VULNERABILITIES FOUND IN GLAMSTERDAM, AGENTS CAME TO THE RESCUE

Summary from the TLDR Crypto newsletter

ChainSecurity flagged vulnerabilities in EIP-8037/8038, two state-pricing EIPs central to Glamsterdam's planned gas limit increase from 60M to 200M, with at least 13 major DeFi protocols identified as affected. The mechanism: EIP-8037's gas refill when storage slots are freed breaks the 1/64 gas guarantee in nested contract calls, enabling attackers to trigger outer-contract error handlers that lacked the gas to execute under the prior pricing model. Researchers from the Ethereum Foundation and Ethlabs each deployed AI agents overnight to scan for vulnerable contracts, then merged their efforts into a shared GitHub coordination repo where agents claim tasks via issue comments, deposit findings in structured directories, and produce consolidated memos without human intermediation. Core devs at the ACD paused any Glamsterdam launch date pending full impact analysis. The same agent-scanning framework is now running against EIP-8198 (Quick Slots, 12s to 10s slot time) ahead of Hegotá.