OpenAI says AI can scale Linux exploit discovery across crypto infrastructure

Traders Union
All News
Crypto
OpenAI scales Linux exploit discovery

Highlights

OpenAI's system identified 948 Linux Kernel vulnerabilities, generated exploits, and cost $1,279 per instance in testing and remediation.
Benchmarking against Pwn2Own payouts, OpenAI values the 948 vulnerabilities at $18.9 million to $66.3 million, compared to $1.2 million in AI operational costs.
Approximately two-thirds of Ethereum nodes run Linux, making AI-accelerated vulnerability discovery directly relevant for security across crypto exchanges, validators, and node operators.

Linux kernel findings and defensive goal

As reported by CoinDesk, OpenAI says its system can identify vulnerabilities in the Linux Kernel, test them in a sandbox and determine whether they can be turned into working attacks. The company says the model found 948 flaws at a cost of $1,279 per instance and generated an exploit for each case, targeting scenarios in which a user with limited access to a Linux machine escalates privileges and takes full control.

OpenAI says the exploits work on a standard Linux desktop with normal security protections enabled. The company says the system also drafts fixes for the flaws, with human researchers reviewing the results before they are sent to Linux maintainers, and frames the effort as a defensive process aimed at finding weaknesses before malicious actors do.

According to OpenAI, the 948 vulnerabilities are hypothetically worth $18.9 million to $66.3 million when benchmarked against payouts typically seen at hacking contests such as Pwn2Own, versus about $1.2 million in total run costs for the AI. OpenAI says the results show AI can help defenders analyze software proactively and raise the cost of cyber attacks.

Implications for crypto and blockchain operators

For the crypto sector, the disclosure matters because much of blockchain infrastructure runs on Linux-based systems. Ethereum nodes are one example, with about two-thirds using Linux, according to ethernodes.org, making kernel-level security relevant to exchanges, validators, node operators and other service providers across the industry.

Industry security voices argue crypto may be better positioned than many centralized systems to absorb this kind of risk. Mudit Gupta, chief technology officer at Polygon Labs, told CoinDesk that decentralization creates infrastructure diversity and redundancy, which makes crypto more resilient to bugs of this kind than traditional software setups.

Caducus, a blockchain evangelist and security researcher who posts as @chain_linkd on X, says constant exposure to attacks has already strengthened the sector’s defenses. That view suggests the same incentives that make crypto a frequent target also push networks and operators to harden systems more quickly when new vulnerabilities emerge.

Cohere’s planned acquisition of AISLE highlighted how AI firms are expanding into cybersecurity by using models to detect software vulnerabilities at scale. We previously noted that AISLE’s system had already uncovered more than 500 new bugs in widely used software, including multiple OpenSSL vulnerabilities that were fixed after disclosure—underscoring the growing role of AI in proactive, defense-oriented security research.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.