Finding security flaws in Bitcoin code has traditionally required either deep pockets or deep expertise, usually both. Block’s open-source Bitcoin division, Spiral, just shipped a tool that tries to change that equation.
Loupe is a free, AI-powered vulnerability scanner built specifically for open-source Bitcoin projects. It’s designed to run continuous security checks throughout the development cycle, giving smaller teams something closer to the safety net that well-funded projects take for granted.
What Loupe actually does
The core pitch is straightforward. Loupe scans open-source Bitcoin codebases for security flaws using AI, and it does so at no cost to the developers using it.
Spiral hasn’t disclosed the specific AI models or technical architecture powering the tool. What we do know is that it’s purpose-built for the Bitcoin ecosystem rather than being a general-purpose code scanner rebranded with a Bitcoin logo.
Why this matters for Bitcoin development
Many Bitcoin ecosystem projects are maintained by small teams, sometimes just a handful of developers working part-time or funded by grants. A vulnerability in a popular Bitcoin library doesn’t just affect that library. It can cascade through every project that depends on it.
Loupe represents an attempt to democratize one layer of security tooling. If a two-person team building a Bitcoin wallet can run the same kind of automated vulnerability scanning that a company like Block uses internally, the baseline security of the entire ecosystem improves.
Block’s bigger Bitcoin bet
Block, the company formerly known as Square, has been steadily building out its Bitcoin infrastructure for years. Spiral functions as the company’s open-source Bitcoin development arm, funding developers and building tools that benefit the broader ecosystem. Spiral has funded work on the Bitcoin Development Kit, Lightning development, and various other open-source initiatives. Loupe is the latest addition to that portfolio.
AI-powered code analysis has become a crowded space in general software development, with tools from GitHub, Snyk, and others competing for developer attention. But Bitcoin-specific tooling remains a niche that mainstream security vendors haven’t prioritized. By building a Bitcoin-native scanner rather than adapting a general-purpose tool, Spiral is betting that domain specificity matters more than broad coverage.