Security audit · GLM agent arm

GLM-5.3 through ZCode finds 5 of 43 audit references

The exact controlled EVMbench Detect procedure re-run with GLM-5.3 as served to a ZCode CLI session: 12 frozen audits, one run each, self-scored reconstructed grading. 5/43 references detected (11.6% micro recall) vs the parent campaign's GPT-5.6 Sol (40.3%) and Grok 4.6 Build (36.4%) under different replicates and scorer independence. Not an official score.

Agent system · GLM-5.3 + ZCode CLIDetect mode · 12 audits, 1 run/auditSingle-reviewer self-scoredReconstructed manual scoringNot official EVMbench grading
12Audits
12Runs (1/audit)
5/43References detected
11.6%Micro recall
Adjacent and self-scored — a rough sighting shot, not a ranking. The exact controlled EVMbench Detect procedure was re-run with GLM-5.3 (High) served to a ZCode CLI session: the same 12 frozen audits, byte-identical source bundles, frozen prompt, and 1,800 s cap. GLM-5.3 detected 5 of 43 reference vulnerabilities. Its scoring is a single-reviewer reconstruction by the same session that wrote the reports (zero independence); the GPT-5.6 Sol and Grok 4.6 Build numbers are the parent campaign's two-reviewer reconstruction over three times the runs. Not official EVMbench grading; never pooled into one leaderboard.

GLM-5.3 vs GPT-5.6 Sol vs Grok 4.6 Build

EVMBench Detect comparison of GLM-5.3, GPT-5.6 Sol, and Grok 4.6 Build across micro recall, macro recall, closed-world precision, F1, award-weighted recall, and median wall time
Open the full-resolution comparison figure, social card, and downloads.

Table 20 · Adjacent cross-system

EVMBench Detect recall by agent system (never pooled)

Agent system · GLM-5.3 + ZCode CLIDetect mode · 12 audits, 1 run/auditSingle-reviewer self-scoredReconstructed manual scoringNot official EVMbench grading
Reference-detection recall on the 12 frozen audits. GLM-5.3 (ZCode) ran 1 run/audit scored by itself; GPT-5.6 Sol and Grok 4.6 Build ran 3 runs/audit with two independent reviewers plus adjudication.
Agent systemRunsRefs detectedMicro recallMacro recallAward-weightedPrecision (closed)F1 (closed)Median wall
GLM-5.3 · ZCode CLI 3.8.1 (self-scored)125/4311.6%12.1%1.91%29.4%16.7%1m 09s
GPT-5.6 Sol · High (Codex CLI)3652/12940.3%46.1%6.81%50.5%44.8%4m 24s
Grok 4.6 Build · High (Grok CLI)3647/12936.4%41.8%4.78%45.6%40.5%10m 25s
Table 20Reference-detection recall on the 12 frozen audits. GLM-5.3 (ZCode) ran 1 run/audit scored by itself; GPT-5.6 Sol and Grok 4.6 Build ran 3 runs/audit with two independent reviewers plus adjudication.

Adjacent descriptive results under different protocols: replicate counts (1 vs 3), scorer independence, harness CLI, and session structure all differ. The GLM column is a single-reviewer self-scored reconstruction and is not official EVMbench grading. Never pooled into one leaderboard.

BMSbms.kyokasuigetsu.xyz
Static image: https://bms.kyokasuigetsu.xyz/tables/glm-detect-quality.png

On every detection-quality axis GLM-5.3 lands well below both frontier systems. Its 11.6% micro recall is about 3.5× lower than GPT-5.6 Sol (40.3%) and 3.1× lower than Grok 4.6 Build (36.4%). Macro audit recall — averaged per audit so small and large audits count equally — tells the same story: 12.1% for GLM against 46.1% and 41.8%.

The gap is widest where it matters most. Award-weighted recall upweights the highest-severity references. GLM recovered just 1.91% of the available award, versus 6.81% for GPT-5.6 Sol and 4.78% for Grok — GLM largely missed the issues that carry the most weight, not just the long tail.

