We’re doing what we can for bitcoin so that bitcoin can do what it must for the world: bitcoincore.org/en/2026/10/28/…
Project Loupe
Verified account This account is verified. Learn more@ProjectLoupe
0 Following 1.4K Followers 43 Posts
Latest posts 5
The technology is moving fast. Responsible disclosure needs to move with it.
Project Loupe has entered the chatView quoted post on X
Finding the 3 'easily discoverable' vulnerabilities in Bitcoin Core v32.1
Although @ProjectLoupe was actually ahead of the curve, announcing they would be doing LLM scans back in May before the ColdCard and other hacks:
"Loupe’s ultimate goal is to find vulnerabilities, report them, and see them eliminated, making bitcoin safer and bitcoin holders more secure."
Great vision by @moneyball and team
x.com/bitschmidty/st…
🥾🪳
Great work by @ProjectLoupe and @L0RINC for finding these bugs!View quoted post on X
While they are vulnerabilities, they are low / medium severity and the Bitcoin protocol is resilient.
No loss of funds possible from these issues.
A learning from this is that some of these were found earlier than reported within the Red Team, but the initial findings did not identify the full blast radius so they were not immediately passed along to the security list.
Thank you to all of the Bitcoin Core developers who work hard building on Bitcoin so it can be the best money ever!
We file our findings privately. Loupe only shows up in public if a maintainer credits us, which many have:
✅ 754 commits, PRs, & release notes across 23 projects reference Loupe
✅ 610 distinct findings cited by issue number
✅ 132 merged PRs name the finding they fixed
✅ 754 commits, PRs, & release notes across 23 projects reference Loupe
✅ 610 distinct findings cited by issue number
✅ 132 merged PRs name the finding they fixed
Loupe findings have been landing in Bitcoin Core. During this cycle, five PRs landed: three have been merged, two are under review. Below is a thread on what each one caught and which Core dev implemented which fix.