๐ฉ Bitcoin Red Team update 55 hours into the campaign
We're now 24 people working around the clock.
We've scanned 425 projects so far and have produced 1029 high+critical (H+C) findings.
We generated 6700 findings so far and are hitting 7.7 projects per hour.
Our H+C rate per person per hour is back at ~1 as we work off a massive backlog and as the team grows and naturally divides up roles.
We have hunters, wizards, outreachers, sugar daddies, and gigglers.
Our H+C ratio is at 15.4% of all findings, increased by a percentage point compared to yesterday.
This is great, our accuracy is stable, and even slightly increasing. We're trying out best to reproduce all critical findings in local regtests before reporting them to projects.
Our biggest bottleneck is outreach. Most projects don't have a SECURITY .md in their repos (19.5%). Only 13.1% have an email in there.
We're working on better ways to reach folks. In the mean time, the best thing you can do as a project maintainer is to leave an email address in your repo.
Thank you to the sponsors and donors who cover the costs of this campaign and help to keep it alive.
Specifically @OpenSats, FPuklowski, @vik sharma, and everyone who has donated to OpenSats Red.
An incredible team of some of the most hard core Bitcoiners I know have assembled and dedicated their last days to this effort.
We've seen shit.
I don't want to reveal anyone personally, they can choose to do that themselves, but I think the way that people came together to join forces was and still is the most beautiful part about this entire program.
It makes me very hopeful, seeing so many people step up and give their time and energy to Bitcoin, especially during times of pain.
We're not done yet.

We generated 6700 findings so far and are hitting 7.7 projects per hour.
Our H+C rate per person per hour is back at ~1 as we work off a massive backlog and as the team grows and naturally divides up roles.
We have hunters, wizards, outreachers, sugar daddies, and gigglers.

Our biggest bottleneck is outreach. Most projects don't have a SECURITY .md in their repos (19.5%). Only 13.1% have an email in there.
We're working on better ways to reach folks. In the mean time, the best thing you can do as a project maintainer is to leave an email address in your repo.
Thank you to the sponsors and donors who cover the costs of this campaign and help to keep it alive.
Specifically @OpenSats, FPuklowski, @vik sharma, and everyone who has donated to OpenSats Red.

OpenSats
Red Team Fund - OpenSats
Funding for people red teaming Bitcoin software.
