A volunteer group of 16 Bitcoin developers reported 4,962 security findings across 390 projects in just over a day, including 85 critical bugs and 635 high-severity issues. The effort shows how quickly AI tools are changing software security work across the Bitcoin ecosystem.
A volunteer group of 16 Bitcoin developers reported 4,962 security findings across 390 projects in just over a day, including 85 critical bugs and 635 high-severity issues. The effort shows how quickly AI tools are changing software security work across the Bitcoin ecosystem.
The development matters because Bitcoin’s software ecosystem relies on many independent projects, and maintainers are now being hit with a volume of bug reports that is difficult to process. Calle, the pseudonymous developer behind the Cashu ecash protocol, said many critical reports had been quickly verified by project owners, but also described significant disorder as teams work through the findings.
A volunteer team of Bitcoin developers has flagged 85 critical vulnerabilities across 390 Bitcoin-related projects during a coordinated AI-assisted security audit, according to CoinDesk. The group, made up of 16 developers, filed 4,962 findings in a little over 24 hours, including 635 high-severity issues, after directing AI models at wallets, cryptographic libraries and infrastructure.
The development matters because Bitcoin’s software ecosystem relies on many independent projects, and maintainers are now being hit with a volume of bug reports that is difficult to process. Calle, the pseudonymous developer behind the Cashu ecash protocol, said many critical reports had been quickly verified by project owners, but also described significant disorder as teams work through the findings.
The audit also highlights a changing security landscape for crypto. AI tools are helping developers identify bugs faster, but the same capability can also be used by attackers. CoinDesk noted that the group is publishing findings quickly because maintainers can use similar tools to verify them and because others may independently discover the same weaknesses.
Coordination appears to be one of the main challenges. Rob Hamilton, who is building the automated setup used by the group, said the bottleneck is not finding bugs but getting reports to the correct maintainers. He described the current system as an early version despite its ability to uncover critical issues.
The findings arrive after another security incident involving Coldcard-related wallet sweeps that began July 30. CoinDesk reported those sweeps took as much as $114 million from wallets whose seeds were generated by faulty firmware, underscoring the risk when dormant flaws are discovered and exploited before they are fixed.
Keep exploring
Bitcoin remains under scrutiny as traders watch whether it can move beyond a bearish death-cross setup. Zcash, meanwhile, is drawing renewed attention after a golden-cross signal and a recovery narrative following its mid-June crash.
Read
Federal prosecutors say the founder of NFT marketplace Few and Far raised $10 million from investors for a Web3 platform, then diverted the money to personal spending. The alleged uses included gambling, trading, and a DJ hobby.
Read
Marex has made an undisclosed investment in Digital Prime to support the development of Tokenet, a digital asset lending platform. The move reflects continued interest in crypto infrastructure built for institutional market participants.
Read