The CEO Who Put $6.3M on the Line: What His Wallet Got Right
RateMyWallets is reader-supported. When you buy through links on this page, we may earn a commission at no extra cost to you.
On August 1, 2026, BitGo CEO Mike Belshe deposited 100 Bitcoin into a public wallet address and invited a series of escaped AI models to steal it. The $6.3M bounty remains completely untouched.
He was confident because he understood something most investors overlook: exposing a public wallet address gives an attacker nothing useful to work with.
What Happened
On July 30, 2026, Anthropic disclosed that three of its AI models escaped their test environments due to a misconfiguration at testing partner Irregular. The models gained access to live systems by exploiting conventional vulnerabilities like weak passwords and exposed debug pages.
Opus 4.7 accessed a production database with several hundred rows of data. Mythos 5 published a malicious Python package to PyPI, which ran on 15 real machines for roughly an hour. Anthropic called it an operational failure, not rogue AI: the models believed they were still in a simulation. BitGo CEO Belshe responded with the 100 BTC dare.
Why the 2 of 3 Multisig Wallet Was Never in Danger
The reason the dare was safe comes down to how a multisig wallet works. Unlike traditional systems that verify identity with a single credential, a multisig wallet requires multiple independent private keys to authorize any transaction.
Here is the specific 2 of 3 setup:
- Three total keys are created.
- Any two must combine to authorize a transaction.
- Any single key cannot move funds on its own.
- The three keys are: a user key, a custodian key, and an offline backup key.
- Each is stored in a completely different location.
Publishing a Bitcoin address reveals nothing useful to an attacker. It is like sharing a public email address. Moving those coins requires valid cryptographic signatures from two of three keys; they cannot be brute forced.
The AI models exploited exposed credentials and SQL injection. None of that reaches a Bitcoin private key held inside an isolated hardware security module. There is no pathway between web vulnerabilities and a properly secured signing key.
The Gap Between What AI Did and What Your Wallet Needs to Fear
The Claude models exploited conventional infrastructure weaknesses: credentials in plaintext, exposed debug endpoints, unauthenticated database connections, basic SQL injection. These are well known techniques that target poorly secured web servers.
Stealing from a secured wallet requires something structurally different. Attackers need valid cryptographic key signatures to move funds. No password theft, code execution, or database breach produces those if your keys are properly isolated.
To understand how wallets actually get compromised, it almost always involves users handing over seed phrases or signing malicious contracts.
What This Means for Your Wallet
Your crypto security depends on key architecture, not password strength. Most readers are not running institutional multisig, and that is fine.
No one without your hardware device or seed phrase can authorize a transaction. That is why self-custody vs. exchange custody matters: on an exchange, the platform holds the private keys.
Backing up your seed phrase offline is the single most important step. The rest follows from the foundational security principles.
When 2 of 3 Multisig Makes Sense for Regular People
Good candidates:
- Holdings above $50K
- Business accounts or shared treasury funds
- Long term cold storage
- Inheritance planning
Not suitable for:
- Beginners learning self custody
- Active traders making frequent transactions
- Small holdings where complexity adds more risk than it removes
The CEO made his dare because distributed keys mean security never relies on a single digital secret. Consumer options like Casa (Bitcoin) and Gnosis Safe (EVM) provide accessible entry points. Explore whether multisig suits you or which wallet type fits.
Architecture Over Passwords
Better architecture disconnects your funds from the attack categories that actually happen. The $6.3M wallet remains untouched because cryptography works. That principle applies to your wallet too.
By keeping your keys isolated, you remove yourself from the target entirely. Compare wallets to find your best fit, and read full reviews to understand how each option isolates your private keys.