Ethereum Core Developers Release Geth v1.17.8 to Patch Post-Amsterdam DoS Vectors

Ethereum execution client Go-Ethereum (Geth) deployed a security-focused maintenance release, version 1.17.8, addressing multiple denial-of-service (DoS) vulnerabilities ¹. The update, designated "Protein Sludge Pack," primarily resolves attack vectors that emerged alongside the implementation logic of the upcoming Amsterdam hard fork ¹.

According to the release notes, the development team strengthened DoS resistance across several peer-to-peer packet handlers within the eth and snap protocol layers ¹. Hardening measures also addressed post-Amsterdam vulnerabilities tied to JUMPDEST analysis caching and BAL accounts, alongside an issue where rogue STUN servers could crash nodes via invalid responses ¹. Additionally, peer IP predictors will now demand IP address verification before accepting incoming network statements ¹.

Amsterdam RPC and State Adjustments

Beyond defensive networking fixes, Geth v1.17.8 incorporates correctness updates for Remote Procedure Call (RPC) interfaces interacting with Amsterdam specifications ¹. The engine simulation endpoint eth_simulateV1 was updated to align virtual blocks with Amsterdam rules and properly report $ETH transfer logs ¹. For read-only operations such as eth_call, client logic no longer enforces transaction gas limits post-Amsterdam ¹. The update also resolves an edge case where nodes struggled to process beacon chain head updates following an unclean shutdown ¹.

Other component changes resolve an implementation bug in the EIP-8070 Sparse Blobpool and correct an inaccurate genesis timestamp for the Hoodi testnet beacon chain ¹. The Geth team advised all node operators to upgrade to the release ¹. At the time of writing, Ethereum traded at $2,424, down 5.6% over the preceding 24 hours.