Red Team is an effort to make it appear that all the software in Bitcoin is riddled with bugs. As I said, most of what they'll turn up is inconsequential.
It is happening in parallel with an obvious state-level attack against sovereign hodlers (Coldcard users, Lightning users, BTCPay Server users) seeking to 6102 as many bitcoins as possible.
The former is a coordinated tactic to obfuscate the latter.
Login to reply
Replies (7)
get some sleep, tomorrow is a big day
It was definitely incompetence and hubris.
Mechanic just needs a rallying cry.
Ah yeah, how could I forget the hubris. Seems like a good example of Hanlon's razor.
Most of our software is riddled with bugs. And it doesn't matter if they find 10 million bugs that result in zero funds lost. If they find just 1, just 1, the efforts are worth it to save the life savings of hard working people that are just trying to make their lives better.
Usually you are not running around and screaming that you are finding and fixing bugs, before you found and fixed the bugs....
It's very similar to the [2008 Debian weak SSH key generation bug](https://www.cve.org/CVERecord?id=CVE-2008-0166). In both cases keys were created with insufficient entropy because the developers got error messages they didn't understand and ended up trying to "fix" these errors.
They scanned BTCPay server a day before the exploit. If that's not interesting timing, they're just useless.