Bitcoin is built on a simple principle: don’t trust. Verify.
But verification doesn’t happen automatically.
Software has to be reviewed. Assumptions have to be challenged. Vulnerabilities have to be found before someone with bad intentions finds them first.
The Coldcard incident was a painful reminder of that reality — and it helped spark a response from Bitcoiners who decided that waiting for the next vulnerability to surface wasn’t good enough.
That response became the Bitcoin Red Team.
Coldcard Was a Wake-Up Call
A firmware flaw affecting a popular Bitcoin hardware wallet led to losses from self-custody wallets and raised difficult questions about how vulnerabilities in widely used Bitcoin software can go undetected.
The bigger lesson went beyond any one company or hardware wallet.
Open-source code can be inspected by anyone. That doesn’t mean someone is actually inspecting every line of it.
Bitcoiners talk about verification for good reason. But as the ecosystem grows — wallets, libraries, signing devices, infrastructure, applications and developer tools — so does the amount of code that needs serious security review.
And today, the tools available to both defenders and attackers are getting more powerful.
The answer can’t simply be to hope that the right person notices the next critical flaw in time.
Enter the Bitcoin Red Team
In the aftermath of the Coldcard incident, volunteer security researchers mobilized to proactively examine open-source projects across the Bitcoin ecosystem.
The idea behind a red team is simple:
Think like an attacker before the attacker gets there.
Instead of waiting for vulnerabilities to be exploited in the wild, researchers deliberately look for weaknesses, test assumptions, investigate suspicious code and responsibly disclose findings to the developers and maintainers who can address them.
The Bitcoin Red Team began auditing hundreds of open-source Bitcoin projects and identifying potential security issues across the ecosystem.
This isn’t about attacking Bitcoin.
It’s about attacking the assumptions around Bitcoin software so the software gets stronger.
Open Source Still Needs Auditors
One of Bitcoin’s greatest strengths is that its software can be independently inspected.
There is no requirement to blindly trust a corporation telling you that everything behind the curtain is secure. The code can be examined, tested and challenged.
But there’s an important distinction:
Open source means auditable.
It does not mean audited.
Someone still has to do the work.
That means researchers digging through repositories. Whitehats reproducing potential vulnerabilities. Maintainers reviewing disclosures. Developers creating fixes. And people willing to deliberately break things in controlled environments so Bitcoiners don’t discover those weaknesses after real money is already at risk.
That work rarely receives the attention that price charts, mining announcements or new products receive.
But for anyone who believes self-custody matters, security research matters too.
Why FOMO21 Is Supporting the Bitcoin Red Team
FOMO21 exists because we believe Bitcoin represents more than an asset or a ticker on a screen.
Bitcoin is about ownership, self-sovereignty and the ability to hold value without asking permission.
None of that works very well if the tools people depend on for self-custody aren’t being aggressively tested.
So we created the Bitcoin Red Team Collection to support the people willing to do that work.
100% OF NET PROFITS
from the FOMO21 Bitcoin Red Team Collection will go to the Bitcoin Red Team via OpenSats through December 31, 2026.
This isn’t a percentage of one item or a limited launch-day promotion. It applies to the net profits from the Bitcoin Red Team Collection during the campaign period.
You get Bitcoin apparel built around the mission.
The people doing the security work get more support.
Shop the full Bitcoin Red Team Collection →
Bitcoin Red Team T-Shirt
The Bitcoin Red Team T-Shirt is the centerpiece of the collection.
It’s a salute to the auditors, whitehats, maintainers and Bitcoiners willing to hunt for vulnerabilities before attackers find them.
Rep the people defending Bitcoin.
SHOP THE BITCOIN RED TEAM T-SHIRT →
Only the Paranoid Survive
There’s a reason this phrase belongs in a collection about Bitcoin security.
Verify the firmware. Check the address. Protect your seed. Question assumptions.
In self-custody, a little paranoia can be a feature.
SHOP ONLY THE PARANOID SURVIVE →
Bitcoin Red Team Rally T-Shirt
The Bitcoin Red Team Rally T-Shirt takes the message beyond security researchers themselves.
It’s for the broader Bitcoin community that understands why independent review, responsible disclosure and adversarial thinking matter.
SHOP THE BITCOIN RED TEAM RALLY T-SHIRT →
Security Is Part of Self-Custody
Bitcoin gives individuals the ability to take control of their own money.
With that power comes a very different security model from the traditional financial system.
There is no help desk that can reverse a Bitcoin transaction. There is no bank that can reset your seed phrase. Self-custody means responsibility ultimately sits with the holder — and with the tools that holder depends on.
That’s why security work deserves support before another crisis happens, not just after one.
The Coldcard incident showed what can happen when something important gets missed.
The Bitcoin Red Team represents a different approach:
Go looking.
Question everything.
Find the weakness first.
Disclose it responsibly.
Make Bitcoin’s tools harder to break.
Shop the Collection. Help Defend Bitcoin.
FOMO21 is proud to support the Bitcoiners doing this work.
100% of net profits from the Bitcoin Red Team Collection go to the Bitcoin Red Team via OpenSats through December 31, 2026.
DON’T TRUST. VERIFY.
Campaign terms: 100% of net profits from products in the FOMO21 Bitcoin Red Team Collection will go to the Bitcoin Red Team via OpenSats through December 31, 2026.
