---
title: "The triage is the product: running AI agents against Ethereum's protocol code"
url: https://daily.dev/posts/the-triage-is-the-product-running-ai-agents-against-ethereum-s-protocol-code-l3gshzhns
source_url: https://blog.ethereum.org/en/2026/07/09/triage-is-the-product
type: article
source: "Ethereum"
published: 2026-07-09T15:46:22.741Z
updated: 2026-07-09T16:06:00.899Z
tags: ["security", "ai-agents", "ethereum"]
reading_time: 10
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# The triage is the product: running AI agents against Ethereum's protocol code

**[Ethereum](https://daily.dev/sources/ethereum)** · 10 min read · 0 upvotes · 0 comments

## Summary

The Ethereum Foundation's Protocol Security team shares their methodology for running coordinated AI agents against Ethereum protocol code to find security vulnerabilities. The key insight is that finding bugs is the easy part — the real challenge is triage: distinguishing genuine vulnerabilities from false positives. The team runs many agents in parallel coordinating through a shared repository, requiring every candidate to have a self-contained reproducer that runs against real code before it counts as a finding. Common false positive patterns include panics only in debug builds, reproducers using unreachable internal states, and trivially-true formal proofs. The post outlines agent strengths (reading spec and code together, drafting reproducers) versus weaknesses (unreachable call chains, inflated severity, multi-step sequence bugs). A real CVE was found: a remotely-triggerable panic in libp2p's gossipsub (CVE-2026-34219). The conclusion is that AI agents moved the bottleneck from hypothesis generation to judgment at scale, and that human triage remains the critical product.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://blog.ethereum.org/en/2026/07/09/triage-is-the-product>

## Similar posts on daily.dev

- [Triaging the AI Horde](https://daily.dev/posts/triaging-the-ai-horde-vnpsgvlgt) · Adventures in Nodeland · 12 upvotes · 4 comments
- [The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know](https://daily.dev/posts/the-ai-driven-shift-in-vulnerability-discovery-what-maintainers-and-bug-finders-need-to-know-ymcyvecon) · CNCF · 0 upvotes · 0 comments
- [AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent](https://daily.dev/posts/ai-supported-vulnerability-triage-with-the-github-security-lab-taskflow-agent-20yl6iwvm) · GitHub Blog · 0 upvotes · 0 comments
- [AI vulnerability triage: Bug bounty reports at $2 each — Elastic Security Labs](https://daily.dev/posts/ai-vulnerability-triage-bug-bounty-reports-at-2-each-elastic-security-labs-lye4oglyi) · Elastic Security Labs · 1 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#ethereum](https://daily.dev/tags/ethereum)

[View this post on daily.dev](https://daily.dev/posts/the-triage-is-the-product-running-ai-agents-against-ethereum-s-protocol-code-l3gshzhns)