Bitcoin Red Team Says AI Is Finding Critical Exploits Across Core Projects

A volunteer safety initiative says it used frontier AI fashions to scan 150 Bitcoin repositories and located greater than a dozen vulnerabilities as builders more and more use synthetic intelligence to audit blockchains.

In a submit on X earlier this week, AnchorWatch CEO Rob Hamilton mentioned the group has spent about $20,000 on AI companies whereas constructing a “Bitcoin pink staff” platform.



“We’ve been working across the clock, with ~$20,000 of spend up thus far throughout totally different companies,” he wrote. “Funding is secured, I recognize all of the gestures for donations however it’s not obligatory. The invoice is taken care of.”

A pink staff refers to cybersecurity professionals who take a look at software program from an attacker’s perspective, probing for vulnerabilities earlier than they are often exploited.

In response to Hamilton, the Bitcoin pink staff makes use of Kimi K3 alongside OpenAI’s GPT Sol, Anthropic’s Claude Fable and Opus fashions, and Z.ai’s GLM 5.2 to determine vulnerabilities and generate supporting documentation.

“We even have been linked with OpenAI for some assist so I may handle getting the Cyber Harness working as properly,” he wrote. “It is a way more costly scan, however properly price it for load-bearing parts of the Bitcoin ecosystem and has already yielded good outcomes.”

Pseudonymous Bitcoin developer Calle mentioned the initiative has constructed a number of AI-powered assessment techniques focusing on wallets, cryptographic libraries, infrastructure, and different Bitcoin initiatives.

“We’re averaging on the order of 1 crucial exploit per hour per individual,” Calle wrote on X. “We have reported crucial vulnerabilities to a number of initiatives within the final 12 hours. Fortunately, this can be a very costly train. We’re burning by means of $10,000 per day.”

The staff didn’t disclose which initiatives have been affected or present particulars of the vulnerabilities.

The announcement comes as AI is taking part in a rising function find safety flaws throughout the crypto business. Earlier this yr, researchers utilizing Anthropic’s Claude Opus 4.8 uncovered a four-year-old flaw in Zcash that might have allowed attackers to create limitless counterfeit ZEC. In August, Coinkite mentioned it believes attackers used AI to determine the Coldcard pockets vulnerability, whereas Bitcoin bridge Boltz suspended its swap service after saying attackers have been utilizing AI to determine vulnerabilities quicker than its staff may patch them.

Frequently Asked Questions