open-source

Bitcoin News posted on the X platform that after two weeks of using cutting-edge AI to scan almost the entire Bitcoin open-source ecosystem for vulnerabilities, Bitcoin Red Team member @callebtc stated, "The easily discoverable vulnerabilities have been addressed," and maintainers are verifying "a large number" of serious and high-risk vulnerabilities.@callebtc indicated that the main findings include: decades of accumulated open-source technical debt are being exposed alongside AI capabilities that can discover vulnerabilities at speeds and scales unattainable by human researchers; Lightning seems particularly vulnerable, with its complexity meaning its security status is "worse than average"; unmaintained Bitcoin projects should be considered vulnerable until their security is confirmed.Projects that began building AI security and auditing processes months ago are now in a completely different position compared to those that have been waiting until now. The Bitcoin Red Team has now completed a foundational scan of almost the entire Bitcoin open-source ecosystem. Easily discoverable vulnerabilities have mostly been addressed, but as AI capabilities improve, external red team testing may need to continue indefinitely. Despite discovering and reporting "a large number" of real serious and high-risk vulnerabilities, @callebtc believes this process will ultimately make Bitcoin stronger. The same AI security review will soon expand to areas far beyond Bitcoin.

The Trump administration will revise the new artificial intelligence guidelines to expand regulation of AI models. The White House has developed a set of AI frameworks that require U.S. laboratories to undergo safety testing by the federal government before public release. In the coming months, this framework is expected to cover open-source models, which will be included in testing once their capabilities reach the same level as Anthropic's Mythos-level models and OpenAI's GPT-5.6.

According to The Information, Nvidia is developing a new open-source AI model called Nemotron 4.Several Nvidia employees involved in the development of the NEMOTRON project stated that they expect the largest NEMOTRON 4 model to have at least 1 trillion parameters.

Meta Platforms (META.O) launched Muse Glimmer, an open-source agent model that can run on Mac or PC.

According to Reuters, Alibaba plans to require its next-generation Qwen open-source AI model's heavy commercial users to share a portion of their revenue with it. This initiative is similar to the approach taken by Moonlight Dark Side with Kimi K3: the licensing terms for Kimi K3 stipulate that if the model is sold as a service and the annual revenue exceeds $20 million, a commercial agreement must be negotiated with Moonlight Dark Side, with reports suggesting a revenue-sharing ratio of up to 30%. The specific revenue-sharing ratio for Alibaba is still under discussion.The report points out that such revenue-sharing agreements have gradually taken shape between Chinese AI companies and American cloud platforms. Several American cloud providers, including DigitalOcean, have signed commercial agreements with Moonlight Dark Side. In terms of pricing, the input/output token price for Kimi K3 is about one-third that of the Anthropic Fable model. Additionally, Thinking Machines Lab, founded by former OpenAI CTO Mira Murati, has also joined the open-source camp and released its first open-source model last month. This move signifies that Chinese AI companies are exploring sustainable commercialization paths on open-source models through a "free open-source + commercial charging" freemium model.

Jensen Huang announced on the X platform the launch of Alpamayo 2 Super, a cutting-edge open-source inference model developed by NVIDIA for the autonomous driving field. Jensen Huang stated that Alpamayo 2 Super can not only "see" the environment but also understand and reason about the complex world, thinking before acting, and can serve as the core model for robot taxis, autonomous trucks, shuttles, delivery vehicles, agricultural machinery, and future large-scale mobile robot systems.The model will be based on OpenMDW-1.1 and made available for commercial use, allowing developers and enterprises to inspect, fine-tune, and deploy the model. Jensen Huang mentioned that open models help promote the safety and reliability of autonomous driving systems. He stated that the next wave of artificial intelligence will belong to robotics, and autonomous vehicles will be an important starting point for this trend.

