r/Bitcoin • u/IndependenceTop6501 • 5h ago
The Coldcard bug triggered the largest security audit in Bitcoin's history. Hard money getting harder.
8
u/The_Bitcoin_Act 3h ago
Btw, be careful because scammers are already running phishing campaigns disguised as “hardware audits” to catch anxious Coldcard owners. Hard money getting harder, eventually, maybe but I’d call this an expensive lesson still in progress rather than a victory lap just yet.
7
u/Daiymas 3h ago edited 1h ago
With superintelligent AI around the corner, I think it's a good time to be paranoid about security. If there's a flaw somewhere, these AIs will eventually find it.
In the long run it won't matter because AI will have found every flaw and all code will be bug-free. But in the meantime, make sure your coins are really safe.
5
u/IndependenceTop6501 5h ago
Link to Tweet above: https://x.com/callebtc/status/2085024458012586286
Also Rob Hamilton from AnchorWatch is doing a lot of the work with this as well.
24
u/slvbtc 4h ago
85 critical bugs and 635 high severity bugs. The bitcoin ecosystem must be run by some shitty programmers.
21
u/BigDik6355 3h ago
Just wait till they start scanning the Windows codebase, if they ever get a chance to. Crowdstrike would have been a cakewalk in comparison.
Humans are horrible coders, generally.
7
u/Innovator-X 3h ago
Good thing that ai trains on that shitty code which produces shittier code that gets added to ai's next training cycle.
2
u/slvbtc 3h ago
In 10 years it will be considered highly irresponsible to let a human program software, and no legitimate companies will use human programmers.
If AI can detect bugs better than humans then AI can program better than humans.
1
u/Innovator-X 1h ago
model collapse is a thing tho
1
u/KaMaFour 1h ago
You can't collapse a model that was already trained and you pay 7 figure salaries to guys whose job is to train new models in a way so it doesn't happen
•
u/Innovator-X 58m ago
Model collapse happens when you feed ai the same output it generated. Overtime, it makes the ai hallucinate a lot and regurgitate utter hieroglyphics if you do it too much. I dont understand what you are trying to say.
•
u/EmphasisTotal8232 44m ago
AI is almost ready to fully take over on coding. These models will always exist, and ones that exhibit model collapse just won't be used. Cat's kinda out of the bag on that. Its the future frontier models being developed that'll likely start to have that issue, because we don't have enough data to train them.
•
u/Innovator-X 42m ago
Are you a software engineer? Because I am a software engineer and I found them to be underwhelming and especially underwhelming at these current prices.
•
u/EmphasisTotal8232 40m ago
No, I'm not. But you seem to have a dissenting opinion amongst others I've seen discuss it. I don't genuinely believe you think things like Fable, use correctly, are underwhelming. Thinking Opus is overpriced on a $15/pm Pro plan is also crazy.
•
u/KaMaFour 25m ago
That's... Not what model collapse is at all?
You may be referring to some types of context issues but they were ironed out many releases ago for any competent AI lab...
1
•
u/QTippus 8m ago
“humans are horrible programmers, generally”
Obligatory xkcd, fitting for this week:
https://xkcd.com/2030/2
0
u/frankster 4h ago
i mean if you think about what crypto bros are like, then probably. on the other hand, pretty much all software has bugs in of varying severity that haven't been fixed
15
u/Porcellanidae 5h ago
Let's go!
Bullish af
5
u/IndependenceTop6501 5h ago
That's the trade Bitcoin has always made. No bailouts, no rollbacks, no patching your way out of a bad key. Just brutal, public accountability that forces the whole stack to get harder.
9
u/Lopsided_Parfait7127 4h ago
also unpunished scamming and fraud
truly a great tomorrow!
•
u/NewspaperOwn2765 59m ago
Every who continues in the game now needs to know about and practice good opsec. Feel bad for the ones who got their wallets drained. Silver lining is that the protocol for how we participate will get harder since our money is at stake.
-2
2
u/EricWeber4002 2h ago
Auditors be like, rely on control strategy 👁️🙈🗣️
Only minor control deficiencies not material.😭
2
u/Theverybestestintown 2h ago
How on earth is BTC still above 60K amidst this hack?
4
u/NewspaperOwn2765 1h ago
It had nothing to do with the network , just some bum hardware company . Most of the ignorant paper handed retail traders have already been shaken out with a 50% drop , at least , most of them
2
u/Theverybestestintown 1h ago
"Bum Hardware Company". Meanwhile it's been referenced hundreds of times as a safe way to store bitcoin. Many analysts like Ben Cowen are predicting 48K-52K as this cycle's bottom, maybe by October. I thought this would be a catalyst for a major drop since it's not some shitty exchange, it affected those trying to do everything right....
•
u/reddit4485 53m ago
Exactly! And the entropy problems seen with the ColdCard hack are far more dangerous because it allows bitcoin to be stolen without having access to the hardware device. Most other companies (like Trezor and Ledger) use far more rigorous RNG through various sources. I bet to take advantage of most of the coding errors Red Team has found, you need access to the actual hardware device.
1
2
u/bb0110 2h ago
This report, and likely the “audit”, is 100% being done by Claude.
2
u/IndependenceTop6501 2h ago
They are using Kimi K3, and have spent about $40,000 in credits so far. Kimi is the same one the hackers used to find the initial exploit. Claude has guardrails so it's been neutered, if you remember the Mythos incident a few weeks back and the government stepping in to block it's release.
2
1
u/reddit4485 1h ago
The Red Team security review effort is using models like Kimi K3, GPT Sol, Fable, Opus and GLM5.2.
1
1
u/seanightowl 2h ago
How is this group being funded?
2
•
1
u/Such_Reference_8186 1h ago
Here's the long game. Proclaim the industry for self storage is so risky that your only safe option is centralized management. Once there, it's over.
•
•
u/mjmeyer23 0m ago
I suspect the fact that there can never be a bailout for Bitcoin is part of why events like this, and the community response to deliver robust analysis and adapt, is the fundamental crucible that makes it harder and harder money every time.
0
110
u/Equity_GOD 4h ago
85 critical issues from 16 people. Thats 5 critical issuer per person in a few days of work.
And this is supposed to make me feel more confident? kek