The Bitcoin Red Team has revealed a significant number of security vulnerabilities, totaling 4,962 across 390 Bitcoin projects in just 30 hours. This extensive audit, which utilized AI agents, was led by the creator of the Cashu protocol, known as calle.
During the first part of the audit, which was noted for its rapid pace and thoroughness, the team identified 85 critical and 635 high-severity issues. These findings represent 14.5% of all reported vulnerabilities, averaging 1.85 serious issues per project. The audit operates at an impressive rate of 166 findings per hour, indicating a robust effort by the team, which now comprises 16 members including both human contributors and automated systems.
“Our team has grown to 16 individuals working around the clock. We’re conducting a comprehensive security audit across Bitcoin's code bases,” calle stated in a recent update.
Significantly, the findings show that privacy and coinjoin projects had the highest concentration of serious vulnerabilities, accounting for 24% of the total. In contrast, swaps and exchanges recorded 21%, while payments and merchant tools had 17%. Despite the automated systems contributing to most of the findings, calle emphasized the importance of diverse review methods to uncover different types of vulnerabilities.
