ZKsync Tightens Security Ahead of EraVM Retirement

ZKsync's EraVM execution environment will be retired within six months as part of a broader effort to improve security posture. The move comes after the approval of GAP-5, which renames Emergency Upgrades to Instant Upgrades and requires notice on the ZK Nation forums after each one.

The company is implementing five measures to harden EraVM security: raising execution delay from three hours to 24 hours, requiring an independent second node for confirmation, delaying public protocol code publication by three months, adding a new prover (EraBender) alongside Boojum, and consolidating development on Atlas.

ZKsync attributes the need for these measures to the changing threat landscape due to artificial intelligence. The company notes that the public, permissionless nature of blockchains makes them attractive targets for autonomous exploit discovery.