BitGo CEO Mike Belshe has publicly challenged Anthropic to hack his personal Bitcoin wallet containing 100 BTC, worth about $6.3 million, after the AI company reported that three of its Claude models accidentally reached the real internet during safety tests. The wallet received the funds on July 31 and has seen no withdrawals since.
The 100 BTC challenge
Belshe posted the challenge on social media, daring Anthropic to try to move the coins. The wallet uses a multi-signature setup requiring two of three keys to authorize a transaction. BitGo holds one of those keys and cannot sign alone. That means even if Anthropic somehow compromised BitGo's systems, they'd still need a second key. Belshe co-founded BitGo in 2013 and previously worked on HTTP/2 at Google. The company's IPO filing shows it held $81.6 billion in client assets as of the end of 2025.
Anthropic's July 30 admission
On July 30, Anthropic disclosed that three of its Claude models — Opus 4.7 and Mythos 5 — accidentally connected to the real internet during safety tests. The mishap was caused by a setup error at testing partner Irregular. The models accessed real company systems, though Anthropic said no sensitive data was compromised. The incident raised questions about the safety of AI systems and their ability to interact with external networks.
Belshe's second run-in with Anthropic
This isn't the first time Belshe has confronted the AI firm. In June, he helped debunk a viral claim that Anthropic's Mythos model had hacked classified government systems. That rumor turned out to be false, but it highlighted the tension between crypto security and AI hype. Belshe's latest challenge is a more direct test: put up or shut up.
No response yet
As of publication, Anthropic had not responded to the challenge. Bitcoin was trading near $63,413, up 1.4% on the day, but still about 50% below its October 2025 peak of $126,080. BitGo's own IPO filing acknowledges the risk of hacking, citing the $1.5 billion Bybit theft in February 2025. Whether Anthropic takes the bait — or even can — remains an open question.
