Layer-2
Arbitrum Suspends New Stylus Activations Due to Security Concerns
On October 2, 2026, Arbitrum's Security Council implemented an emergency upgrade that halted all new activations of Stylus contracts on both Arbitrum One and Nova. This decision was made in response to identified vulnerabilities associated with the Stylus framework, particularly concerning the potential for denial-of-service (DoS) attacks through hand-crafted WebAssembly (WASM) programs.
The emergency action allows existing Stylus contracts to continue functioning while preventing the activation of new ones. This measure is seen as a precautionary step to maintain network integrity ahead of upcoming updates to ArbOS, Arbitrum's operating software.
The upgrade also introduced a new safety mechanism for Arbitrum One's dispute resolution system, known as BoLD. This mechanism is designed to delay unconfirmed withdrawals in the event of conflicting proofs being accepted during disputes.
While existing Stylus applications remain operational, developers looking to deploy new contracts will face delays as the Arbitrum Foundation collaborates with ArbitrumDAO to determine a timeline for resuming activations. The Council emphasized that no user funds are at risk due to the identified issues, which primarily affect the network's liveness rather than the safety of deposits.
FAQ
Why did Arbitrum suspend new Stylus activations?
Arbitrum suspended new Stylus activations due to identified vulnerabilities in the Stylus framework that could lead to denial-of-service (DoS) attacks through specially crafted WebAssembly (WASM) programs.
What is the impact of the suspension on existing Stylus contracts?
Existing Stylus contracts will continue to function as normal, but no new contracts can be activated until further notice.
What measures are being taken to address the security concerns?
An emergency upgrade was implemented to halt new activations, and a new safety mechanism for dispute resolution, known as BoLD, was introduced to delay unconfirmed withdrawals during disputes.
Will user funds be at risk due to these vulnerabilities?
No user funds are at risk as the identified issues primarily affect the network's liveness, not the safety of deposits.
What is the next step for developers wanting to deploy new Stylus contracts?
Developers will face delays in deploying new contracts while the Arbitrum Foundation collaborates with ArbitrumDAO to establish a timeline for resuming activations.