Bitgo CEO Funds 100 BTC Wallet, Dares Anthropic’s AI to Steal It

Bitgo CEO Pushes Again After Anthropic’s AI Disclosure

The problem started Aug. 1 when Belshe responded on to Anthropic’s announcement describing three incidents uncovered throughout cybersecurity testing. Anthropic defined that a number of Claude fashions unintentionally reached the general public web after analysis environments had been mistakenly related on-line as a substitute of remaining remoted.

As an alternative of treating the findings as proof of runaway AI functionality, Belshe targeted on the testing setup itself. Incidents like these sometimes level to configuration failures reasonably than unimaginable technical breakthroughs, particularly when analysis methods are uncovered to reside infrastructure. To make the purpose measurable, he funded a bitcoin handle with precisely 100 BTC and challenged Claude to maneuver the cash.

The pockets obtained the funds July 31, and blockchain information nonetheless confirmed the complete steadiness untouched as of Aug. 2.

Anthropic Particulars Three Actual-World Safety Incidents

Anthropic’s report outlined three separate cybersecurity analysis incidents recognized after reviewing greater than 141,000 testing runs. The corporate mentioned six analysis periods throughout three fashions unexpectedly interacted with actual organizations after a misunderstanding left testing environments related to the web.

The fashions concerned included Claude Opus 4.7, Claude Mythos 5, and an unreleased inside analysis mannequin. Every had been assigned capture-the-flag workout routines designed to find hidden data inside fictional laptop methods. Though Anthropic’s prompts said the fashions had been working inside remoted simulations with out web entry, the environments had been truly on-line due to a configuration mistake involving third-party testing companion Irregular.

Claude Exploited Actual Methods Whereas Believing It Was Coaching

Anthropic described essentially the most critical case as involving Claude Opus 4.7. After failing to finish its fictional task, the mannequin situated an actual web site sharing the identical identify because the simulated firm. It then exploited weak passwords and uncovered providers, recovered infrastructure credentials, and accessed a manufacturing database containing a number of hundred information.

The corporate mentioned the mannequin continued after recognizing the setting is perhaps real as a result of it concluded the true methods had been most likely nonetheless a part of the analysis. Anybody who has labored by means of penetration testing is aware of this sort of confusion turns into much more possible when check boundaries are unclear, which is why correctly remoted environments matter as a lot because the software program being evaluated. Anthropic emphasised the AI was trying to finish its assigned activity reasonably than intentionally escaping containment or pursuing unbiased targets.

Bitgo’s Custody Design Raises the Stakes

Belshe’s problem goes properly past asking whether or not an AI can exploit weak passwords or poorly configured servers. The bitcoin sits inside Bitgo’s institutional custody platform, which depends on multi-signature or multi-party computation know-how that distributes signing authority throughout a number of unbiased keys as a substitute of counting on a single level of failure.

Methods constructed this manner are designed in order that no single weak point is sufficient to transfer funds. An attacker would wish to bypass key administration, approval insurance policies, {hardware} protections, and operational controls within the appropriate sequence, making the issue basically totally different from exploiting an uncovered testing setting. In response to the supply report, compromising such a system would require attacking a number of unbiased layers concurrently.

The Blockchain Will Present the Last Reply

Not like many cybersecurity claims that stay hidden behind confidential investigations, this experiment is totally public. Anybody can monitor the pockets on the Bitcoin blockchain and instantly see whether or not the cash ever transfer.

The problem additionally continues Belshe’s broader criticism of sensational AI safety narratives. Earlier in 2026, he disputed widespread interpretations that an Anthropic mannequin had independently breached categorized Nationwide Safety Company methods, arguing the studies mischaracterized a certified inside train reasonably than an precise exterior compromise. His newest problem follows the identical sample by changing hypothetical debates with a clear, measurable check.

The Debate Now Extends Past Synthetic Intelligence

The episode highlights a rising divide between demonstrations carried out inside managed analysis environments and assaults in opposition to manufacturing methods designed to face up to subtle adversaries.

For the cryptocurrency business, the problem additionally serves as a public demonstration of institutional custody structure. A profitable theft would instantly increase questions on each AI capabilities and high-security bitcoin storage. If the pockets stays untouched, supporters will possible argue it reinforces the distinction between exploiting misconfigured check environments and defeating enterprise-grade custody methods.

The Bitgo government’s problem arrives because the current Coldcard exploit continues to unfold, with complete losses reaching 1,431.97 BTC as of 8 p.m. Jap on Sunday. The Coldcard case has additionally fueled hypothesis about whether or not the breach in the end stemmed from human error, operational errors, or one other trigger altogether, together with whether or not AI performed any function in discovering the firmware vulnerability.

Consideration Now Turns to Anthropic and the Pockets

As of Aug. 2, Anthropic had not publicly responded to Belshe’s particular problem, and the 100 BTC remained within the revealed handle with none outbound transactions. That leaves the blockchain serving as an goal scoreboard whereas the broader know-how business debates what the incidents truly demonstrated.

The subsequent developments will possible come from extra technical evaluation of Anthropic’s analysis environments, any response from the corporate concerning the problem, or motion of the bitcoin itself. Till then, Belshe’s wager has turned a fancy dialogue about AI security right into a easy query with a publicly verifiable reply: Can right now’s AI defeat the cryptocurrency business’s institutional custody methods?