{"id":11636,"date":"2026-08-07T23:23:07","date_gmt":"2026-08-07T23:23:07","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=11636"},"modified":"2026-08-07T23:23:07","modified_gmt":"2026-08-07T23:23:07","slug":"bitcoins-ai-security-sprint-found-6700-issues-in-55-hours-but-no-one-knows-how-many-are-real","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=11636","title":{"rendered":"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real"},"content":{"rendered":"

<\/p>\n

\n

AI-assisted security campaign focused on the Bitcoin ecosystem, Bitcoin Red Team, said it generated 6,700 findings across 425 projects in its first 55 hours. The campaign labeled 1,029 of them high or critical.<\/p>\n

The Aug. 6 update measures how much material entered a security triage pipeline, and its effect on software security remains unreported.<\/p>\n

The retrieved thread omitted audit-ready definitions and denominators for the severity counts, as well as case-level outcomes, an aggregate false-positive rate, and a fix rate.<\/p>\n

Those missing fields prevent a calculation of how many alerts became confirmed vulnerabilities, how many maintainers rejected or downgraded, and how many led to patches.<\/p>\n

The first 55 hours still reveal a consequential capability, noting how AI systems can fill an ecosystem-scale review pipeline quickly. Expert prompting, reproduction, disclosure, and maintainer response remained necessary at every later stage.<\/p>\n

What the campaign numbers measure<\/h2>\n

The campaign published two snapshots as its roster and workload expanded:<\/p>\n\n\n\n\n\n\n
Elapsed time<\/th>\nProjects<\/th>\nTotal findings<\/th>\nReported severity<\/th>\nParticipants<\/th>\n<\/tr>\n<\/thead>\n
27.5 hours<\/td>\n390<\/td>\n4,962<\/td>\n85 critical; 635 high<\/td>\n16<\/td>\n<\/tr>\n
55 hours<\/td>\n425<\/td>\n6,700<\/td>\n1,029 high or critical<\/td>\n24 reported, including three bots<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

The 27.5-hour update covered 390 projects and 4,962 findings. By the 55-hour mark, the project count had risen by 35 and the finding count by 1,738. The later thread put high-or-critical findings at 15.4% of the total and clarified that three of the 24 reported participants were bots.<\/p>\n

The earlier post separated critical and high findings, while the later one combined them, with both sets of figures reflecting campaign assessments. Maintainer-confirmed exploitability and remediation outcomes require separate evidence.<\/p>\n

\"Infographic\"Infographic
Bitcoin Red Team scanned 425 projects and reported 6,700 findings, including 1,029 high or critical issues, while public validation rates remain unpublished.<\/figcaption><\/figure>\n

Rob Hamilton described Kimi K3 as handling the heavy analysis, with GPT Sol, Fable\/Opus, and GLM 5.2 supporting the documentation. He said OpenAI’s Cyber Harness covered selected components he considered load-bearing.<\/p>\n

A day later, Hamilton wrote that subject-matter experts could change an assessment with one or two sentences of context or a small block of code. In examples he described, that input pushed middling concerns into high or critical territory. He also identified operations, disclosure handoff, and triage as bottlenecks.<\/p>\n

In Hamilton’s account, models searched broadly while specialists shaped prompts, interpreted output, attempted reproduction, and decided which reports were ready for disclosure. That division of labor makes the campaign a human-AI review system.<\/p>\n

\n
\"OpenAI\u2019s\"OpenAI\u2019s<\/div>\n
Related Reading<\/span><\/p>\n

OpenAI\u2019s new cybersecurity push has a lesson for crypto: stop waiting for the hack<\/h3>\n

OpenAI\u2019s Daybreak may point to the crypto industry\u2019s next security standard of becoming resilient before vulnerabilities are exploited.<\/p>\n

May 12, 2026<\/span> \u00b7<\/span> Gino Matos<\/span><\/p>\n<\/div><\/div>\n

The developer known as Calle said most critical reports were quickly verified by project owners. The post supplied no denominator, verified-report count, rejection count, or patch status, leaving the breadth and outcome of that verification unresolved.<\/p>\n

\n
\n
CryptoSlate Daily Brief<\/span><\/p>\n

Daily signals, zero noise.<\/h3>\n

Market-moving headlines and context delivered every morning in one tight read.<\/p>\n

5-minute digest<\/span> 100k+ readers<\/span><\/p>\n<\/div>\n

\n

Free. No spam. Unsubscribe any time.<\/p>\n

Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n

You\u2019re subscribed. Welcome aboard.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n

\n
\"Firefox\"Firefox<\/div>\n
Related Reading<\/span><\/p>\n

Firefox finds 20 year old bug and patches 14 months of fixes in 30 days using Anthropic\u2019s Mythos AI<\/h3>\n

