Volunteer group identifies critical vulnerabilities in Bitcoin projects using AI tools from Chinese startups, warning of unmaintained code risks.
A volunteer security group called the Bitcoin Red Team is scanning nearly all Bitcoin open-source projects for vulnerabilities using Chinese AI models. The effort has already confirmed numerous critical and high-severity flaws in wallets, Lightning applications, and software libraries, according to the group’s pseudonymous lead, Calle.
The team combines AI tools like Moonshot AI’s Kimi K3 and Z.ai’s GLM 5.2 with human review to analyze codebases. Findings are privately reported to developers for fixes before public disclosure. Calle noted that American AI models, including those from OpenAI and Anthropic, impose restrictions that hinder security research.
Researchers warned that unmaintained Bitcoin projects pose significant risks, emphasizing the need for proactive security measures in the ecosystem.