Pectra升級的Sepolia testnet遇到了錯誤，在攻擊者使用“邊緣情況”引起空塊的採礦後，這使該錯誤變得更糟。

Pectra於3月5日上午7:29在其最終的測試網絡上推出了

The recent Pectra upgrade of the Sepolia testnet ran into errors, which was made worse after an attacker used an “edge case” to cause the mining of empty blocks, according to a post by Ethereum developer Marius van der Wijden.

根據以太坊開發人員Marius van der Wijden的帖子，最近攻擊者使用“邊緣案件”引起空塊的採礦後，塞波利亞測試網的最近升級遇到了錯誤，這使這變得更糟。

Pectra rolled out on its final testnet, Sepolia, at 7:29 am on March 5, but the team immediately started seeing error messages on their geth node and empty blocks being mined.

Pectra於3月5日上午7:29在其最終的測試網絡塞波利亞（Sepolia）上推出，但團隊立即開始在其Geth Node上看到錯誤消息，並開采了空塊。

The error was because the deposit contract triggered the wrong type of event — a transfer event instead of a deposit, according to van der Wijden. A fix was rolled out, but they missed one edge case, and an unknown user exploited it by sending a 0-token transfer to the deposit address, which triggered the error again.

該錯誤是因為存款合同觸發了錯誤類型的事件 - 轉移事件而不是存款。解決了一個修復程序，但他們錯過了一個邊緣案例，一個未知用戶通過將0 token轉移發送到存款地址來利用它，這再次觸發了錯誤。

“After a few minutes we saw a lot of empty blocks again, so we looked again into the transaction pools and found another offending transaction that triggered the same edge cases,” he said.

他說：“幾分鐘後，我們再次看到了很多空塊，所以我們再次查看了交易池，發現了另一個有害的交易觸發了相同的邊緣案件。”

“First we thought that someone from the trusted validators has made a mistake, but we quickly realized that this transaction originated from a new account recently funded by the faucet.”

“首先，我們認為來自受信任驗證者的人犯了一個錯誤，但是我們很快意識到，這項交易起源於最近由水龍頭資助的新帳戶。”

The ERC-20 standard does not forbid a zero token transfer; this allows anyone, even if they don’t own any tokens, to transfer to another address, which the unknown user realized, van der Wijden said.

ERC-20標準不禁止代幣傳輸零； Van der Wijden說，這使任何人都沒有任何令牌，即使他們沒有任何代幣，也可以將其轉移到未知用戶意識到的地址。

“The only way to stop the attack would be to filter out all transactions that interact with the deposit contract. So we made the following private fix, which we deployed to a few of the DevOps nodes.”

“停止攻擊的唯一方法是濾除與存款合同相互作用的所有交易。因此，我們進行了以下私人修復程序，並將其部署到了一些DevOps節點。”

“We suspected that the attacker was reading some of our chats, so we decided not to publicize the fix, but only update a few nodes that we controlled in order to get more full blocks on the network,” he added.

他補充說：“我們懷疑攻擊者正在閱讀我們的一些聊天，因此我們決定不宣傳修復程序，但僅更新一些我們控制的節點，以便在網絡上獲得更多的完整塊。”

By 2 pm, all the nodes had been updated with the fix, and the unknown user transaction was mined successfully.

到下午2點，所有節點都通過修復程序進行了更新，未知的用戶交易已成功開採。

They never lost finalization during the incident, and the issue was isolated to Sepolia because they were using a token-gated deposit contract instead of the normal mainnet deposit contract.

他們在事件期間從未失去最終確定，並且該問題被隔離到Sepolia，因為他們使用了令牌門控的存款合同，而不是正常的Mainnet存款合同。

Previously, the developers tested the Pectra upgrade on the Holesky testnet on Feb. 26, which also encountered issues.

此前，開發人員於2月26日在Holesky Testnet上測試了Pectra升級，這也遇到了問題。

As a result, the developers have decided to postpone the Pectra upgrade until more tests can be done.

結果，開發人員已決定將Pectra升級推遲，直到可以進行更多測試為止。

See also: Ether sentiment hits yearly low but that could be a good thing: Santiment

另請參閱：以太情緒每年都在低調，但這可能是一件好事：令人愉悅

The Pectra fork follows the network’s Dencun upgrade, which slashed transaction fees for layer-2 networks and improved the economics of Ethereum rollups. The Dencun hard fork rolled out on March 13, 2024.

Pectra叉遵循該網絡的Dencun升級，該升級削減了第2層網絡的交易費用，並改善了以太坊匯總的經濟性。 Dencun Hard Fork於2024年3月13日推出。

Recently, the Ethereum Foundation announced a new leadership structure with two co-directors of the foundation, Hsiao-Wei Wang and Tomasz Stańczak, taking the helm.

最近，以太坊基金會宣布了一個新的領導結構，其中兩個基金會的聯合指導者Hsiao-Wei Wang和TomaszStańczak掌管。