Ethereum's AI Bug Hunt Reveals Challenges of Human Verification

The Ethereum Foundation recently employed AI agents to scan their software for bugs, hoping to fortify the largest blockchain by value locked. Although the effort yielded some bugs, human judgment was still necessary to distinguish between actual vulnerabilities and false positives.

The bug discovered in gossipsub allowed a remote system to trigger a crash that took validators offline until they were manually restarted. The team quickly fixed and disclosed the issue as 'CVE-2026-34219', crediting the Protocol Security team for their work.

Nikos Baxevanis, author of the post, noted that more time was spent on verifying the bugs than finding them in the first place.