- Bitcoin developers used AI tools to find nearly 5,000 security vulnerabilities across 400 projects in 24 hours.
- A $100 million Coldcard exploit drained bitcoin from over 5,200 addresses, and the Hacker’s wallet now holds $36 million.
- BTCPay Server confirmed an active exploit that stole funds, urging all operators to update immediately.
- The Bitcoin Red Team is spending $10,000 per day on AI compute for the audit, funded by OpenSats.
Bitcoin and crypto traders are still reeling from a massive $100 million attack on the Coldcard hardware wallet that ignited fears of another price crash. The exploit drained roughly 2,000 bitcoin from more than 5,200 addresses in just days, according to reports.
Coldcard urged users to “treat this as urgent” and migrate funds, posting to X that “the threat is still ongoing.” Consequently, a volunteer group known as the Bitcoin Red Team launched a large-scale security audit across bitcoin code bases.
The auditors used Moonshot’s Kimi K3 AI model and spent $10,000 per day on compute, paid by OpenSats. They found approximately 5,000 vulnerabilities, including 85 critical and 635 high-severity bugs, most of which have been verified by project owners.
Meanwhile, BTCPay Server warned users to update after a critical exploit was “actively” exploited. The developers posted that “users were affected and funds were stolen,” while Bull Bitcoin CEO Francis Pouliot told X: “Tell everyone you know that is running BTCPay to turn it off right now.”
The attackers are believed to have gained access via a security bug in the Lightning Network Daemon. The hacker’s wallet, which currently holds $36 million, has become a “graffiti wall” of pleas and a laundering pitch offering to cash out stolen bitcoin for a 10% cut, as reported by Coindesk.
Bitcoin analyst Dan Held described the string of attacks as “the bitcoin puritan maxi 9/11.” The market remains spooked, with analysts at 10X Research citing the exploits as the reason for continued price weakness.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