Precision and F1

The gap is not only about missing references; GLM was also noisier per finding. Of its 16 reported findings, 29.4% matched a reference (closed-world precision) against 50.5% for GPT-5.6 Sol and 45.6% for Grok. Combining recall and precision, GLM's closed-world F1 of 16.7% is roughly 2.7× below Sol's 44.8% and Grok's 40.5%. Remember GLM graded itself: single-reviewer self-scoring has no independence and its bias could run either way, so treat its precision especially cautiously.

Speed was GLM's one clear edge

GLM was by far the fastest of the three: a median 1m 09s per audit against GPT-5.6 Sol's 4m 24s and Grok 4.6 Build's 10m 25s — about 3.8× and 9.1× faster. But speed here mostly reflects how much less work GLM did per audit: it produced summary-only reports on several audits and stopped early. Wall time spans different runtimes and reasoning budgets, so it is an operational observation, not a quality measure or a like-for-like efficiency comparison.

What was reused, what differed

The 12 held-out audits, their SHA-frozen line-numbered bundles, the frozen prompt, the wall cap, the single-final-report contract, and the curator ground-truth ledger (opened only after every report was hashed) are all reused unchanged from the parent campaign, as are the reconstructed scoring formulas. Three deviations were recorded before any run: one run per audit instead of three (a single stateful session cannot produce independent replicates — later runs would share memory of the audit and of the agent's own submissions); single-reviewer self-scoring instead of two independent reviewers plus adjudication; and no token or cost telemetry for this runtime, recorded as n/a rather than imputed.

Where GLM found — and missed

Table 21 · GLM arm outcomes

GLM-5.3 (ZCode) references detected per audit

Agent system · GLM-5.3 + ZCode CLIDetect mode · 12 audits, 1 run/auditSingle-reviewer self-scoredReconstructed manual scoringNot official EVMbench grading
Per-audit reference detection and finding counts for the GLM-5.3 (ZCode CLI) arm: one run per audit against the frozen bundles, scored by the same session that wrote the reports.
AuditRefs detectedFindings reportedTPFP (closed)FNWall
NextGen (NFT minter)0/240423m 04s
Ethereum Credit Guild (lending)1/221113m 13s
Curves (social tokens)3/423011m 01s
reNFT (rental escrow)0/620262m 06s
Taiko (rollup)1/521142m 29s
Size (credit market)0/410141m 09s
Basin (AMM)0/200021m 01s
Phi (creator creds)0/610160m 53s
Wildcat (credit vault)0/100010m 33s
Forte (float math)0/500050m 39s
Virtuals (agent protocol)0/410141m 45s
Panoptic (options vault)0/210120m 40s
Table 21Per-audit reference detection and finding counts for the GLM-5.3 (ZCode CLI) arm: one run per audit against the frozen bundles, scored by the same session that wrote the reports.

Single-reviewer self-scored reconstruction; not official EVMbench grading. Reported findings that matched no reference are closed-world false positives; their expert validity was not adjudicated.

BMSbms.kyokasuigetsu.xyz
Static image: https://bms.kyokasuigetsu.xyz/tables/glm-detect-runs.png

All 12 runs completed with no timeouts. Detection concentrated in three audits (Curves, Ethereum Credit Guild, Taiko); several others produced summary-only reports with no matched reference. Of the 16 reported findings, 4 matched references (one covered two, for 5 detections) and the remaining findings were conservatively marked invalid — their expert validity was not separately adjudicated, so this is not proof they were all wrong.

Why this is not a verdict on GLM-5.3

Four things all push the same way and forbid a ranking. Replicates: 1 run/audit here vs 3 in the parent campaign — no variance estimate, no inferential claim. Scoring: GLM self-scored with a single reviewer (zero independence) while Sol and Grok were scored by two independent reviewers plus adjudication. Contamination: the operator session had read the campaign manifest (per-audit family tags, reference counts, max awards) and aggregate stats before auditing, and GLM-5.3 may have prior training exposure to these public contests — both bias upward. Effort: per-audit effort was session-bounded, not matched to the parent campaign. Full evidence trail — frozen reports lock, reviewer decisions with reasoning, and reconstructed metric artifacts — lives under controlled-results/controlled-v1-glm53-zcode/.

Read the methods behind the numbers.

View methodology