According to CoinMeta, as reported by Coindesk, Ethereum developers have fixed a vulnerability in the upcoming Glamsterdam upgrade that could have allowed malicious actors to transfer pledged funds. This vulnerability permitted malicious operators to use the same public key to transfer the ETH deposits intended for creating validators under the staking protocol to their own block builder accounts, and they might have further withdrawn funds. Researchers Avsetsin first reported this issue on October 12th. Developers initially refused to fix it on October 19th, citing insufficient support from the client team, but after further review, they officially merged the fix code on October 26th. This fix now treats the deposits of validators and block builders separately. So far, there have been no reports of actual financial losses, and the Glamsterdam upgrade has not yet been deployed on the mainnet.