According to CoinMeta, the Ethereum client Besu released version 26.7.1 on July 27, fixing 5 security vulnerabilities identified by CertiK, and issued 4 security announcements on August 14. CertiK, the director of security engineering and senior audit partner at Jialiang Chang, stated that the approach of releasing patches first and providing details later provided a 18-day buffer period for node operators to identify affected deployments, test the new version, and complete upgrades. The vulnerabilities involved block broadcast processing, caching of future high-consensus proposals, websocket subscription restrictions, and json-rpc filter creation. CertiK conducted adversarial testing on a private test network using chain and scan methods, and provided the Besu team with reproducible testing tools. CertiK is updating chain and scan for around-the-clock multi-node testing.