Galaxy Research Research Director Alex Thorn stated that the attack targeting Coldcard wallet address generation is still ongoing. They are currently continuing to collect victim information and adding new victim addresses and attacker addresses to the investigation database.If users are still using affected Coldcard single-signature addresses, they should immediately migrate their funds. According to current investigation results, all single-signature Coldcard addresses generated after the firmware upgrade in March 2021 may ultimately be emptied by attackers; it is just a matter of time.According to Galaxy Research's analysis, the first three confirmed rounds of attacks exhibit highly programmatic characteristics, with similar attack transaction patterns. A large amount of stolen Bitcoin remains in the attackers' addresses and has not yet been transferred.At the same time, some new opportunistic attackers are emerging, transferring and laundering funds through methods such as stripping the funding chain, cross-chain services (like ThorChain), and overseas betting platforms.Additionally, Alex Thorn mentioned the limitations of AI tools in security investigations. Some large language models in the United States have restricted researchers' ability to track stolen funds, and the team has even had to turn to Chinese open-source AI models to assist in protecting user assets and conducting on-chain tracking.He finds this phenomenon "incredible" and plans to promote discussions on related issues at the government and industry levels. Alex Thorn concluded by stating that a large amount of stolen funds remains stagnant, and the team is continuously tracking relevant addresses, having shared information with relevant U.S. agencies and industry partners. He calls on the Bitcoin community to learn from this incident, strengthen self-custody security education, and raise awareness of wallet complexity.

According to X user Rohan Paul, when the OpenAI model breached Hugging Face, Anthropic's Claude 5 refused to assist in the investigation, and Hugging Face ultimately turned to Nvidia's quantized version of GLM 5.2 for emergency response.The user commented that banning open-source models would weaken the defense's capabilities, and this incident confirms the practical value of open-source models in security response.

The Kimi.ai team has opened the Kimi K3 model weights and technical report while gradually open-sourcing multiple underlying infrastructures: including the high-performance communication library MoonEP for distributed MoE training, the distributed environment system AgentENV for large-scale agent workflows (in collaboration with kvcache-ai), and the Kimi Delta Attention high-performance kernel FlashKDA based on CUTLASS.The official statement claims that these components can reduce communication and inference overhead in large-scale MoE and agent reinforcement learning training, and can be used as a plug-and-play backend for flash-linear-attention.

According to Bitcoin Magazine, Jack Dorsey, the founder of Block (formerly Square), announced the launch of the open-source decentralized group chat application Buzz, aimed at challenging team collaboration platforms like Slack. Buzz is built on the decentralized social protocol Nostr and is designed for teams composed of humans and AI agents, supporting chat, project management, coding, and PR collaboration.Block stated that the application is decentralized and open-source, allowing users to have full control over their data, and teams can collaborate with members and dedicated agents in a shared space.

David Sacks, Chairman of the President's Council of Advisors on Science and Technology, stated on the X platform that using regulatory uncertainty as a competitive tool is "completely unacceptable." Regulatory decisions should be based on facts, logic, and evidence, rather than deliberately creating fear and uncertainty (FUD). He is unsure whether venture capitalist and AI policy researcher Dean Ball is acknowledging a strategy of "regulatory capture" or merely predicting that such a situation will occur. However, in any case, the practice of issuing "soft law" warnings through regulatory agencies to create market panic, thereby forcing regulated companies away from Chinese open-source models, should not be accepted.David Sacks pointed out that Dean Ball believes there is no need to directly ban Chinese open-source models; it is sufficient to guide regulatory agencies to issue relevant warnings, which can influence corporate decision-making by creating enough doubt and uncertainty, and these reasons "do not even need to be very substantial." Any regulatory decision must have sufficient basis, rather than implementing policies by "artificially creating doubt." He warned that this practice of circumventing public deliberation procedures not only undermines the foundation of the rule of law but may also open the door to regulatory abuse against any company or individual in the future.David Sacks further stated that current AI policy is at a critical turning point. Leading closed-source laboratories, which have already formed a duopoly in AI model revenue, are attempting to use government power to eliminate open-source competitors. He called on other companies and developers in Silicon Valley that still support open competition to make clear statements to jointly maintain an open ecosystem in the field of AI.

According to a report by The Paper, at the 2026 World Artificial Intelligence Conference, renowned futurist and "father of the Silicon Valley spirit" Kevin Kelly stated in a media interview that if one day everyone starts to care about the cost of tokens, the existence of open-source models would be an advantage for Chinese AI.Kevin Kelly mentioned that the cost of token consumption is becoming increasingly important, and currently, it seems that people do not care about the cost. "But I believe that when we are constantly consuming such a large number of tokens, people will start to care (about the cost). If you can provide a cost that is only one-tenth of Anthropic's, then it will change the game."However, Kevin Kelly also reminded that the open-source model requires sufficient funding to maintain operations, as it is not as profitable as the closed-source model. "Building these large models requires massive funding."

