Bitcoin Red Team says AI is speeding security scans across the ecosystem

The group's work is a security campaign, not a claim that every AI-generated finding is exploitable. Bitcoin developer Calle told Decrypt that the focus is the wider software ecosystem, including applications, wallets and services that people use to transact with Bitcoin.

What the group has disclosed

AnchorWatch CEO Rob Hamilton said in an Aug. 4 update that the effort had spent about $20,000 across different services and made more than a dozen disclosures. Those figures are self-reported, and the update did not name the projects involved or publish the underlying findings.

That distinction matters. A fast scan can surface suspicious code, duplicated warnings and false positives alongside genuine bugs. A finding becomes actionable only after maintainers reproduce it, assess its severity, coordinate disclosure and ship a fix or mitigation.

The risk is broader than Bitcoin Core

Calle said the group has not found an issue in the Bitcoin protocol itself, but sees risk in the software built around it. The concern is that AI can reduce the skill and time needed to move from a public codebase to a working exploit, increasing pressure on maintainers of wallets, Lightning implementations, exchanges and other services.

The current reporting does not establish how many of the group's findings are confirmed vulnerabilities, which projects received reports or how many fixes have shipped. The next useful evidence is public advisories, reproducible technical reports and patched releases that let independent researchers verify the claims.