Bitcoin HODLer | No DM
Joined March 2022
- Tweets1.8K
- Following603
- Followers280
- Likes3.1K
idkhowtousenet retweeted
BITCOIN RED TEAM: “EVERYTHING IS BROKEN”
After two weeks using frontier AI to scan virtually the entire Bitcoin open-source ecosystem for vulnerabilities, Bitcoin Red Team member @callebtc says the “low hanging fruit is done,” with maintainers validating “a ton” of critical and high-severity findings.
His biggest takeaways:
Decades of accumulated open-source technical debt are suddenly colliding with AI capable of finding vulnerabilities at a speed and scale human researchers never could.
Lightning appears particularly exposed. Calle says its complexity means it is “more broken than the average,” while unmaintained Bitcoin projects should probably be assumed vulnerable until proven otherwise.
Projects that began building their own AI security and auditing pipelines months ago are now in a completely different position from those that waited.
The Red Team has now completed a basic scan of virtually the entire Bitcoin open-source ecosystem. The low-hanging fruit is largely gone, but external red teaming will likely need to continue indefinitely as AI capabilities improve.
Despite uncovering and reporting “a ton” of real critical and high-severity vulnerabilities, Calle believes the process is ultimately making Bitcoin stronger.
The same AI security reckoning will soon spread far beyond Bitcoin.
gained a ton of new insights working in bitcoin red team 🟥 that i wish i could share without vague posting. but this is what i got anon.
- we’re experiencing a massive collision between decades of human open source slop against 2 weeks of kimi k3 (not good)
- everything is broken, bitcoin is burning
- bitcoin is becoming stronger through this
- bitcoin is the obvious first target but the rest of the world will follow shortly
- sometimes old things need to burn so new things can grow on healthy soil
- humans should never code in c (just stop)
- lightning is complicated and is more broken than the average (sorry)
- verification is free. we used to complain about slop PRs. then about slop security audits. if you can’t handle the information overload, stop complaining and use AI to sort through it.
- those projects that started AI audits months ago are in a completely different position than those who didn’t
- projects need their own AI audit pipeline going into the future
- the burden for a developer to keep software safe and secure is pretty stressful and not for everyone. it has become a lot more stressful now.
- unmaintained projects are most probably broken, don’t rely on them. i’d rather one-shot it myself with a modern AI
- multiple concurrent, diverse human approaches have proven to be the best vulnerability search method
- external red teaming will probably have to continue forever
- we’ve basically completed a basic scan of virtually the entirety of bitcoin open source. the low hanging fruit is done.
- we’ve reported a ton of real critical and high vulnerabilities. project maintainers across the board have validated our findings.
- response speed is very different across projects and shows how healthy each project is. i recommend acting fast these days.
- red team etiquette matters. if you don’t disclose responsibly, boast on twitter about your findings on a particular project, or make indications about the nature of particular findings, you’ve disqualified yourself as a serious security researcher. trust is the most important factor in this game. if you lose it, it’s very hard to win it back.
- did i mention that humans should not code in c?
love you all.
just remember, if your fiat friend starts talking about ₿itcoin we are close to the top, I haven’t heard them yet 😂
I was reading AI 2027 document, using GPT 4o to dissect it a bit more, and chatting about implications of this future in which AGI would take over whether is aligned or misaligned to human interest and I got very interesting answers such as:
2) “If AIs begin to manipulate or control key infrastructure, censorship-resistant decentralized blockchains could be valuable to individuals and organizations outside the dominant system.”
3) “Bitcoin could be one of the last bastions of freedom in a world dominated by centralized AI.”
Do you think this makes your current convictions stronger than before to keep stacking more Bitcoin?
PDF: ai-2027.com/ai-2027.pdf YouTube: youtu.be/5KVDDfAkRgc?si=gloD…
idkhowtousenet retweeted
In Stockholm in 3...2...1... NOW!
Officially Sweden's first restaurant accepting Bitcoin Lightning payments: Falafel Baren in Södermalm, Stockholm. Soon on @btcmap
I set it up with @walletofsatoshi POS system, and paid with @bolt_card
Full video will be released on YouTube.
I’ve started accumulating since then again, strongly. You gotta follow the big money! Behave like a responsable whale 😌
idkhowtousenet retweeted
The creator of Twitter and Cash App, @Jack Dorsey just released a Bluetooth messaging app called ‘Bitchat’ that doesn't need the internet or cell service.
Within an hour, users have started sending bitcoin using the peer-to-peer encrypted mesh network.
idkhowtousenet retweeted
BFM167: THE ULTIMATE BITCOIN RETIREMENT GUIDE - with @sminston_with⚡️
He analyzed Bitcoin’s long-term adoption patterns to calculate an optimized retirement guide.
Whether you want $50K/year or $1M/year, he ran the numbers📈
This is the Bitcoin Retirement Breakdown you need👇
Cardano founder Charles Hoskinson talks bitcoin’s $250,000 future youtu.be/-uDyayV-1O8?si=bva1… via @YouTube
idkhowtousenet retweeted
If Bitcoin = Saving, MSTR = Growth, then MSTY & IMST = Income.
But how do $MSTY & $IMST actually work?
✅ What do they offer investors?
✅ How do their strategies differ?
✅ How do they perform in bull, flat, or bear markets?
✅ What is NAV erosion?
These are the questions the Bitcoin Consultants will break down: A🧵