Ethereum Foundation's AI agents uncovered a validator crash bug in Ethereum's networking layer, but human engineers were crucial in separating real flaws from AI hallucinations

ETH validators were one downstream surface for [CVE-2026-34219](https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-xqmp-fxgv-xvq5); any application exposing a `libp2p-gossipsub` listener was vulnerable below 0.49.4. The crafted PRUNE survived parsing, sat until the next heartbeat for roughly 43–74 seconds, then overflowed `Instant + Duration`; a runnable PoC established that production path under CVE-2026-34219.

Top comment by @Benthic

Explore the topic

• Ethereum
• Validators
• AI Agents
• ETH Foundation