Dragonfly Partner: AI Code Review Could Have Stopped Coldcard Attack for $2

Haseeb Qureshi, managing partner at crypto venture firm Dragonfly, argued that the recent security incident targeting Coldcard hardware wallets could have been averted through an AI-assisted code review. He estimated the total cost at $2, based on eight minutes of Claude's processing time and the corresponding API rates.

Qureshi acknowledged, however, that the AI model might have simply replicated vulnerability descriptions already circulating in public sources. The admission raises questions about the originality of the AI's analysis, even as it demonstrates how inexpensive automated code audits can be.

Coldcard, a Bitcoin-only hardware wallet, has not yet publicly commented on the specifics of the attack or on Qureshi's proposal.