The challenge began Aug. 1 when Belshe responded directly to Anthropic’s announcement describing three incidents uncovered during cybersecurity testing. Anthropic explained that multiple Claude models unintentionally reached the public internet after evaluation environments were mistakenly connected online instead of remaining isolated.

Instead of treating the findings as proof of runaway AI capability, Belshe focused on the testing setup itself. Incidents like these typically point to configuration failures rather than impossible technical breakthroughs, especially when evaluation systems are exposed to live infrastructure. To make the point measurable, he funded a bitcoin address with exactly 100 BTC and challenged Claude to move the coins.

Image of the bitcoin address Belshe shared on X.

The wallet received the funds July 31, and blockchain records still showed the full balance untouched as of Aug. 2.

Anthropic’s report outlined three separate cybersecurity evaluation incidents identified after reviewing more than 141,000 testing runs. The company said six evaluation sessions across three models unexpectedly interacted with real organizations after a misunderstanding left testing environments connected to the internet.

The models involved included Claude Opus 4.7, Claude Mythos 5, and an unreleased internal research model. Each had been assigned capture-the-flag exercises designed to locate hidden information inside fictional computer systems. Although Anthropic’s prompts stated the models were operating inside isolated simulations without internet access, the environments were actually online because of a configuration mistake involving third-party testing partner Irregular.

Anthropic described the most serious case as involving Claude Opus 4.7. After failing to complete its fictional assignment, the model located a real website sharing the same name as the simulated company. It then exploited weak passwords and exposed services, recovered infrastructure credentials, and accessed a production database containing several hundred records.

The company said the model continued after recognizing the environment might be genuine because it concluded the real systems were probably still part of the evaluation. Anyone who has worked through penetration testing knows this kind of confusion becomes far more likely when test boundaries are unclear, which is why properly isolated environments matter as much as the software being evaluated. Anthropic emphasized the AI was attempting to complete its assigned task rather than deliberately escaping containment or pursuing independent objectives.

Belshe’s challenge goes well beyond asking whether an AI can exploit weak passwords or poorly configured servers. The bitcoin sits inside Bitgo’s institutional custody platform, which relies on multi-signature or multi-party computation technology that distributes signing authority across multiple independent keys instead of relying on a single point of failure.

The address transfer data Belshe shared shows multi-signature has been applied.

Systems built this way are designed so that no single weakness is enough to move funds. An attacker would need to bypass key management, approval policies, hardware protections, and operational controls in the correct sequence, making the problem fundamentally different from exploiting an exposed testing environment. According to the source report, compromising such a system would require attacking multiple independent layers simultaneously.

Unlike many cybersecurity claims that remain hidden behind confidential investigations, this experiment is completely public. Anyone can monitor the wallet on the Bitcoin blockchain and immediately see whether the coins ever move.

The challenge also continues Belshe’s broader criticism of sensational AI security narratives. Earlier in 2026, he disputed widespread interpretations that an Anthropic model had independently breached classified National Security Agency systems, arguing the reports mischaracterized an authorized internal exercise rather than an actual external compromise. His latest challenge follows the same pattern by replacing hypothetical debates with a transparent, measurable test.

The episode highlights a growing divide between demonstrations performed inside controlled research environments and attacks against production systems designed to withstand sophisticated adversaries.

For the cryptocurrency industry, the challenge also serves as a public demonstration of institutional custody architecture. A successful theft would immediately raise questions about both AI capabilities and high-security bitcoin storage. If the wallet remains untouched, supporters will likely argue it reinforces the difference between exploiting misconfigured test environments and defeating enterprise-grade custody systems.

The Bitgo executive’s challenge arrives as the recent Coldcard exploit continues to unfold, with total losses reaching 1,431.97 BTC as of 8 p.m. Eastern on Sunday. The Coldcard case has also fueled speculation about whether the breach ultimately stemmed from human error, operational mistakes, or another cause altogether, including whether AI played any role in discovering the firmware vulnerability.

As of Aug. 2, Anthropic had not publicly responded to Belshe’s specific challenge, and the 100 BTC remained in the published address without any outbound transactions. That leaves the blockchain serving as an objective scoreboard while the broader technology industry debates what the incidents actually demonstrated.

The next developments will likely come from additional technical analysis of Anthropic’s evaluation environments, any response from the company regarding the challenge, or movement of the bitcoin itself. Until then, Belshe’s wager has turned a complex discussion about AI safety into a simple question with a publicly verifiable answer: Can today’s AI defeat the cryptocurrency industry’s institutional custody systems?

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。