Ethereum Foundation Deploys Multi-pronged Approach to Build Comprehensive Security Defenses
The Ethereum Foundation (EF), a core contributor to the Ethereum ecosystem and a funder of public goods, continues to invest significant resources in comprehensively strengthening the security of the Ethereum network through a series of proactive initiatives and professional team building. These efforts span multiple dimensions, from fundamental protocol research to addressing future quantum threats and leveraging AI for security detection, aiming to provide robust and reliable underlying protection for the growing Ethereum economy.
Addressing Future Threats: Formation of the Post-Quantum Security Team
To counter potential threats that future quantum computing may pose to existing cryptographic algorithms, the Ethereum Foundation established a dedicated Post-Quantum (PQ) Security Team in January 2026. Led by Thomas Coratger, the team received a special grant of $2 million. Its core mission is to develop cryptographic solutions resistant to quantum computer attacks, with progress publicly tracked on pq.ethereum.org. Ethereum co-founder Vitalik Buterin has emphasized the critical role of quantum security in Ethereum's long-term development, predicting that quantum threats could emerge by 2028, highlighting the strategic importance of the team's work. The team aims to upgrade Ethereum's cryptographic technology while ensuring zero loss of user funds and zero network downtime.
AI Agents Empower Vulnerability Detection and Classification
Since July 2026, the Ethereum Foundation's Protocol Security Research team has begun deploying coordinated AI agents to enhance its vulnerability discovery and classification capabilities. These AI agents are designed to scan protocol codebases and development networks to identify potential vulnerabilities and prioritize their classification. They aim to expand security coverage, shorten feedback cycles, and collaborate with human auditors rather than replace manual review. Notably, AI agents have successfully discovered and fixed a critical vulnerability (CVE-2026-34219) in the gossipsub libp2p protocol, demonstrating their effectiveness in practical application.
Protocol Security Research and Ecosystem Initiatives
The Ethereum Foundation has a Protocol Security Research team of approximately 10 people, focused on securing the network and its critical components through coordination, code review, advanced tooling, and practical simulations. This team is also responsible for managing the bug bounty program and network monitoring. In addition, the Foundation has launched several ecosystem-wide security initiatives:
- Trillion Dollar Security Initiative: Launched in May 2025, this initiative aims to enhance the security of the entire Ethereum ecosystem to support a trillion-dollar Ethereum economy. Related activities include the "Trillion Dollar Security Day" in February 2026 and funding for the WEBCAT project to address front-end validation vulnerabilities in Ethereum wallets and applications.
- Ethereum Security Audit Subsidy Program: Launched in April 2026, this is a $1 million grant program in collaboration with Areta, Chainlink, and Nethermind. It provides eligible Ethereum projects with up to 30% subsidies for audit fees and offers services from over 20 security audit firms, including well-known institutions such as Blocksec, Cetora, Hacken, Immunefi, and Quantstamp.
- ETH Rangers Program: In late 2024, the Ethereum Foundation partnered with Secureum, The Red Guild, and Security Alliance (SEAL) to launch this program, providing stipends to individuals working on public security in the Ethereum ecosystem.
Post-Merge Security and Continuous Protocol Hardening
Ethereum completed its "Merge" upgrade from Proof-of-Work (PoW) to Proof-of-Stake (PoS) in September 2022. Despite critics' concerns about decentralization and potential new attack vectors, the Ethereum Foundation believes that an active development team is a key advantage in addressing emerging security issues. The Foundation continues to harden the protocol, including recent upgrades like "enshrined Proposer-Builder Separation" (ePBS) and inclusion lists, and constantly improves network resilience by simplifying the protocol to narrow the potential attack surface.
