Coldcard Vulnerability Discovery via AI Could Cost Only $2, Dragonfly Partner Says Security Hardening Is a Must

Odaily News, Dragonfly Managing Partner Haseeb Qureshi posted on X, stating that the key in the security field has become a cost race—namely, the comparison between the cost for attackers to scan for vulnerabilities using cutting-edge AI and the cost for defenders to invest in AI-powered security hardening. Claude was able to discover the vulnerability within 8 minutes, and GLM reproduced it within 20 minutes, indicating that Coldcard has invested almost nothing in AI security hardening. Qureshi estimates that the discovery cost of GLM 5.2 reproducing the attack is only about $2, meaning it takes just $2 to uncover this vulnerability with AI. He warned that small companies will find it difficult to survive in security-sensitive product sectors, and stated that any security-sensitive product should undergo AI security scanning with every release.