Claude Code Spots 5-Year-Old Wallet Flaw in 8 Minutes After $89M Bitcoin Hack
ChrisGPT · x · 2026-08-03
A recent hack on Coldcard Bitcoin hardware wallets led to the theft of nearly $89 million in Bitcoin. The root cause was a firmware bug that failed to enable the hardware random number generator, dropping the entropy of wallet seeds from 2¹²⁸ to 2⁴⁰, allowing attackers to crack keys offline and drain funds.
Interestingly, a Reddit user later prompted Claude Code to review the public firmware code for vulnerabilities. Within just eight minutes, the AI successfully traced the broken random number logic and identified the exact flaw. While there is no proof the original attacker used AI, this incident proves that AI coding agents are now highly capable of uncovering critical security flaws in minutes.
More from coding & agent
- 'LLM code is sloppy' rebutted with real ffmpeg code: identical if/else branches in a top library — kingslyj · 2026-10-16
- Office-editing tool calls need file, worktree and unit: lessons from dsh-univer-office — FunDistribution6537 · 2026-10-16
- Architect MD workflow: Gemini one-shot outputs that beat Opus, via 5-lens plan critique — oikk01 · 2026-10-16
- Prove a coding agent actually ran the tests: check artifacts, not approvals — ComprehensiveShake76 · 2026-10-16
- Building an acceptance harness for AI spreadsheet edits: allowlists, recalc checks, idempotency — ukdicha-modakkk · 2026-10-16
- Agent actions need checks outside the model: NVIDIA demos lean on guardrails amid wave of real agent incidents — Creamy-And-Crowded · 2026-10-16