An emergency effort known as the Bitcoin Red Team has formed to identify and address AI-assisted security threats across the Bitcoin software ecosystem. Consisting of approximately 20 to 25 volunteers—including pseudonymous and known developers such as Calle, Stu, Talip, thesimplekid, Ben Carmen, Daniela Brozzoni, James O'Beirne, and Bruno Garcia—the group works to find vulnerabilities before malicious actors can exploit them.
According to Calle, a Bitcoin software developer and Cashu maintainer, the initiative began taking shape after AnchorWatch CEO Rob Hamilton started examining projects following the Coldcard air-gapped wallet hack. While Calle noted that the core Bitcoin protocol remains secure, risks persist within the broader ecosystem of applications, wallets, services, and other software that users interface with.
The group operates both proactively and via inbound requests from projects. Calle stated that the team has already scanned nearly the entire significant open-source ecosystem, sharing findings with affected developers to refine vulnerability classifications.
In their security research, the team relies heavily on Chinese AI models rather than U.S. alternatives. Calle explained that heavy safety guardrails on American models often block cybersecurity-related requests, sometimes refusing to assist with finding or fixing identified vulnerabilities, whereas Chinese models like Kimi K3 face fewer restrictions for such research.
Calle warned that artificial intelligence has fundamentally altered the threat landscape by lowering the technical barrier to entry, allowing individuals without advanced cybersecurity expertise to execute exploits from beginning to end. Because cryptocurrencies present a direct financial incentive, Calle believes the Bitcoin ecosystem is confronting this shift earlier than other computer systems and industries.
