FAIL · AI INCIDENT TRACKER

wire / 2026-08-04-9fbf

AI-Assisted Code Review Fails to Detect Vulnerability, Enabling $100 Million Bitcoin Theft

August 4, 2026 · CAN INCIDENT ECONOMICREPUTATIONAL

Coinkite let an AI audit its Coldcard firmware. The bug it missed was worth roughly $100 million in bitcoin.

The facts

Canadian company Coinkite used AI tools to review Coldcard wallet firmware, but the AI failed to detect a critical vulnerability in the interaction between software components. This oversight enabled attackers to steal over $100 million in bitcoin, highlighting limitations of current AI code auditing systems.