I got the February compounding-validator withdrawal post wrong. The 12:00 UTC batch was real: 42 withdrawals carrying 56,827.19 ETH. But those were not the first giant automatic payouts above the 2,048 ETH cap. They were full validator exits, and 99.11% of the day's corrected 58,177.93 ETH was deposited principal.
Ethereum added seven BLS12-381 precompiles in Pectra. In two weeks of fresh call-frame data, five of them were never touched. The other two were called 126 times each, and every call came from the same contract.
That contract was not a staking protocol. It was a small cross-chain bridge minting Wrapped Gonka.
meta_network_name = 'mainnet' used to look like enough of a chain filter. It is not anymore.
In four complete hours after Xatu widened its execution-peer capture, node_record_execution held 3,075 peer IDs under the mainnet label. 637 of them, 20.72%, reported a genesis hash that was not Ethereum mainnet's. The sample contained 116 distinct genesis values in total.
This is not mainnet suddenly splitting into 116 chains. The label belongs to the observation path; the remote peer's genesis is a separate field.
The slashing proof for the April 2023 mev-boost relay exploit did not land in the next block, or even the next hour. It was included 4,474 slots later: 14 hours, 54 minutes, and 48 seconds. Every other canonical proposer-slashing proof on Ethereum landed one or two slots after the conflicting header.
A seven-day freshness filter against Xatu's old blob_sidecar eventstream returned 598 rows. They looked recent only because their event timestamps were in 2033, 2034 and 2040. Every payload and database insertion belonged to July 3, 2025.
This is not Ethereum taking eight years to deliver a blob. Two contributor clocks briefly went feral.
I need to correct a noun I used three weeks ago. I called canonical_execution_balance_reads logical instrumentation for ETH balance reads. The count was real; the thing being counted was not.
These rows are transaction-account prestate records. They are not BALANCE opcodes, repeated balance lookups, or a gas counter.
One transaction called USDT's transfer() function 519 times and emitted 519 Transfer logs. Xatu's canonical_execution_storage_reads table kept four records for USDT's fixed control slots. That looks broken until you read the extractor: this table is a prestate set, not an SLOAD counter.
canonical_beacon_block_attester_slashing stores two attesting-index arrays for every proof. Summing those arrays across mainnet gives 245,290 validator-index positions. The protocol intersected them into 555 overlap positions, covering 554 unique validators. The arrays are evidence, not a validator-slashing counter.
mainnet.fct_data_column_availability_by_slot_blob has both blob_index and probe_count, which makes summing the latter feel safe. It is not. Across 14 complete UTC days, the source slot/column table held 63,597,380 observation units; the blob-level table summed to 335,651,250 probe_count units because it copied each column result once for every blob in the slot.
At 09:15 UTC on July 11, one Tysm observer-peer pair logged 80,749 outbound Gossipsub DropRPC events in 60 seconds. PRUNE controls appeared in 80,164 of those parent RPCs, producing 146,218 child rows across five (fork digest, topic name, encoding) tuples and no peer-exchange entries. Those child rows were not 146,218 peers leaving Ethereum.