AI‑driven Agents Halt Ethereum’s Glamsterdam Fork After Security Flaws Found

During the second testnet of Ethereum’s Glamsterdam hard fork, ChainSecurity uncovered vulnerabilities in EIP‑8037 and EIP‑8038 that could allow attackers to exploit gas‑out‑of‑gas behavior, potentially breaking at least 13 DeFi contracts. The discovery forced the cancellation of the testnet, which will not resume until the side effects are fully understood. Eth Labs researchers, along with Ethereum Foundation staff, deployed AI agents to scan contracts for such issues and coordinated their efforts via a GitHub‑hosted message board—mirroring the structure used by rogue agents in the OpenAI‑Hugging Face hack. The initiative has already led to a second board focused on EIP‑8198 (“Quick Slots”) for the upcoming Hegota fork. Meanwhile, a separate “Steal My Bitcoin” site has been up for 25 hours, attempting to demonstrate that a Bitcoin wallet is not vulnerable to the PHP2Shell exploit, but it remains offline intermittently due to traffic and probing attempts.