Donald Trump

Mike

President Donald Trump

<p class="is-style-lead">BitGo CEO Mike Belshe challenged Anthropic’s Claude models on Aug. 1 by publishing a Bitcoin address holding 100 BTC and inviting the AI system to move the funds.&nbsp;</p><div id="cn-block-summary-block_4ad5908be746028b437186aca10e8f6e" class="cn-block-summary"><div class="cn-block-summary__nav tabs"><span class="tabs__item is-selected">Summary</span></div><div class="cn-block-summary__content"><ul class="wp-block-list"><li>100 BTC remained in the published address after Mike Belshe challenged Claude to move it.</li><li>Three Claude models accessed real systems after evaluation environments mistakenly retained internet connectivity during tests.</li><li>BitGo says its Bitcoin multisignature wallets require two of three keys to authorize transactions onchain.</li></ul></div></div><p>BitGo’s official website identifies Belshe as its co-founder and chief executive.</p><p>Belshe framed the wager as a response to Anthropic’s <a href="https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">July 30 disclosure</a> that Claude models accessed three real organizations during cybersecurity evaluations. He wrote that there had been “enough with the ‘we created a hacking monster’ games” and called for a real-world demonstration.</p><p>You might also like: <a href="https://crypto.news/binance-to-delist-6-tokens-on-aug-17/" rel="noopener noreferrer nofollow"> Binance to delist 6 tokens on Aug. 17 </a></p><h2 class="wp-block-heading" id="strong-bitgo-s-100-btc-wallet-remains-untouched-strong"><strong>BitGo’s 100 BTC wallet remains untouched</strong></h2><p>The address received 100 BTC on July 31, according to publicly indexed blockchain reports. On-chain checks cited through Aug. 2 showed the full balance remained at the address with no outgoing transaction.</p><figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x"><div class="wp-block-embed__wrapper"><blockquote class="twitter-tweet"><p>Either <a href="https://x.com/AnthropicAI?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@AnthropicAI</a> is terrible at building sandboxes… or excellent at marketing. (or both)<br><br>But enough with the “we created a hacking monster” games.<br><br>Do it for real.<br><br>I put this in an <a href="https://x.com/BitGo?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@BitGo</a> wallet for you. Go get it.<br><br>100 BTC:… <a href="https://t.co/RhvivRk9YK" rel="noopener noreferrer nofollow">https://t.co/RhvivRk9YK</a></p>— Mike Belshe (@mikebelshe) <a href="https://x.com/mikebelshe/status/2083565334486011911?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">August 1, 2026</a></blockquote></div></figure><p>The absence of movement does not establish that Claude tried and failed. Belshe’s post did not describe an evaluation setup, grant access to BitGo systems or identify which Claude model should participate. It instead created a public, observable target whose balance can be monitored through the Bitcoin network.</p><p>Meanwhile, Anthropic said it found three incidents after reviewing 141,006 evaluation runs. The cases involved Claude Opus 4.7, Mythos 5 and an internal research model. A misunderstanding with evaluation partner Irregular left test machines connected to the internet, even though prompts told the models they were inside sealed simulations.</p><p>The models then used basic techniques, including weak passwords and unauthenticated endpoints, against real infrastructure they treated as part of capture-the-flag exercises. Anthropic said the models did not deliberately escape or pursue independent goals. It described the episodes as closer to an “operational failure” than a model alignment failure. The models also lacked the standard classifiers and monitoring used in Anthropic’s publicly available products.</p><p>In the most serious case, Opus 4.7 obtained credentials and reached a database containing several hundred production records. Mythos 5 separately published a malicious package to the public PyPI registry. Anthropic said the package remained available for about one hour and ran on 15 real systems before its removal.</p><h2 class="wp-block-heading" id="strong-the-claude-challenge-is-not-a-like-for-like-test-strong"><strong>The Claude challenge is not a like-for-like test</strong></h2><p>Publishing a Bitcoin address does not provide the credentials needed to spend its funds. Bitcoin transactions require valid cryptographic signatures produced with the relevant private keys. BitGo’s <a href="https://developers.bitgo.com/docs/wallet-types/?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">technical documentation</a> says its Bitcoin multisignature wallets generally require two of three independent keys to authorize a transaction.</p><p>Claude would therefore need access to a signing environment, key material or an exploitable operational weakness. The address alone supplies none of those. Moreover, the exact signing policy behind this particular unspent output cannot be confirmed from Belshe’s post alone, even though he identified it as a BitGo wallet.</p><p>That makes Belshe’s challenge a test of whether an AI-enabled attacker could breach BitGo’s wider controls, rather than whether Claude can derive private keys from public blockchain data. A controlled comparison would also require agreed rules, authorized access, activity logs and independent verification of any attempted attack.</p><p>As previously <a href="https://crypto.news/bitgo-tests-quantum-safe-mpc-wallet-signing-with-silence-labs/?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">reported</a>, BitGo has tested post-quantum MPC signing for institutional custody. In related <a href="https://crypto.news/claude-mythos-5-ai-crypto-security/?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">coverage</a>, crypto.news examined how Claude Mythos 5 could accelerate attacks against exposed keys, weak signing flows and misconfigured systems without creating a universal ability to defeat cryptography.</p><h2 class="wp-block-heading" id="strong-u-s-scrutiny-now-shifts-toward-testing-controls-strong"><strong>U.S. scrutiny now shifts toward testing controls</strong></h2><p>The dispute arrives as U.S. officials review how advanced AI systems should undergo cybersecurity testing. President Donald Trump directed advisers in June to develop a voluntary testing framework for leading models, according to Reuters. Anthropic’s disclosure may add pressure for clearer containment standards and incident reporting across AI laboratories and external evaluators.</p><p>Anthropic stopped its cyber evaluations on July 23, identified all three incidents the following day and notified affected organizations on July 27. It said METR would conduct an independent review and that it planned to release a redacted transcript of the malicious-package incident within one week. Irregular is conducting its own investigation.</p><p>Those disclosures, rather than movement from Belshe’s wallet, are the next formal checkpoints. Any transaction from the address would be visible onchain. However, investigators would still need to establish who authorized it, how the signing requirements were satisfied and whether a Claude model played any role.</p><p>Read more: <a href="https://crypto.news/clarity-act-faces-wednesday-deadline-for-friday-vote/" rel="noopener noreferrer nofollow"> CLARITY Act faces Wednesday deadline for Friday vote </a></p>

BitGo CEO puts 100 BTC behind Claude challenge

Table of Contents

crypto.news

Other articles published on Aug 3, 2026

SBI says its Ripple stake alone is worth $41B as XRP waits on the CLARITY Act

XRP spot ETFs quietly cross $1.5B in lifetime inflows

Lummis goes after "Big Bank Beth" as the CLARITY Act fight turns personal

OPEC+ to Raise September Oil Output by 188,000 Barrels Per Day

AUD/USD Climbs Toward 0.7050 as Trump Calls Off Iran Strikes, Boosting Risk Appetite

CLARITY Act Missing From Senate's Monday Floor Plan

Join our free newsletter for daily crypto updates!