Add Huaifeng from Protocol Security

[0xMushow]

Name / Identifier

Huaifeng Zhang / @jzh18

Team / Project

EF Protocol Security

Start date of relevant projects

January 5, 2026

Proposed weight

Full (1.0)

Summary of their work / eligibility

Huaifeng joined EF Protocol Security in January 2026 and has contributed to the team’s AI-assisted security research efforts, focusing on Ethereum client auditing, vulnerability triage, and benchmarking.

He developed and maintained an AI-assisted EIP/client auditing workflow that maps EIP requirements to client implementations and detects potential deviations. He used it to scan multiple EIPs, with several reported issues acknowledged by client teams.

He also worked on benchmarking infrastructure for AI security tools, including datasets from historical Ethereum bug bounty reports, triage and finding evaluation tasks, a leaderboard UI, and a fault-injected client benchmark. In addition, he contributed to agent-swarm by improving evaluation scripts, adding model configuration support, and running comparative evaluations across multiple models.

Overall, his work has helped the team apply AI tooling more rigorously to Ethereum client security and strengthen Ethereum security.

Links to some work

• EIP / client auditing tooling

  • https://github.com/protocol-security/llm-eip-audit
  • https://github.com/protocol-security/glamsterdam-lea-scan

• Benchmarking and evaluation

  • https://github.com/protocol-security/ef-vulns-bench
  • https://github.com/protocol-security/ef-vulns-builder
  • https://github.com/protocol-security/lighthouse-bench-eval
  • https://github.com/protocol-security/previous-patterns/pull/11
  • https://jzh18.github.io/ef-vulns-leaderboard/task.html?task=T3
  • https://notes.ethereum.org/@3u8LrqUVROeNSewgBgp7Cg/ByfI-3LMGe

• Internal AI vulnerability tooling

  • Contribution to agent-swarm: PRs

• Vulnerability reports / findings

  • https://github.com/ethereum-bounty/teku/issues/2
  • GLOAS spec deviation PENDING head causes proposer to miss its slot sigp/lighthouse#9544
  • https://github.com/ethereum-bounty/prysm/issues/22 => Re-verify builder deposit signatures when in-batch index reuse evicts a pubkey OffchainLabs/prysm#17111
  • https://notes.ethereum.org/@3u8LrqUVROeNSewgBgp7Cg/SJZu-WsDZl