The Shanghai upgrade marks a pivotal milestone in Ethereum’s evolution—finally enabling staking withdrawals and completing the validator lifecycle that began with the launch of the consensus layer in December 2020. For the first time since inception, validators can now access their accumulated rewards and even withdraw their principal stake. This article breaks down how withdrawals work, the mechanics behind them, and what users need to know to securely manage their staked ETH.
The Evolution of Ethereum’s Architecture
When Ethereum’s consensus layer (commonly known as the Beacon Chain) launched in December 2020, it operated independently from the execution layer. While validators could earn staking rewards, those funds were effectively locked—there was no way to transfer ETH from the consensus layer back to the execution layer where wallets and applications reside.
This changed with the Merge in September 2022, which unified the execution and consensus layers. Post-Merge, the execution layer became a subset of consensus-layer blocks, enabling data flow between both systems. This integration laid the technical foundation for future upgrades like Shanghai, which introduces full bidirectional communication—including the ability to withdraw staked ETH.
👉 Learn how staking works after major Ethereum upgrades
What Do Validators Do?
Since the Beacon Chain’s genesis, validators have been securing the network by proposing and attesting to blocks. Each validator must deposit 32 ETH to activate, and in return, they earn rewards based on protocol-defined incentives. These rewards are recorded on the consensus layer and reflect performance, uptime, and network conditions.
At launch, only about 20,000 validators were active. Today, over 520,000 validators contribute to Ethereum’s security—collectively earning more than 1 million ETH in staking rewards since 2020. However, until now, these rewards remained inaccessible.
While block proposers also receive transaction fees (paid directly on the execution layer), this article focuses on consensus-layer rewards now made spendable through withdrawals.
How Withdrawals Work: A Technical Overview
The Shanghai upgrade introduces a mechanism to transfer ETH from the consensus layer to user-controlled execution-layer addresses. Every execution block includes up to 16 withdrawal operations, each containing:
- Withdrawal index: A unique identifier
- Validator index: The source validator on the consensus layer
- Address: Destination wallet on the execution layer
- Amount: ETH amount in Gwei (1 ETH = 1 billion Gwei)
Unlike transactions, withdrawals consume no gas and do not trigger smart contract logic. Once processed, the recipient’s balance increases instantly—no further action required.
Where Does the Withdrawn ETH Come From?
A common misconception is that withdrawn ETH comes from the original 32 ETH deposits. In reality, withdrawals are funded by newly issued ETH, generated by the protocol as part of staking rewards. This design ensures withdrawals remain sustainable even if total withdrawn amounts exceed initial deposits.
Importantly, the deposit contract itself has no withdrawal functionality—it only accepts incoming funds. Therefore, all outgoing ETH post-Shanghai originates from consensus-layer accounting updates, not direct transfers from locked deposits.
The Withdrawal Clock: Processing Logic Explained
Under the hood, the consensus layer maintains a list of validators with key attributes:
- Index: Unique identifier
- State: Active, exited, or withdrawable
- Balance: Current stake in Gwei
- Withdrawal credentials: Control where funds go
Two types of withdrawal credentials exist:
- Type 0 (BLS-derived): Legacy format; does not support withdrawals to execution addresses
- Type 1 (execution-address-based): Required for withdrawals
To process withdrawals efficiently, Ethereum uses a sequential “clock” mechanism starting at validator index 0 and scanning forward. For each eligible validator, one of two rules applies:
- If the validator is active with Type 1 credentials and has >32 ETH, excess balance above 32 ETH is withdrawn.
- If the validator is in a withdrawable state with Type 1 credentials, the entire remaining balance is withdrawn.
The system processes up to 16 eligible validators per block. With ~7,200 blocks per day, a full cycle takes approximately 4.5 days under current network size—though this varies based on eligibility rates.
👉 Explore secure ways to manage your staking rewards
Upgrading Withdrawal Credentials: A Step-by-Step Guide
Most validators today use Type 0 credentials and must upgrade to Type 1 before accessing withdrawals. This one-time change requires signing a credential update operation containing:
- Validator index
- Current BLS public key (from Type 0)
- New execution address (for Type 1)
- Signature using the BLS private key
Once processed, the validator permanently switches to Type 1 credentials—no reversal possible.
Step 1: Choose Your Execution Address
Select an Ethereum address you fully control. Consider:
- Single address for all validators: Simpler management, lower gas costs when interacting later
- Unique addresses per validator: Enhanced privacy and security if validators are independently operated
Ensure you securely back up the private key or seed phrase before proceeding—this step is irreversible.
Step 2: Create the Operation Offline
For maximum security, generate and sign the credential update on an air-gapped device. Tools like ethdo allow offline creation without exposing sensitive keys to internet-connected machines.
Step 3: Broadcast After Shanghai Activation
Submit the signed operation to a consensus node after the upgrade. Operations submitted pre-upgrade are queued and broadcast automatically once Shanghai goes live.
Nodes supporting Shanghai are expected well in advance of mainnet activation, ensuring smooth rollout.
Secure Credential Updates: The Online/Offline Workflow
To balance security and functionality, follow a hybrid workflow:
- Fetch chain data online: Retrieve validator statuses and network parameters via a connected node.
- Transfer data offline: Use USB drives to move non-sensitive data to an isolated machine.
- Sign operations offline: Input withdrawal credentials and sign using private keys—never exposed online.
- Transfer signed ops back online: Move signed operations to a connected device.
- Broadcast to the network: Submit operations to your consensus client for inclusion in blocks.
This method minimizes exposure of critical secrets while enabling full participation in the upgrade.
Frequently Asked Questions
Q: Can I withdraw my original 32 ETH deposit?
A: Yes—but only after exiting your validator role. Partial withdrawals of excess rewards (>32 ETH) are available immediately to active validators with Type 1 credentials.
Q: How long does it take to process a withdrawal?
A: Typically within hours, but may take up to a few days depending on queue length and network load.
Q: Is there a fee to withdraw staked ETH?
A: No gas is charged for withdrawal operations themselves, though any subsequent transfers or trades will incur standard network fees.
Q: What happens if I don’t update my withdrawal credentials?
A: Your funds remain safe but inaccessible. You’ll need to update credentials later to claim rewards or exit.
Q: Can I change my withdrawal address after setting Type 1 credentials?
A: No—this is a one-time configuration. Future upgrades may allow changes, but none are planned as of 2025.
Q: Are withdrawals instant?
A: Funds appear in your wallet as soon as the block is executed—but finality depends on standard Ethereum confirmation times (~12 seconds per block).
Final Thoughts
The Shanghai upgrade fulfills a long-standing promise to Ethereum stakers: full control over their assets. By enabling withdrawals and credential upgrades, Ethereum completes the validator lifecycle—allowing users to join, earn, and now exit securely.
With over half a million validators contributing to network security, this upgrade not only enhances user autonomy but also strengthens trust in Ethereum’s long-term viability as a decentralized, scalable platform.
As adoption grows and tooling improves, managing staked assets will become increasingly seamless—for both solo stakers and institutional participants.