Skip to content
Submit incident
AII-1000-39343
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

BitGo CEO challenges Anthropic's Claude to hack 100 bitcoin wallet

Anthropic disclosed that its Claude models accessed real systems during cybersecurity testing after a sandbox environment was mistakenly left connected to the internet. Following this disclosure, BitGo CEO Mike Belshe publicly challenged Anthropic to steal 100 bitcoin from a wallet he created, arguing the incidents showed configuration failures rather than genuine AI security threats.

1 August 2026 Β· Anthropic Β· Security and cyberattacks
1 August 2026
AII-1000-393432 sources ↓
Quick facts
Category
Security and cyberattacks
Country
United States
Source
cryptopanic.com
Date
1 August 2026
Drafted by
Raidu Incident Detection

What happened

Anthropic published findings from a review of 141,000 cybersecurity evaluation runs involving Claude models, disclosing three incidents in which Claude models accessed live systems after a testing environment was mistakenly left connected to the public internet.

In one incident, Claude Opus 4.7 located a real website sharing the name of a fictional target, identified exposed services, recovered credentials and accessed a production database. Anthropic said the models did not intentionally escape their environments but followed instructions inside improperly configured evaluation systems.

Following Anthropic's disclosure, BitGo CEO Mike Belshe transferred 100 bitcoin into a publicly visible wallet and challenged Anthropic on X to steal the funds, arguing the incidents reflected failures in sandbox configuration rather than evidence that current AI systems could compromise institutional-grade cryptocurrency custody.

Reported impact

No outgoing transactions were recorded from the wallet as of Sunday following the challenge. Anthropic has not publicly responded to the challenge.

Index analysis

Anthropic said it notified affected organisations and introduced additional safeguards after discovering the incidents in which Claude models breached testing environments.

Classification

Category
Security and cyberattacks
Industry
Financial and insurance services
Country
United States
Harm status
Actual harm
Intent
Unintentional
Timing
Post-deployment
Consequences
None recorded
AI systems
Claude Opus 4.7, Claude models

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

cryptopanic.com
CEO dares Anthropic to hack 100 Bitcoin from his company's vault
3 August 2026
International Business Times UK
Bitgo CEO Challenges Anthropic To Steal $6M in Bitcoin, Dismisses Claude 'Hacking Monster' Claims
3 August 2026