A volunteer team has flagged 85 critical bugs across 390 bitcoin BTC$64,761.54 projects in a little over a day.
Sixteen Bitcoin developers have filed 4,962 findings in a coordinated security audit, including 85 critical and 635 high-severity issues, according to Calle, the pseudonymous developer behind the Cashu ecash protocol.
The findings come from a coordinated audit run by developers pointing AI models at bitcoin wallets, cryptographic libraries and infrastructure.
"Situation is extremely bad," Calle noted.
We're ramping up. Much of our work is still manual (hand holding the AI) but our automated harnesses are getting better at the same time. So far, letting everyone use their own favorite review method has proven to be the most effective strategy.We're getting a lot of… pic.twitter.com/EoS6Z9ubpr
Most of the critical reports have been quickly verified by project owners, Calle said, and are being reproduced using a working proof of concept in a local test environment before being sent.
But he acknowledged the volume is creating problems of its own.
"There's a lot of chaos right now in the ecosystem," he wrote, apologizing to maintainers buried in reports and saying the group is still learning to sort out “the slop.”
The group publishes fast because maintainers can now verify findings almost for free using the same tools, Calle said, and because "others who aren't on the red team will arrive at the same findings as we did."
Rob Hamilton, who is building the automated setup the group runs, said in an X post the bottleneck is not finding bugs but routing them to the right maintainers.
"The hardest part is coordinating to get things to the right people," Hamilton wrote. "While it is powerful, having found critical issues, I would view this as only version one."
The audit lands in an ecosystem already absorbing the fallout when the other side finds a flaw first.
Source
This article is syndicated for educational reading. For the latest updates, visit the original publisher.
Read on coindesk.com