Mozilla\u2019s 20-year Firefox bug shows the risk of AI-accelerated zero-day discovery<\/p>\n

May 10, 2026<\/span> \u00b7<\/span> Liam ‘Akiba’ Wright<\/span><\/p>\n<\/div><\/div>\n

Outreach and outcomes define the security value<\/h2>\n

In the 55-hour update, Bitcoin Red Team reported that 19.5% of scanned projects had a SECURITY.md<\/code> file and 13.1% had an email there. The retrieved thread omitted the project corpus, denominator interpretation, and measurement method, so the percentages only describe the campaign’s scan.<\/p>\n

On Aug. 3, Hamilton said the effort had spent over $10,000 scanning over 100 repositories and had immediately disclosed critical findings when a proof of concept demonstrated exploitability. On Aug. 4, he reported about $20,000 in spending, more than a dozen disclosures and 150 repositories scanned.<\/p>\n

Scanning continued to expand, while the campaign described outreach, handoff and triage as active operational constraints. The published snapshots offer no comparable disclosure denominator at 55 hours, so they cannot establish the relative speed of scanning and resolution.<\/p>\n

Hamilton later identified the separate Coldcard incident as a catalyst for the wider campaign. The campaign record attributes no discovery of the Coldcard flaw to this sprint.<\/p>\n

\n
\"Coldcard\u2019s\"Coldcard\u2019s<\/div>\n
Related Reading<\/span><\/p>\n

Coldcard\u2019s $89M wallet bug triggers the biggest Bitcoin movement since FTX and completely distorts market signals<\/h3>\n

More than 77,000 BTC moved from older wallets as users raced to secure funds, complicating bearish readings across key on-chain indicators.<\/p>\n

Aug 2, 2026<\/span> \u00b7<\/span> Oluwapelumi Adejumo<\/span><\/p>\n<\/div><\/div>\n

A useful public accounting would separate findings that were reproduced, acknowledged, downgraded, rejected, and fixed, with definitions and denominators for each rate. That breakdown would show how much of the campaign’s volume became actionable security work.<\/p>\n

A public critic, JW Weatherman, argued that the campaign could not triage its output. His post identified no campaign-linked issue, patch, or advisory, so it supplies criticism without a measurable failure rate. The campaign’s missing disposition data leaves the underlying question open.<\/p>\n

For now, 6,700 represents campaign-labeled findings and triage candidates. The sprint demonstrated the speed of machine-assisted review. Its lasting security value depends on the share that experts can validate, disclose, and convert into fixes.<\/p>\n<\/div>\n

AI,Featured,Hacks,Research,Bitcoin,Coldcard,SolanaAI,Bitcoin,Coldcard,Solana#Bitcoins #security #sprint #issues #hours #real1786144987<\/p>\n","protected":false},"excerpt":{"rendered":"

AI-assisted security campaign focused on the Bitcoin ecosystem, Bitcoin Red Team, said it generated 6,700 findings across 425 projects in its first 55 hours. The campaign labeled 1,029 of them high or critical. The Aug. 6 update measures how much material entered a security triage pipeline, and its effect on software security remains unreported. The<\/p>\n","protected":false},"author":1,"featured_media":11637,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[1065,91,42,5845,877,356,116,1676,152,6096],"class_list":["post-11636","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-ai","tag-bitcoin","tag-bitcoins","tag-coldcard","tag-hours","tag-issues","tag-real","tag-security","tag-solana","tag-sprint"],"yoast_head":"\nBitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=11636\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real\" \/>\n<meta property=\"og:description\" content=\"Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=11636\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-07T23:23:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11636\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=11636\",\"name\":\"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11636#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11636#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg\",\"datePublished\":\"2026-08-07T23:23:07+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11636#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=11636\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11636#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11636#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto & Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real - Crypto News: Latest Cryptocurrency News and Analysis","description":"Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=11636","og_locale":"en_US","og_type":"article","og_title":"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real","og_description":"Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.","og_url":"https:\/\/cryptonews.uk.com\/?p=11636","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-08-07T23:23:07+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=11636","url":"https:\/\/cryptonews.uk.com\/?p=11636","name":"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=11636#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=11636#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg","datePublished":"2026-08-07T23:23:07+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"Bitcoin Red Team generated 6,700 findings in 55 hours, showing how quickly AI can flood security teams with issues to verify and fix.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=11636#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=11636"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=11636#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/redteam.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=11636#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Bitcoin\u2019s AI security sprint found 6,700 issues in 55 hours, but no one knows how many are real"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto & Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11636","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11636"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11636\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/11637"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11636"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11636"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11636"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}