Odaily Planet Daily reports that Bitgo CEO Mike Belshe deposited 100 BTC into a public Bitcoin address on August 1, worth approximately $6.3 million at the prevailing price, and invited Anthropic’s Claude model to attempt to transfer the funds from the address. On-chain records show that the wallet received the funds on July 31, and as of August 2, no withdrawals had been made.
Anthropic previously disclosed that, during 141,006 cybersecurity evaluation runs, three incidents were identified, with six evaluation sessions involving three models inadvertently interacting with real organizational systems. The affected models included Claude Opus 4.7, Claude Mythos 5, and an unpublished internal research model, due to misconfigurations by the third-party testing partner Irregular that connected the test environment to the internet.
Anthropic stated that Claude Opus 4.7 identified a real website with the same name as a simulated company, recovered infrastructure credentials using weak passwords and exposed services, and accessed a production database containing hundreds of records. The company said the model was attempting to complete its assigned task, not actively bypassing restrictions or pursuing independent goals.
This challenge by Belshe involves BitGo's institutional custody platform, which uses multi-signature or multi-party computation technology to distribute signing authority across multiple independent keys. As of August 2, Anthropic has not publicly responded to this challenge.