# The triage is the product: running AI agents against Ethereum's protocol code

DevFeed: [The triage is the product: running AI agents against Ethereum's protocol code](<https://devfeed.tech/articles/the-triage-is-the-product-running-ai-agents-against-ethereum-s-protocol-code-17227.md>)

Original publisher: [Read original article](<https://blog.ethereum.org/en/2026/07/09/triage-is-the-product>)

Author: Nikos Baxevanis

Published: 2026-07-09T00:00:00Z

Content type: article

Language: en

Sources: [Ethereum Foundation Blog](<https://devfeed.tech/sources/ethereum-foundation-blog.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Ethereum](<https://devfeed.tech/topics/ethereum.md>), [Security](<https://devfeed.tech/topics/security.md>), [AI research agents](<https://devfeed.tech/topics/ai-research-agents.md>), [Code](<https://devfeed.tech/topics/code.md>), [P2P](<https://devfeed.tech/topics/p2p.md>)

Tags: [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [cve](<https://devfeed.tech/tags/cve.md>), [ethereum](<https://devfeed.tech/tags/ethereum.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [research](<https://devfeed.tech/tags/research.md>), [research-development](<https://devfeed.tech/tags/research-development.md>), [security](<https://devfeed.tech/tags/security.md>), [security-research](<https://devfeed.tech/tags/security-research.md>)

## AI overview

The Ethereum Foundation's Protocol Security team describes how it uses coordinated AI agents to audit Ethereum protocol code. The article focuses on organizing agent work, validating candidate bugs, and reducing false positives. It reports a remotely triggerable panic in libp2p's gossipsub, disclosed as CVE-2026-34219.

## Source excerpt

Notes from the Ethereum Foundation's Protocol Security team on running coordinated AI agents against real protocol code, including how we organize the work, what holds up under scrutiny, and what client teams and security researchers can take from it. This post stands on its own; later posts will go deeper...