- The Ethereum Foundation has deployed specialized AI agents to actively search its own infrastructure for vulnerabilities before attackers can exploit them.
- Researchers confirmed the AI systems uncovered real software bugs, including a flaw affecting Ethereum’s networking layer that has already been patched.
- While AI dramatically speeds up vulnerability discovery, human experts still play the critical role of separating genuine threats from false alarms.
The Ethereum Foundation is taking an unusual approach to cybersecurity—and it’s putting artificial intelligence on the front lines.
Rather than waiting for hackers to discover weaknesses, the Foundation has built coordinated swarms of AI agents that actively attack Ethereum’s own software, searching for vulnerabilities before malicious actors ever get the chance.
So far, the strategy appears to be paying off.
According to a new blog post from the Foundation’s Protocol Security team, the AI systems have already uncovered genuine security flaws across cryptographic software, protocol implementations, and smart contracts that underpin the Ethereum network.
“We’ve been running coordinated AI agents against the kinds of systems the network depends on,” the researchers explained. “The agents found real bugs.”
AI Agents Are Performing Ethereum’s Red Team Exercises
The project is built around a well-known cybersecurity practice called red teaming.
Instead of waiting for outside attackers, organizations deliberately try to compromise their own systems using internal security researchers. While the “red team” looks for ways to break things, the “blue team” focuses on defending the network and fixing weaknesses before they become real threats.
Traditionally, that work has relied heavily on human experts manually reviewing thousands—or even millions—of lines of code.
AI is changing that equation.
Modern AI agents can inspect enormous codebases, generate possible attack paths, attempt exploits, and produce detailed vulnerability reports in a fraction of the time human analysts would typically require.
One of the bugs already discovered involved libp2p’s Gossipsub implementation, a key component of Ethereum’s peer-to-peer networking layer used by consensus clients.
The vulnerability allowed a remotely triggered panic within the software. It has since been patched and publicly disclosed as CVE-2026-34219.
Finding Bugs Wasn’t the Hard Part
Perhaps the biggest surprise wasn’t that AI successfully located vulnerabilities.
It was everything that came afterward.
According to the research team, discovering potential issues turned out to be relatively easy. Determining which findings actually represented real, exploitable bugs proved far more difficult.
“The surprise was how little of the work went into finding them,” the researchers wrote. “And how much went into telling the real bugs from the ones that just looked real.”
That’s because AI models can generate extremely convincing reports—even when they’re completely wrong.
Security teams still have to eliminate duplicate reports, investigate false positives, and determine whether an apparent vulnerability can actually be exploited under real-world conditions.
Each AI Agent Has a Specialized Job
Rather than relying on a single large AI model, Ethereum’s system divides responsibilities among multiple specialized agents.
Some focus on reconnaissance, identifying possible attack surfaces throughout the codebase.
Others search for vulnerabilities directly, while separate agents attempt to reproduce suspected failures or verify whether proposed exploits work against production software.
Another group fills investigative gaps, validating findings before they’re handed over to human reviewers.
Researchers say every potential vulnerability must ultimately include reproducible evidence.
A claim isn’t accepted simply because an AI model sounds confident.
Instead, each report needs a self-contained proof demonstrating that the flaw can be reproduced against the actual software by someone who wasn’t involved in generating the report.
If the exploit doesn’t run independently, it doesn’t count.
AI Is Becoming a Powerful Security Tool
Ethereum isn’t alone in exploring AI-assisted security research.
Earlier this year, Anthropic demonstrated the technology’s potential when a preview version of Claude Mythos identified 271 vulnerabilities inside Mozilla’s Firefox browser.
Researchers increasingly compare AI agents to fuzzers—automated tools that repeatedly feed unexpected inputs into software to uncover hidden bugs.
But AI offers something fuzzers typically can’t.
Instead of simply crashing programs, AI agents can explain why a vulnerability exists, estimate its potential impact, and even generate proof-of-concept exploits for researchers to evaluate.
That added context can dramatically speed up the investigation process, even if every result still requires careful verification.
Blockchain Security Is Already Benefiting
The blockchain industry has already seen examples of AI uncovering vulnerabilities that humans overlooked.
In May, security researcher Taylor Hornby used Anthropic’s Claude Opus 4.8 during an audit of Zcash’s Orchard privacy pool.
The AI-assisted review uncovered a critical flaw that had quietly existed for nearly four years. Under the right circumstances, the bug could have allowed attackers to create counterfeit ZEC without leaving an obvious on-chain trail.
A network upgrade remains under development to further strengthen confidence in Zcash’s monetary supply.
Ethereum’s latest initiative builds on that momentum by bringing AI-powered vulnerability research directly inside the Foundation itself.
Human Judgment Still Matters Most
Despite the impressive capabilities of AI, Ethereum’s researchers made one point repeatedly throughout their report.
Artificial intelligence hasn’t replaced security researchers.
It has simply changed where they spend their time.
Instead of manually searching every corner of massive codebases, experts now spend more effort verifying AI-generated findings, filtering out false positives, and confirming which discoveries actually matter.
The Foundation believes that’s a worthwhile trade-off.
AI dramatically expands the amount of software researchers can examine, but human judgment remains the final safeguard.
As the team put it, AI may produce countless confident-sounding claims—but determining which ones represent real security risks is still the most valuable part of the entire process.
