HackenProof
13:50–14:20 | Key Management
@LewellenMichae, @turnkeyhq
14:30–14:50 | Onay: 2FA for Ethereum Transactions
@kaanuzdogan, @argotorg
14:50–15:30 | Solidity Compiler
@hbbiok, @okcontract
15:40–17:30 | Breaking Changes in Glamsterdam: Will Your Contracts Still Behave?
@chain_security team
17:30–18:00 | ETHSecurity Badge holders Hangout
2
3
438
Audits are where we usually meet threats, but tomorrow we're meeting them a bit earlier.
Mumbai, 9:30 AM sharp.
⛑️ 🏏 Everything is downstream of security
See you at the first ever Ethereum Forward Defence Summit tomorrow at the Mumbai Cricket Association (MCA Banquets).
A working security summit from @Safe, the @ethereumfndn 1TS team & @LidoFinance @chain_security. Ethereum’s sharpest security minds, one room, one goal: meet threats before they arrive.
⏳ See you tomorrow
⏲️ 9:30 AM sharp!
Full lineup 👇
Many hacks, many learnings.
What have we learned from recent hacks? Matthias Egli explores the lessons at DSS 2026.
Top hacks since Devcon 7 - what did we learn?
Add it to your DSS shortlist:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker Matthias Egli: Top hacks since Devcon 7 - what did we learn?. 1–2 November 2026, Marriott, Mumbai.
Watch one of our auditors become a quiz master for the morning and see if you can win.
Test your smart contract security knowledge with Lothaire Aubergeon at DSS 2026.
The Big Smart Contract Security Quiz
Choose your sessions and share your picks:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker Lothaire Aubergeon: The Big Smart Contract Security Quiz. 1–2 November 2026, Marriott, Mumbai.
We can't wait for this one!
Explore Glamsterdam with Ioannis Sachinoglou at DSS 2026.
Glamsterdam Hard Fork: When Spent Gas Comes Back
Save the talk and share your shortlist:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker Ioannis Sachinoglou: Glamsterdam Hard Fork: When Spent Gas Comes Back. 1–2 November 2026, Marriott, Mumbai.
MPC wallets are a promising non-custodial solution, increasingly trusted by institutions, but the come with a set of challenges, and need an expert review.
As part of our efforts to secure the crypto ecosystem, we have been investigating MPC wallet implementations in the wild and have identified several attacks that could steal private keys.
In our latest blog post, we document a common pitfall of integrating with popular libraries, which put a large MPC wallet provider at risk 👇
chainsecurity.com/blog/pleas…
We're happy to be one of the auditors on Areta. Applications are open ↓
1/ 🔐 Extension secured!
185 applications. 60+ projects supported. $500k in subsidies allocated.
We’re excited to bring 3 more months of the Ethereum Security Subsidy Program to @ethereum builders.
Big thanks to @ethereumfndn and @NethermindSec for helping make the pilot program a success - let’s keep it going!
3
456
Glamsterdam got pushed back, but @EFDevcon is next week - good timing.
Bring your call paths & we'll walk through what the upgrade changes for your protocol right there 👀
luma.com/c9nw11qi
🫡
This is what a good auditor looks like. ChainSecurity found a gas-accounting issue in Ethereum’s next upgrade before it reached mainnet, and the test fork got pushed so teams can check their code.
ChainSecurity audits Mezzanine.
To be clear, nothing in this finding touches Mezzanine’s contracts.
11
649
Background: chainsecurity.com/blog/glams…
The Glamsterdam upgrade on Hoodi testnet previously scheduled for October 26th has been delayed. Node operators check your clients for instructions. The new date is TBA.
blog.ethereum.org/2026/10/22…
3
446
In short: after Glamsterdam, some calls that used to fail out of gas can now complete, and contracts built on the old behavior can make the wrong call.
We're working with the EF and affected teams. If you're unsure about your code, reach out via glamsterdam@chainsecurity.com
🫡
Ethereum Delays Glamsterdam Testnet Fork Over Gas Security Flaws
decrypt.co/381681/ethereum-d…
10
569
🫡
Ethereum developers have unscheduled Glamsterdam's Oct. 26 activation on the Hoodi testnet. Christine D. Kim says the reason is security issues ChainSecurity found in the upgrade.
unchainedcrypto.com/ethereum…
8
600
We're happy our research could help here. A testnet delay is a lot cheaper than broken contracts on mainnet.
What changes and how to check your code ↓
chainsecurity.com/blog/glams…
UPDATE: Ethereum developers postpone the Glamsterdam upgrade on the Hoodi testnet, after security researchers flagged that EIP-8037’s gas accounting changes could permanently alter how existing smart contracts handle failed transactions.
No new date has been announced.
11
520
⚠️ It has just been decided to delay the Glamsterdam hard fork on the Hoodi testnet because of security impacts we identified in this blog post: chainsecurity.com/blog/glams…
We already found 13 real-world examples and are in responsible disclosure with the affected projects.
Please check your contracts as soon as possible, as the EF is determining how many contracts are impacted in which way.
Feel free to reach out to us with questions via glamsterdam@chainsecurity.com.
Security for institutions has been in our DNA since our days at PwC Switzerland in 2020.
If you're bringing assets, payments or treasury on-chain, Pietro is the person to talk to at Bluechip26.
📍 Vienna, Nov 10-11. DM us to talk.
🎙️ Pietro Carta (@PtrCarta) is speaking at Bluechip26, the Crypto Safety Conference!
Pietro is Partner & Senior Blockchain Engineer @Chain_Security, one of the longest-standing blockchain security firms, securing critical code & architecture across crypto since 2017.
Bluechip26 is the world’s first and leading conference dedicated to crypto safety. Get tickets at conference.bluechip.org.
📍 Nov 10-11 in Vienna
