Ethereum News: Month-Old Prysm Bug Triggers Ethereum Outage, Costs Validators 382 ETH

A previously undetected bug in Ethereum’s Prysm consensus client, introduced more than a month before the Fusaka upgrade, has been identified as the root cause of a network participation drop that briefly disrupted Ethereum earlier this month.According to a post-mortem published by Ethereum developer Terence Tsao, the incident occurred on Dec. 4, when Prysm nodes began experiencing severe resource exhaustion, leading to missed attestations, reduced validator participation and significant lost rewards.What Went Wrong With PrysmThe issue stemmed from a bug introduced in Prysm PR 15965, which had been deployed on Ethereum testnets roughly a month before the Fusaka mainnet upgrade.While the bug existed on testnets, it was never triggered until mainnet conditions aligned.When Prysm nodes received attestations from out-of-sync peers, they failed to process them efficiently. Instead of referencing the current head state, affected nodes replayed past epoch blocks and recomputed expensive state transitions from scratch, dramatically increasing computational load.This resulted in a cascading performance failure across Prysm validators.Network Impact: Participation Drops to 75%For more than 42 epochs, Ethereum experienced elevated disruption metrics:Network participation fell to 75%Missed slot rate reached 18.5%Validators lost approximately 382 ETH in attestation rewardsDespite the disruption, Ethereum avoided a more severe network event thanks to client diversity.Prysm Patch Deployed, Temporary Fix UsedOnce the issue was identified, Prysm developers instructed node operators to deploy a temporary mitigation, while a full patch was prepared and rolled out shortly afterward.Prysm has since been patched, resolving the faulty behavior that caused the excessive recomputation and node exhaustion.Client Diversity Prevented a Bigger CrisisDevelopers emphasized that the outage could have been far worse if the bug had affected Ethereum’s dominant consensus client, Lighthouse.Prysm, developed by Offchain Labs, accounts for 17.6% of Ethereum consensus clients, making it the second-largest client by share. Lighthouse currently controls 52.6%, down from around 56% at the time of the incident, according to ClientDiversity data.“Client diversity prevented a noticeable impact on Ethereum users,” developers noted.“A client with more than one-third of the network would have caused a temporary loss of finality and more missed blocks.”Had the bug impacted a client controlling over 33% of the network, Ethereum could have temporarily lost finality. If it affected a client above the two-thirds threshold, the network could have finalized an invalid chain.A Reminder of Past Ethereum RisksThe incident echoes past near-misses. In May 2023, shortly after the Shanghai hard fork, Ethereum temporarily lost transaction finality for nearly 25 minutes, followed by another outage lasting over an hour the next day — both of which resolved without permanent damage.Why This MattersWhile Ethereum remained resilient, the Prysm outage highlights two critical realities:Testnets are not foolproof, even for bugs present weeks before mainnet deploymentClient diversity remains one of Ethereum’s strongest safeguards against catastrophic failuresAs Ethereum continues to evolve through upgrades like Fusaka, developers say maintaining balanced client distribution and rigorous testing remains essential to preserving network stability.