AI Bitcoin Security Campaign Finds Nearly 5,000 Software Issues in 390 Projects

About one in seven reported findings were classified as high or critical severity.

A coordinated Bitcoin security campaign uncovered nearly 5,000 software issues across hundreds of open-source projects in about 30 hours. The effort combined human expertise with artificial intelligence tools to identify software weaknesses.

The initiative brought together 16 security researchers led by developer Calle, with support from OpenSats, OpenCode, and AI inference sponsors. The group worked together on a coordinated review covering hundreds of Bitcoin-related projects.

Breaking Down the Findings

According to figures released by the team, researchers reported 4,962 findings across 390 Bitcoin-related projects during the campaign. The total included 85 critical issues and 635 high-severity findings, bringing the number of the most serious reports to 720.

The campaign maintained a rapid pace, averaging about 166 reported findings every hour throughout the review. Based on the published figures, the team identified roughly 2.3 critical or high-severity issues for every person-hour spent examining software.

Researchers said the campaign differed from a traditional security audit because human reviewers actively guided AI systems during testing. Each participant used different prompts and methods, helping uncover weaknesses that a single approach might have missed.