B.AI announced that the Kimi K3 model is officially launched on its API platform, seamlessly integrated after the release by @Kimi_Moonshot. As the world's first open-source 3T level (28 trillion parameters) model, Kimi K3 has made significant breakthroughs in long-range programming, complex reasoning, and knowledge work, and natively supports visual capabilities and 1M ultra-long context. As a model aggregation service platform, B.AI has prioritized opening its API interface, allowing developers to directly experience the capabilities of the new generation model through B.AI. B.AI will continue to provide efficient and stable interface services to promote the rapid implementation of cutting-edge AI technology and empower developers' innovation.

According to CoinDesk, hardware wallet company Ledger has launched an open-source toolkit called Ledger Agent Stack, which supports AI agents to interact with crypto wallets by reading balances, preparing transactions, and suggesting actions, with all transactions requiring user approval on Ledger hardware devices.Ledger stated that this release is the first step in its AI roadmap, aiming to integrate hardware-based security mechanisms into AI-driven crypto applications and to prevent autonomous agents from transferring funds or accessing sensitive credentials without human approval.

According to official news, the token distribution and streaming payment protocol Sablier Labs has announced the cessation of active product development and commercial operations, entering maintenance mode from today until June 2028. The official statement indicated that due to the sluggish environment of the cryptocurrency market and the lowered technical barriers from AI-assisted programming, the on-chain token distribution sector can no longer support its venture capital-scale business model.Sablier emphasized that its underlying smart contracts run on-chain without permission, and the company does not hold funds, so the assets, streaming payments, and token unlocks of existing users are not affected. However, regarding front-end business restrictions, the official interface will no longer accept new plans with end times later than June 2028 or indefinite payment streams from today.At the same time, to promote the project's transition to a community-led open-source public good, Sablier has advanced the open-source date of its main EVM smart contracts from the originally planned 2029 to today, and the license has officially changed from BUSL to GPL, allowing the community to freely fork and deploy.

According to official news, Circle announced the open-source Agent Stack startup kit, allowing developers to integrate wallets, USDC payments, and on-chain operations into AI Agents, supporting mainstream AI Agent development frameworks such as OpenAI Agents SDK, Anthropic Agent SDK, LangChain Deep Agents, Mastra, Vercel AI SDK, and Google ADK.Circle stated that developers can directly clone example projects based on the framework they are using and start building AI Agent applications.

According to a report by Reuters, the latest data released by Citi shows that driven by the demand for companies to cut AI spending, the market adoption rate of low-cost open-source models is rapidly increasing. In June of this year, the proportion of open-source model Tokens processed on the AI aggregation platform OpenRouter surged from 34% in January to 65%.Citi specifically pointed out in the report that the cost difference is a core factor driving this trend. The data shows that some Chinese open-source large models are continuously narrowing the performance gap with leading models in the United States, while their charges are as low as 18 cents per million Tokens, whereas the average charge for leading large models in the industry is about 4 dollars, resulting in a cost difference of over 20 times.

According to Bitcoin News, Dario Amodei, co-founder and CEO of Anthropic, stated to lawmakers in the U.S. Congress that the development of open-source AI is entering a "very dangerous path." Once powerful AI models are released in open-source form, developers will lose effective oversight over the usage of the models, including the inability to monitor abuse, revoke access, or dynamically update security mechanisms, thereby increasing potential risks.Dario Amodei mentioned that compared to closed model systems, fully open models are more difficult to implement continuous control over security governance, which may lead to irreversible abuse risks.

The Chief Information Security Officer of Slow Fog, 23pds, stated that researchers have exposed a high-risk vulnerability in CI/CD called Cordyceps, affecting the open-source repositories of major companies such as Microsoft, Google, Apache, and Cloudflare. Attackers do not need corporate accounts or any system permissions; they can simply register a free GitHub account, submit a malicious PR, and leave a comment to forge approvals, steal server keys, and push malicious code, completely taking control of the corporate code repository.