AI Came for Bitcoin First | Jameson Lopp

In the past month and a half, Jameson Lopp has been pulling his beard out. The chief security officer at Casa has watched the velocity of cyberattacks against Bitcoin infrastructure accelerate dramatically, driven by rapid iterations in large language models. Lopp argues that Bitcoin is the canary in the coal mine for the rest of the internet-connected world. The attackers are early adopters of AI tooling because the bounty is so high, and once the easy money is picked out of the Bitcoin space, they will move on to financial systems, personal identifiable information databases, and critical infrastructure. "If you're not racing along with everyone else," Lopp warns, "then it's pretty much guaranteed that you're going to get compromised at some point."

The New Velocity of Vulnerability Discovery

The fundamental nature of cybersecurity has not changed — it remains a cat-and-mouse game between attackers and defenders. What has changed is the velocity, driven by new LLM models coming out every few weeks. Open-weight models that are orders of magnitude cheaper than frontier models are catching up fast, putting powerful tooling in the hands of a much larger pool of threat actors. Attackers are more motivated to be early adopters because the return on investment is so high, and many defenders have been caught off guard.