At this time, we’re excited to announce the Pectra Audit Competitors, kicking off on Cantina! This month-long occasion will run from February 21 to March 24, and we’re excited to see what points the safety group can discover.
Why Pectra Issues
A number of the key EIPs for Pectra are listed beneath
From EOAs to Good Accounts (EIP-7702)
- Enhances Externally Owned Accounts (EOAs) with good contract options.
Key Advantages
- Transaction Batching: Mix a number of operations right into a single transaction.
- Fuel Sponsorship: Others will pay charges for the account.
- Various Authentication: Use {hardware} safety modules or passkeys for authorization.
- Spending Controls: Restrict token utilization/outflows for improved safety.
- Restoration Mechanisms: Safer asset safety with out altering the principle account.
Security Checks
- Chain-Particular: Delegations legitimate solely on one chain ID.
- Nonce-Sure: Tied to the account’s present nonce, auto-invalidated when it adjustments.
- Revocability: The EOA proprietor can revoke/substitute present delegations at any time.
Validator UX Enhancements
EIP-7251
- Raises Max Validator Steadiness from 32 ETH to 2048 ETH.
- Permits automated reward compounding and validator consolidation (merge a number of validators with shared withdrawal credentials).
EIP-7002
- Execution Layer Triggerable Withdrawals: Permits an Ethereum tackle (not simply the validator signing key) to set off exits.
- Reduces Belief in Delegation: The account proprietor (human, DAO, and so on.) can drive exits with out counting on the validator.
EIP-6110
- Speeds Up Deposit Processing: Cuts wait time from ~9 hours to ~13 minutes.
- Removes the pre-merge buffer for deposit processing (not wanted post-merge).
Blob Scaling (EIP-7691)
- Will increase Ethereum’s Blob Capability by 50% (common from 3 to six, max from 6 to 9).
- Blobs are short-lived knowledge for L2 proofs, decreasing L1 charges by 10–100×.
- EIP-7623 caps worst-case block dimension to handle larger bandwidth.
- Future scaling will contain knowledge sampling in order that nodes retailer solely subsets of blob knowledge.
For a extra complete overview, take a look on the Pectra web page on ethereum.org.
Scope of the Audit
This competitors particularly targets Pectra code. Any vulnerabilities found that aren’t particular to Pectra must be reported by the Ethereum Basis Bounty Program. By protecting the give attention to Pectra on this competitors, we hope to floor potential points previous to the mainnet laborious fork.
Ethereum Protocol Attackathon Recap
The Ethereum Protocol Attackathon, which was not too long ago hosted on Immunefi, has additionally been concluded. In collaboration with Immunefi and the Ecosystem Funding Initiative, main ecosystem gamers — Bybit, Wormhole, Arbitrum Basis, The Graph, GMX, and Base — generously donated matching funds alongside the Ethereum Basis. This collective effort underscored the group’s dedication to constructing a safer and resilient blockchain ecosystem.
Able to Start?
Head to Cantina’s competitors web page to get began.
For extra data on reporting vulnerabilities outdoors of the competitors, please go to the Ethereum Basis’s Bug Bounty Program.
We stay up for your discoveries. Good luck, and joyful auditing!