EF Urges Contract Checks Before Glamsterdam

Happy Friday, November 6, 2026.

The EF urges developers to check their contracts before Glamsterdam. Gnosis Pay discloses a customer data breach. Aave acquires the Avon protocol. And Devcon 9 is announced for Lisbon, Portugal in 2027.

Support ETH Daily Security

A small donation can help ETH Daily Security reach the threshold to qualify for TheDAO Fund’s vote. We’re building a public hub to help Ethereum users find tools that protect them. Support the initiative here.

EF Urges Contract Checks Before Glamsterdam

The Ethereum Foundation is requesting contract developers and auditors to check whether their projects rely on eight gas-related assumptions that EIP-8037 and EIP-8038 will change in Glamsterdam. Chainsecurity identified 13 real-world mainnet examples that led to the upgrade's postponement. The proposals change gas charging for operations and state. That can affect how contracts behave after failed calls, including code that depends on gas refunds, reservoirs, or state costs.

The Foundation has published an invariants repository with explanations, examples, and prompts developers can use to check their contracts. Projects that may be affected can contact glamsterdam@ethereum.org. Core Developers have paused the Hoodi fork process while teams investigate and resolve the issues. The Foundation is engaging Chainsecurity and Dedaub for audits and conducting internal reviews.

Gnosis Pay Disclosed Customer Data Breach

Gnosis Pay disclosed a data breach in the legacy system that powers its branded cards, exposing personal customer data. Affected users received an email outlining the specific information involved. The exposed data includes identity and contact details, home addresses, wallet balances, and activity history, creating a risk of phishing and physical attack targeting.

Gnosis said its monitoring systems detected unauthorized access on November 3rd. Gnosis Pay says it replaced affected credentials, addressed the vulnerability, increased monitoring of card activity and wallets, and made 3D Secure mandatory for online card payments. Gnosis is winding down its B2C system as planned on December 20, 2026. Affected customers were emailed with details of the information accessed.

Aave Acquires Avon Protocol

Aave acquired fixed-rate lending startup Avon, including Avon’s team and technology. The Avon leadership team will join Aave engineering to work across Aave’s network and product layers, with fixed-rate lending among the capabilities in development. Aave Labs said the acquisition supports its effort to expand onchain lending for individuals, institutions and fintech partners. Aave has more than $33 billion in deposits and more than $13 billion in active loans. The financial terms of the deal were not disclosed.

Devcon 9 Set For Lisbon In 2027

The Ethereum Foundation announced that Devcon 9 will take place in Lisbon, Portugal, from October 11 to 13, 2027. The announcement comes as Devcon 8 wrapped up in Mumbai, India. Devcon is the largest global gathering of Ethereum developers.

Misc News

Catch up with Ethereal news weekly #46. Walletbeat is out of beta. Web3auth pauses embedded wallet service amid security issues. And Bankr connects to Coinbase agents

Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content is at your own risk.