Volunteer Security Sweep Uncovers Nearly 5,000 Issues in Bitcoin Software

A volunteer group called Bitcoin Red Team has begun systematically reviewing open-source Bitcoin projects following a security exploit involving the Coldcard hardware wallet. In just the first 29.8 hours of AI-assisted code reviews, the team identified 4,962 potential security issues spread across 390 Bitcoin-related projects.

Of these findings, 720 were classified as high or critical severity, meaning they could potentially be exploited to cause significant harm, such as loss of funds or compromise of wallet security. The initiative highlights how widely used open-source cryptocurrency tools can carry unnoticed vulnerabilities, especially in fast-moving ecosystems where many independent developers contribute code.

While this story centres on cryptocurrency infrastructure, it carries a broader lesson for any business relying on open-source or third-party software: even widely trusted tools can harbour serious security flaws that go undetected for long periods. The use of AI-assisted review to rapidly surface issues at scale also signals a growing trend in how security testing is being conducted across the software industry.