Bollcoin, October 27: According to CoinDesk, Ethereum developers have fixed a bug in the Glamsterdam upgrade that could have let operators take ETH that staking services had earmarked for new validators. The fix changes how validator deposits are processed and was merged on Monday, a week after developers had rejected the change. Researcher avsetsin found that if an operator registers as a builder with a specific public key and a staking service then deposits ETH with the same key to launch a validator, draft rules would credit both deposits to the builder; avsetsin said this is a conditional code finding, not a confirmed live exploit, that existing checks can block the attack and that no losses have been reported. The new rules sort pending deposits by withdrawal credentials, so validator deposits remain attributed to the validator.