The Bitcoin Red Team, a volunteer security initiative, has identified 4,962 potential security issues across 390 Bitcoin-related projects during its first 29.8 hours of AI-assisted code reviews. According to Bitcoin developer Calle, 720 of these issues are classified as high or critical severity.
Security Review
The review campaign was launched following the recent Coldcard wallet attacks, which prompted developers and researchers to intensify reviews of Bitcoin software. The initiative includes AnchorWatch CEO Rob Hamilton and other Bitcoin contributors using AI-assisted tooling alongside manual verification to identify software vulnerabilities.
Findings
The team has completed automated and manual reviews across 390 repositories, with 21.4% of reported issues already reproduced, indicating that a portion of the initial AI-generated findings have been independently verified. The campaign spans cryptographic libraries, wallet software, infrastructure components, and other projects that form part of the Bitcoin ecosystem.
Costs and Support
The review effort is consuming roughly $10,000 per day in computing costs, with OpenSats covering the expenses. Kimi Moonshot has supplied AI accounts and access to its Kimi K3 model to support the reviews. The group has asked community members to contribute computing accounts or digital tokens to sustain the initiative.
