CoinDesk reported the flaw in gossipsub could have allowed remote disruption of validator nodes, while the exercise also showed AI still needs human review to separate real exploits from plausible false positives.
The Ethereum Foundation used multiple AI agents to help uncover a gossipsub vulnerability that could have allowed validator nodes to be remotely shut down, CoinDesk reported. The issue was patched as CVE-2026-34219. The finding highlights both the promise and the limits of AI-assisted security research: while the agents surfaced a real weakness in a core networking component, the report said human verification remained critical because the systems also generated convincing false bugs and attack code.