About Project Loupe

Project Loupe is a free AI-powered vulnerability scanner for open-source bitcoin projects.

Created by Spiral and Block, Loupe finds vulnerabilities, reports them responsibly, and helps maintainers eliminate them, with the goal of making bitcoin safer and bitcoin holders more secure.

Anyone is free to use Loupe, but they’ll need to bring their own model access and tokens. The security scans we run ourselves, we’ll fund. The eventual goal is to pass control of Loupe to each project’s maintainers so they can audit independently.

To get there, our plan is as follows:

1. Block and Spiral will identify projects interested in having Loupe scan their repositories. Upon completion, we will responsibly disclose any discovered vulnerabilities to the project’s maintainers and seek feedback on how we can improve our outreach process. Then we’ll iterate.

2. Once we’re confident that a robust communication process is in place and we are delivering high-signal, low-noise feedback, we’ll expand security scans to more open-source bitcoin repositories.

3. As projects realize the value of Loupe, we will nudge them to perform the security scans themselves, cutting Block and Spiral out of the loop.

Several well-known projects have already committed to being part of our initial tests, including Bitcoin Core, BDK, LDK, rust-bitcoin, Cashu, Blockstre am Jade, bitcoinj, and SRI. If you’re interested in having Loupe run a security scan on your project, reach out in our Discord.

Feel free to help contribute on GitHub