Bitcoin Red Team Scans 150 Repositories, Disclosing Dozens of Critical Vulnerabilities

Bitcoin Red Team identified critical flaws in 150 code repositories using AI tools funded by OpenSats. The group plans to open-source its security auditing framework.

Woofun AI reports that the volunteer organization Bitcoin Red Team has scanned 150 code repositories, privately disclosing over a dozen vulnerabilities. This initiative followed the COLDCARD incident and focused on strengthening wallets, encryption libraries, and infrastructure. OpenSats covered the approximately $20,000 cost for AI hash rate resources. Researchers utilized various AI tools, noting that open source models like Kimi K3 serve as primary instruments for security research, while closed source models from OpenAI and Anthropic impose more restrictions. The team intends to release their AI security tools under an open source license to facilitate continuous auditing of their own code repositories. Researchers caution that Bitcoin may be the first sector to encounter this wave of AI-assisted vulnerability discovery, with potential expansion to all open source software.