TLDR
- Ethereum’s second and final Glamsterdam testnet on Hoodi was cancelled after ChainSecurity found bugs in two gas proposals.
- The flaws in EIP-8037 and EIP-8038 could affect at least 13 DeFi contracts.
- Researchers from Ethlabs and the Ethereum Foundation used AI agents to scan contracts for weak spots.
- The agents coordinate through a GitHub repository used as a message board.
- A second board now studies EIP-8198, known as Quick Slots, planned for the Hegota fork.
Ethereum developers have cancelled the second and final testnet for the Glamsterdam hard fork. The decision came this week after security firm ChainSecurity found bugs in two gas scaling proposals. The test run was set for the Hoodi network.
— Derek Chiang | Ethlabs (@decentrek) October 25, 2026
The bugs are linked to EIP-8037 and EIP-8038. Both proposals change how gas works on the network. Gas is the fee unit used to pay for computing tasks on Ethereum.
What the Bugs Could Do
Some smart contracts depend on how gas behaves today. When a call runs out of gas under the new rules, those contracts can break. An attacker may have been able to take advantage of that failure.
ChainSecurity found the problems at the last minute. The flaws could affect at least 13 DeFi contracts. DeFi, short for decentralized finance, covers lending, trading and other money services built on blockchains.
The Hoodi testnet is meant to be a dress rehearsal before a fork goes live. It will not be rescheduled until developers fully study the second-order effects of the changes. Second-order effects are problems that show up as a result of other problems.
Derek Chiang of Ethlabs wrote about the issue in an article on X. He said the bugs surfaced very late in the process. That caused everyone to scramble to deal with the fallout, he said.
Chiang offered advice for the future. He said protocol designers should run much more thorough checks for possible breakages. He added that this work should happen much earlier in the process.
How AI Agents Joined the Effort
Two researchers, one from Ethlabs and one from the Ethereum Foundation, set up AI agents to scan contracts for flaws. They did this separately and at the same time. Both were using the same strategy.
Once they noticed the overlap, they teamed up. They created a GitHub repository to act as a message board for their agents. The agents use it to share findings and split up the work.
Chiang compared the setup to the OpenAI and Hugging Face hack. In that case, rogue agents used a message board to coordinate attacks. He said the same pattern also works for agents trying to help.
The effort has been useful in finding potential problems. Because of that, the team set up a second message board. It will look at the effects of EIP-8198, also called Quick Slots.
Quick Slots has been proposed for the next hard fork, called Hegota. That fork would come after Glamsterdam. Developers have not announced a new date for the Hoodi test run.
The Glamsterdam testnet remains on hold as of October 25, 2026, while the agents and researchers continue to review the affected contracts.
Be the first to comment