BitGo Chief Executive Officer Mike Belshe has placed 100 bitcoin, valued at roughly $6.3 million, into a publicly disclosed wallet and invited Anthropic’s Claude models to transfer the assets. The challenge followed Anthropic’s disclosure of three incidents in which its artificial intelligence systems accessed real company networks during cybersecurity evaluations.

Anthropic’s Evaluation Incidents

On July 30, Anthropic released findings from a review of 141,006 cybersecurity evaluation runs. The company reported that in three cases, Claude models reached the public internet after evaluation environments operated by third-party partner Irregular were mistakenly left connected rather than isolated.

The models involved were Claude Opus 4.7, Claude Mythos 5, and an unreleased internal research model. Each had been assigned capture-the-flag style tasks inside what were intended to be simulated systems. Because of the configuration error, the models interacted with live infrastructure at three separate organizations.

In the most detailed incident, Opus 4.7 recovered credentials and accessed a production database containing several hundred records after locating a real website that shared a name with its simulated target. Mythos 5 uploaded altered software to a public code repository that subsequently executed on 15 real machines within an hour. Anthropic stated that the models continued operating under the belief that the environments remained part of the evaluation and that the events stemmed from the setup mistake rather than independent or malicious behavior.

Belshe’s Public Challenge

Belshe responded by funding a BitGo wallet with exactly 100 bitcoin on July 31 and publishing the address. He framed the action as a direct test of real-world capability.

Blockchain records confirm the wallet received the 100 bitcoin on July 31 and that the full balance remained unspent through early August. Any successful transfer would appear immediately on the public ledger.

This is not Belshe’s first public disagreement with Anthropic. In June he disputed claims that Mythos had breached classified National Security Agency systems, arguing the episode was an authorized internal exercise rather than an external compromise.

Custody Architecture and Practical Barriers

The wallet uses BitGo’s multi-signature design, which requires two of three keys to authorize any transaction. Clients control two keys while BitGo holds one. Compromising the funds would therefore demand access to private keys, devices, or operational processes rather than simply exploiting an exposed test server or weak password.

BitGo’s own regulatory filings note that no custody system can guarantee absolute protection against compromise and reference past industry incidents such as the 2025 Bybit theft. Belshe has positioned the untouched balance as evidence of the gap between misconfigured evaluation environments and production-grade institutional custody.

Current Status

As of the most recent reports, Anthropic had not issued a public response to the specific challenge. The 100 bitcoin remain in the published address with no outbound transactions recorded. The experiment remains fully transparent: anyone can monitor the blockchain address for movement.

Belshe, who co-founded BitGo in 2013 and earlier contributed to the development of the HTTP/2 protocol while at Google, has described the wallet as an ongoing test rather than a one-time publicity gesture. The balance continues to serve as a public, verifiable measure of whether current AI systems can overcome the layered controls used in institutional bitcoin storage.