Morning Edition · Thursday, August 13, 2026Published at 1:53 AM EDT · New York
More than 40 organizations argue that safety guardrails block defenders from the same code-analysis capability attackers already use without restriction.

The Bitcoin Policy Institute and more than 40 companies and groups, among them Coinbase, Block, BitGo, Strategy, MARA, Galaxy, Brink and Trezor, signed an open letter to frontier artificial-intelligence laboratories asking for vetted access to the strongest models for defensive security research. The signatories say public safety guardrails on those systems refuse legitimate vulnerability work, so open-source maintainers fall back on weaker open-weight models while attackers face no equivalent limit.
The request is specific. It asks for early access to frontier cybersecurity models, enough computing capacity to run large analyses, secure research environments, and direct contact with laboratory security teams, so that vetted researchers can review wallets, payment infrastructure and other open-source software before attackers find the same defects. The coalition points to more than $634 million stolen from crypto platforms in April 2026, citing DefiLlama data, and to the roughly $1 trillion of value secured by Bitcoin.
The asymmetry the letter describes is already visible. Aztec found a critical flaw in its own proving system through internal artificial-intelligence-assisted auditing, and volunteer reviewers have used similar tooling to surface long-dormant defects in widely used open-source cryptography libraries. Whether laboratories grant privileged access is a commercial and liability decision, not a technical one, and no laboratory has publicly committed to the program.
The large custody, exchange and mining firms that signed, which would receive privileged model access before independent maintainers do, and the laboratories, which gain a compliant justification for building a paid tier of security capability.
Part of a tracked trend
Unaudited Open-Source Crypto Code Surfaces at Scale
Coordinated volunteer and AI-assisted review keeps exposing large backlogs of undiscovered defects in the open-source libraries that wallets, nodes and protocols depend on, so disclosure waves — not novel attacker research — become a recurring driver of emergency patches and incident risk across the ecosystem.
Start a discussion in Townsquare.
More from this edition
The letter and its signatories are documented, but its central premise, that attackers already use frontier models without restriction while defenders cannot, is asserted by commercially interested parties rather than measured, and no laboratory has confirmed the asymmetry or the program.
An open-source-intelligence read of how likely this story is true with its real nuance, not a judgment of any outlet. It assesses the claim, weighing independent and adversarial reporting. How we label confidence.
What this means
Custody and exchange businesses carry the cost of every unpatched defect in the open-source software they run, so they are asking the model providers to take on part of that defensive work. If laboratories create a vetted-access tier, the largest, most institutionally connected firms get it first, and small independent maintainers stay on weaker tooling, which concentrates security capability alongside capital. If laboratories refuse, the disclosure rate stays uneven, with well-resourced attackers and a handful of internal teams running the strongest analysis.
What to watch
Observations to monitor, not financial advice.
Synthesized from: CoinDesk · crypto.news · Cointelegraph
Comments
0No comments yet.