Cryptocurrency basics
Ethereum Delays Glamsterdam: How a Network Upgrade Actually Ships
Ethereum's Glamsterdam upgrade was pushed back over smart contract security concerns. Here is how upgrades are tested, and why delays happen.
7 min read23 October 2026CryptoBipto editorial
A blockchain upgrade got postponed this week, and nothing happened. No funds moved. No app broke. No user had to do anything. That non-event is the whole story.
According to cryptonews.com, Ethereum's planned Glamsterdam network upgrade has been delayed after core developers flagged potential security risks tied to the upgrade's changes around smart contracts. The stated reason for the delay is to allow more auditing and testing time before the changes reach the main network. The specific vulnerabilities have not been described in detail publicly, and no new date has been confirmed.
You can read the summary on our news page for the Glamsterdam delay. The rest of this post is about the part that will still matter in a year: how Ethereum upgrades are built, why they slip, and what a delay does and does not tell you.
Why should I care
Ethereum is not just a ledger of payments. It runs programs.
Ethereum is a blockchain that can run small pieces of software, not only record transfers. Its native currency is called Ether, or ETH.
A smart contract is code that lives on the blockchain and executes automatically when its conditions are met. Think of a vending machine: you insert payment, you select an item, the machine delivers it without a clerk deciding whether to honour the deal.
Lending markets, exchanges, stablecoin issuers, bridges, and NFT marketplaces are all smart contracts. They were written against a specific set of rules about how the network behaves — how much a given operation costs, what order things happen in, what a contract can and cannot see.
A network upgrade changes some of those rules. That is the point of it. But it means every contract already deployed has to keep working under the new rules, including contracts whose authors disappeared years ago and whose code can never be edited. There is no customer support line and no patch cycle for an abandoned contract holding real money.
That is why a delay here is not embarrassing. It is the system working as designed.
What Glamsterdam was meant to do
Glamsterdam is the name Ethereum developers gave to the network upgrade that follows Fusaka. Its headline changes concern how blocks are built and how quickly nodes can verify them.
Ethereum upgrades get code names rather than version numbers. Each one bundles a set of accepted proposals — changes to the protocol — into a single coordinated switch-over. Everyone running the software has to adopt the same bundle at the same block, or the network splits into incompatible chains.
Glamsterdam's focus is on block production and validation speed. Those sound like plumbing concerns, and they mostly are. But plumbing changes have surface area. If you alter how blocks are assembled or how fast nodes confirm them, you can change assumptions that contract authors quietly relied on — timing, ordering, the cost of a given operation. That is the general category of risk being audited, though the specific issues raised by developers have not been laid out in public.
How an Ethereum upgrade actually ships
This is the part worth remembering. Ethereum has no company that decides to ship. There are multiple independent teams writing independent implementations of the same protocol, and they have to agree.
The pipeline, roughly:
| Stage | What happens | Who is exposed |
|---|---|---|
| Proposal | An improvement proposal is written up and debated in public | Nobody |
| Acceptance | Developers agree on a public call to include it in the next upgrade | Nobody |
| Client implementation | Each independent software team writes its own version of the change | Nobody |
| Devnet | A short-lived throwaway network tests whether the clients agree with each other | Nobody |
| Public testnet | A long-running network with fake money runs the upgrade for weeks | Developers and app teams, with play money |
| Mainnet | The real network activates at a pre-agreed block | Everyone |
Most upgrades spend far longer in the middle rows than anyone outside expects. Devnets get spun up, break, and get replaced. Testnets run for a month or more so that application teams can redeploy their contracts and check nothing behaves strangely.
The reason for the multiple independent implementations is worth stating plainly. If one team's software has a bug that makes it accept an invalid block, the other implementations reject it, and the bug shows up as a disagreement rather than as a silent compromise of the chain. That is called client diversity, and it is a safety feature paid for with a lot of coordination overhead.
Why audits sit in the middle of this
An audit, in this context, is a structured review of code by people who did not write it, looking specifically for ways it could be exploited or could fail.
There are two layers of auditing around a network upgrade:
- The protocol change itself. Does the new rule create a way to produce a block that should be invalid but is accepted? Does it let someone cheaply exhaust a node's resources?
- The effect on existing contracts. Does the change break assumptions that live contracts already depend on? This is harder, because the code in question is already deployed and immutable.
The second layer is the one that makes blockchain upgrades unusual. When your phone's operating system updates and an app breaks, the app developer ships a fix. When a smart contract breaks, there may be no developer and no fix. Funds can simply become stuck or extractable.
That asymmetry is the whole argument for pausing. A delay costs time. A bad deployment can cost something that cannot be refunded.
Delays are the norm, not the exception
Previous Ethereum upgrades have slipped repeatedly when problems surfaced during testing. Some were pushed back weeks, others months. Features have been cut from an upgrade entirely and moved to the next one when they were not ready.
There is a pattern to how this gets communicated, and it is useful to recognise:
- A problem is found on a devnet or testnet, not on the main network.
- Developers discuss it on a public call or in a public repository.
- The activation date is pushed, or a feature is dropped from the bundle.
- The reasoning is eventually written up in detail.
If you only read headlines, this looks like repeated failure. If you watch the process, it looks like the testing stages doing their job. The alarming version of this story would be an upgrade that shipped on schedule and then had to be rolled back.
What a delay does not mean
A few things to separate carefully, because headlines tend to blur them.
It does not mean your contracts are currently vulnerable. The reported concerns relate to the upgrade's changes, which are not live. The current rules of the network are unchanged.
It does not mean anything about the price of ETH. We do not forecast prices here, and a schedule change in a software project is not a price signal. Markets may or may not react; that is a separate question from whether the engineering decision was correct.
It does not require action from you. Ordinary users do not install Ethereum upgrades. Node operators, validators, and staking providers do. If you hold ETH in a wallet or on a platform, upgrades happen underneath you. Which also means: anyone contacting you to say your wallet must be "upgraded" or "migrated" because of Glamsterdam is running a scam. That message has followed every major upgrade.
How to follow this without being misled
If you want to track what is actually happening rather than what is being reported about it:
- Watch for the testnet activation dates, not the mainnet date. Mainnet dates are set after the testnets have held up.
- Note whether a feature was delayed or removed from the bundle. Those are different outcomes with different timelines.
- Treat any claim about the specific vulnerability with caution until developers describe it themselves. Disclosure of security issues is usually deliberately vague until a fix is deployed, and that vagueness gets filled in by speculation.
- Check whether a source is reporting on a public developer call or repeating another outlet. Coverage chains get long.
The point
Ethereum secures a very large amount of value under rules that, once deployed, are extremely hard to change. The design response to that is to move slowly and to test in public, with multiple independent teams who are allowed to say no.
The Glamsterdam delay is one instance of that mechanism firing. The mechanism is older and more interesting than the headline, and it is what you would want to understand before evaluating the next upgrade story — or the one after that.
Nothing here is a recommendation to buy, sell, or hold anything. It is a description of how a software release process works on a network where mistakes are permanent.
Learn it properly
How Blocks Connect: Hashes and Cryptographic Linking
3 minMembersConsensus: How Strangers Agree on Truth
4 minMembersNetwork Architecture: Nodes, Clients, and Sync
4 minMembers
CryptoBipto
