Bitcoin Red Team, an all-volunteer security group, said it found nearly 5,000 potential issues during a rapid AI-assisted audit of Bitcoin ecosystem projects. The team consists of 16 volunteers, and its ranks include AnchorWatch CEO Rob Hamilton as well as bitcoin developer Calle. Calle explained that the group pairs AI tools with manual review to scan Bitcoin-related open-source codebases for vulnerabilities. That workflow produced an average of about one critical vulnerability per person per hour. Within 29.8 hours of the audit beginning, the team had reviewed 390 projects and logged 4,962 potential issues. Of those, 720 were classified as high severity or critical, and 21.4% of the findings have been reproduced so far. The remaining 78.6% have not yet been reproduced. The audit started a few days after the Coldcard hardware wallet incident, a security event in which more than $100 million in bitcoin was stolen. The numbers were relayed by Calle in his disclosure.
A volunteer-run bitcoin security group, Bitcoin Red Team, says it uncovered nearly 5,000 potential issues during a fast AI-assisted review of projects across the Bitcoin ecosystem. The group is made up of 16 volunteers, including AnchorWatch CEO Rob Hamilton and bitcoin developer Calle.
29.8 hours, 390 projects, 4,962 findings
Calle said the team combined AI tools with manual review to scan bitcoin-related open-source codebases for vulnerabilities, averaging about one critical bug per person per hour.
Within 29.8 hours of launching the effort, the team had identified 4,962 potential issues across 390 projects, according to Calle. As many as 720 of those were rated high severity or critical, and 21.4% of the findings are reproducible so far.
Review follows Coldcard wallet incident
The security review started a few days after the Coldcard hardware wallet incident, in which more than $100 million in bitcoin was stolen.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
