🗳 Taiko DAO: Security Council Proposal #24 is up. TAIKO holders have a ~10 days remaining window to veto it.
WHAT IT DOES
It upgrades four proxies — the Bridge and the ERC20Vault on both Ethereum and Taiko — and registers a new resolver on L2. No new contract code ships with it: everything in it was already written, reviewed and merged. The proposal only points the live proxies at it.
1. Bridge ETH deliveries stop running out of gas.
The gas the bridge forwards when it sends ETH to a recipient goes from 35,000 to 135,000. Under EIP-8037 (Glamsterdam), writing one fresh storage slot costs 97,920 gas out of the recipient's own budget — so a smart-contract wallet that does any bookkeeping when it receives ETH would fail. And because a failed ETH send reverts the whole message, those inbound messages would become permanently unclaimable. This raises the cap before that can happen.
2. One-signature token bridging.
The ERC20 vaults gain sendTokenWithPermit (EIP-2612) and sendTokenWithPermit2 (Uniswap's Permit2, which works for any ERC20) — no separate approve transaction. Both are opt-in additions; sendToken, deliveries and recalls are unchanged.
3. A real bug gets fixed.
Right now, the first time a token whose home chain is Taiko is bridged to Ethereum, the delivery can't complete: the L1 registry still points at a July 2024 bridged-token implementation that the vault — upgraded in June — can no longer initialise. The message parks as RETRIABLE rather than failing outright, so the funds stay safe in the bridge, but the tokens don't arrive. This proposal registers a working implementation, and a message parked this way can then be retried through.
Not touched: storage layouts, ownership, initializers, the NFT vaults, existing bridged tokens, or any other network.
PLEASE REVIEW IT
This upgrades contracts that custody bridged funds. Don't take our word for it. The full runbook — every address, the storage-layout diff, the on-chain verification commands, and a fork rehearsal against live mainnet state — is public:
http://github.com/taikoxyz/taiko-mono/blob/main/packages/protocol/script/layer1/proposals/Proposal0024.md
If you find a problem, email security@taiko.xyz.
And if you hold TAIKO and conclude this isn't in your interest, you don't need anyone's permission — veto it. That's what the window is for.
👉 http://dao.taiko.xyz/plugins/taiko-council/#/proposals/24