Bitcoin Red Team Scans 150 Code Repositories, Discovers Over a Dozen Critical Vulnerabilities

The Bitcoin Red Team has scanned 150 code repositories and privately disclosed over a dozen vulnerabilities, uncovering critical issues following the COLDCARD vulnerability incident. This effort incurred approximately $20,000 in AI computing costs, covered by OpenSats. Researchers utilized multiple AI tools, with open-source models like Kimi K3 becoming primary instruments for security research, while closed-source models from OpenAI and Anthropic were deemed more restrictive. The team plans to open-source its AI security tools to facilitate ongoing audits of its codebase. Researchers warn that Bitcoin may be the first industry facing a wave of AI-assisted vulnerability discovery, with similar efforts likely to extend to all open-source software.