Community Trust ScoreVerified
Crypto projects are lining up. Anthropic just launched an AI-driven security scanning program, and the first wave of applicants includes some well-known names from the blockchain world — Ethereum client developer Nethermind and Bitcoin wallet ZEUS among them. The program, called OSS Scanner, went live on a Thursday and is already pulling in interest from far beyond crypto.
Why It Matters
The launch of Anthropic's OSS Scanner underscores the growing importance of security in the rapidly evolving crypto landscape, especially as attacks on blockchain projects become more frequent. By attracting established players like Nethermind and ZEUS, this initiative not only highlights the urgency for enhanced security measures but also reflects a broader industry trend towards leveraging AI to address vulnerabilities in open-source software. This development may signal a shift in how crypto projects prioritize security, potentially influencing investor confidence and market stability.
What OSS Scanner Actually Does
Anthropic built OSS Scanner to scan open-source software for security vulnerabilities. Projects have to opt in — it’s not automatic. Once accepted, they get vulnerability reports generated by Anthropic’s leading AI models, including Claude Mythos. The pitch is speed. Anthropic’s existing manual review process can slow things down badly, delaying the moment when developers actually hear about a critical flaw in their code. OSS Scanner is meant to cut that lag and get warnings out faster.
The selection process isn’t first-come-first-served. Anthropic weighs each applicant on two main factors: how much other software or users depend on that project, and how exposed it is to remote attacks. Projects that sit at the center of critical infrastructure get priority. That’s probably why Nethermind made early headlines here — it’s an Ethereum execution client, meaning a lot of the network runs on it.
Nethermind wants a full audit of its repository. That’s a broad ask, but it makes sense given how much Ethereum activity flows through its codebase. ZEUS is narrower in scope. The Bitcoin wallet flagged specific areas it cares about most: payment systems, private key handling, and Lightning network connections. Those are exactly the spots where a missed vulnerability could mean real money lost.
VirtEngine, a decentralized cloud computing platform, also applied. And it’s not just crypto — AI development projects and general software tools are in the mix too. The applicant pool is wide.
Why Crypto Platforms Are Paying Attention
The timing isn’t random. AI-assisted cyberattacks on crypto platforms have been climbing, and some recent cases were ugly. Bitcoin swap provider Boltz had to halt operations entirely because attackers developed exploits so fast that the team couldn’t keep up. PayPerQ faced repeated AI-driven attacks. These weren’t slow, methodical hacks — they were rapid, iterative, and clearly benefiting from automated tools on the attacker’s side.
Anthropic has been pretty direct about the uncomfortable reality here. In the short term, AI probably helps attackers more than defenders. Exploiting a vulnerability is faster and cheaper than finding and patching one. The attacker can run automated scans, generate exploit code, and iterate quickly. The defender is stuck waiting on slow manual reviews and internal security cycles. That gap is real, and it’s getting wider.
OSS Scanner is Anthropic’s attempt to close it — or at least narrow it. Automated, AI-generated vulnerability reports, delivered early, give development teams a fighting chance to patch before someone else finds the same flaw and uses it.
The program builds on earlier work. Anthropic previously ran something called Project Glasswing, which focused on finding vulnerabilities in open-source software through regular scans. That project leaned on manual review, which created the delays OSS Scanner is now designed to fix. So this is basically an upgrade — same goal, faster execution.
Where Things Stand Right Now
No pull requests have been merged yet. The selection process is still running. Anthropic is working through applications, assessing each project’s infrastructure footprint and security exposure before making decisions. It’s unclear how many projects will ultimately get accepted, and Anthropic hasn’t specified a timeline for that.
What’s clear is that demand exists. The fact that Nethermind and ZEUS moved quickly to apply says something about how seriously crypto developers are taking the threat environment right now. These aren’t small side projects — they’re core infrastructure. And if their teams are worried enough to seek outside AI-driven security help, that’s a signal worth noting.
The broader applicant pool — spanning cloud computing, AI tooling, and general software development — shows OSS Scanner isn’t being positioned as a crypto-only product. But crypto’s particular vulnerability profile, where exploits translate directly into stolen funds and the attack surface is public by design, makes the sector a natural early adopter.
There’s also a reputational dimension. A major exploit in an Ethereum client or a widely-used Bitcoin wallet doesn’t just hurt users — it shakes confidence in the whole ecosystem. Getting ahead of vulnerabilities, even partially, carries real value beyond just the technical fix.
Anthropic hasn’t said when accepted projects will start receiving reports. No details on turnaround times or report formats have been made public. The company is still evaluating. But the queue is forming, and the crypto industry is near the front of it.
ZEUS’s focus on Lightning network connections is worth watching specifically — Lightning is fast-moving, complex, and increasingly handling real payment volume. A vulnerability there could be nasty.
Hub: Bitcoin price, news, and analysis
Frequently Asked Questions
What is Anthropic’s OSS Scanner program?
OSS Scanner is an opt-in service from Anthropic that uses AI models, including Claude Mythos, to scan open-source software and deliver vulnerability reports to participating developers faster than manual review allows.
Which crypto projects applied to Anthropic’s OSS Scanner?
Nethermind, an Ethereum client developer, and ZEUS, a Bitcoin wallet, are among the first applicants, along with VirtEngine, a decentralized cloud computing platform.
