I don't think it's fair to blame AI for every attack on any open source project.

I haven't seen any evidence so far that this BTCPay Server vulnerability was exploited by AI.

You know, any popular open source software is regularly analyzed by security researcher also by attacker.

When any critical bug is discovered, it's an unfortunate reality that attempt to exploit it before or after a patch is released.

afaik, BTCPay Server has also transparently disclosed multiple vulnerabilities in the past and fixed them quickly. This shows that they are not like Coldcard. Rather, they have given more importance to solutions than hiding problems.


github

Look at this, avulnerability related to the 2022 public Point of Sale app was published in the GitHub Advisory Database, and the affected version and patched version are listed.


Since it is open source, any bug is visible to all good people or hackers. Again, for the same reason, the fix is ​​also quickly released to everyone.

It is really not fair until it is proven, but ever since AI came out and has continued to improve, especially with models like Claude, which are very advanced and game-changing, hacks have also been increasing.

Of course, no one is talking about this, but this is something that cannot be ignored. Self-testing by these companies has also shown that AI is capable of a lot of things, and it has already been used to find a lot of vulnerabilities. For example, Chinese-sponsored hackers used Claude to break into at least 30 organizations. Claude was also used by a person to find his seed phrase, which was not a hack, but it helped with extortion, real data theft as well. Many hackers have used it to find vulnerabilities in healthcare, emergency services, and other governmental departments to gain access to the people's stored data, which they sell online or use to extort people later.

A hacker used AI to create ransomware that he later sold online to criminals, so with the help of AI, one can solve one problem, which can then help them break into another system, eventually leading to even more serious consequences. That's why I won't disagree with pmalek, as AI is capable of a lot of things. You must have heard they blamed it all on Claude when they bombed the Iranian schoolgirl.

Every decent developer uses AI now.

Ofc the AI didnt find the vulnerability alone. But the AI enhances the developer/hacker capabilities

So yeah  , AI is to blame for all those attacks to be happening simultaneously or in a small amount of time

every hacker, real or wannabee, now has a genius level assistant with unlimited time and an encyclopedic knowledge of exploits and common errors.. all this "hacker" now needs to do is point it at "crypto" or whatever and wait.

once the low hanging fruit is picked it will get even uglier i fear.

For some reason now there is more bad news about Bitcoin, starting with the ColdCard hack and now the bad news from BTCPay Server.
People are starting to be wary and now I'm sure all the developers of bitcoin wallet hardware,
mobile wallet app developers and the like might do a thorough check to see if their devices and wallets are safe or if there are some bugs that could be open.

List of updates in v.2.4.2

Am just fascinated by how AI has quickly become a concern to open source wallets when it is quantum computers that we should have been more scared off. If AI is already doing this, what chance would we stand against quantum computers?
Am sure every open source user should not just only upgrade their BTCpay if that's what they are using, but do so to other open source wallets services too, because we don't know how much AI knows at this time but we can anticipate this current threat and ensure counter measures to protect our funds.