Bitcoin2026-08-07 11:17:54AI-led audit flags 85 critical bugs across 390 Bitcoin-related projectsAn AI-assisted security review conducted by a 16-member group of Bitcoin developers has identified 85 critical vulnerabilities across 390 Bitcoin-related projects, according to Blockcast. The effort also logged 4,962 potential risks in total, including 635 high-risk issues, after examining Bitcoin wallets, cryptographic libraries, and other infrastructure. Calle, the pseudonymous developer behind the e-cash protocol Cashu who coordinated the effort, said the findings showed the situation was "very bad." Rob Hamilton, the developer who built the automated auditing system, said the main obstacle is no longer finding flaws but securely and accurately reporting sensitive vulnerability details to the right project maintainers. He described the current system as a "1.0 version" despite its ability to uncover serious defects. The report also pointed to the recent Coldcard hack as a reminder of how dangerous long-standing software flaws can be. The incident, which broke out on July 30, has led to $114 million in user assets being stolen. According to the report, the breach traced back to a firmware vulnerability that had existed since 2021, showing that even funds kept in cold wallets can remain exposed if the underlying software is flawed.1810
Bitcoin2026-08-05 20:33:06Bitcoin Red Team says it found 85 critical flaws across 390 open-source repos after the Coldcard breachA Bitcoin industry security push has accelerated after the recent Coldcard hardware wallet vulnerability, which Bitcoin Magazine said was exploited for more than $100 million. According to the report, a group referred to as the Bitcoin Red Team, led by software engineer Calle and Anchorwatch CEO Rob Hamilton, has spent more than $40,000 in AI tokens to audit more than 390 Bitcoin-related open-source repositories. In an update cited by the publication, Calle said the effort had logged 4,962 findings across 390 projects after 27.5 hours of work, including 85 critical issues and 635 high-severity problems. The team is using models including Kimi K3, GPT Sol, Fable, Opus, and GLM5.2. Bitcoin Magazine said access to OpenAI and Anthropic-related tooling improved as the initiative gained traction following last week’s Coldcard incident. The report also said OpenSats, a 501(c)(3) nonprofit focused on Bitcoin open-source development, has covered the project’s expenses. Hamilton said the team built a custom harness, at one point made up of 171,599 lines of code, to identify, test, reproduce, and document vulnerabilities in critical Bitcoin software libraries and high-load-bearing code. He added that the Red Team plans to open-source the harness so Bitcoin companies can test their own closed-source code.2180
