Bitcoin developers flag 85 critical bugs in an "extremely bad" situation
A group of Bitcoin developers has identified 85 critical security vulnerabilities in various wallets and cryptographic libraries using AI-assisted auditing tools. While the discovery is significant, the developers report challenges in coordinating the disclosure and remediation process due to the high volume of findings.
Why it matters
The discovery of widespread critical vulnerabilities in Bitcoin infrastructure poses a significant risk to user assets and highlights the double-edged nature of using AI for automated security auditing.
Sixteen Bitcoin developers have filed 4,962 findings in a coordinated security audit, including 85 critical and 635 high-severity issues, according to Calle , the pseudonymous developer behind the Cashu ecash protocol.
The findings come from a coordinated audit run by developers pointing AI models at bitcoin wallets, cryptographic libraries and infrastructure.
"Situation is extremely bad," Calle noted .
We're ramping up. Much of our work is still manual (hand holding the AI) but our automated harnesses are getting better at the same time. So far, letting everyone use their own favorite review method has proven to be the most effective strategy. We're getting a lot of… pic.twitter.com/EoS6Z9ubpr
Most of the critical reports have been quickly verified by project owners, Calle said, and are being reproduced using a working proof of concept in a local test environment before being sent.
But he acknowledged the volume is creating problems of its own.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in