Crypto executives say restricting powerful AI models may initially be justified, but it doesn’t make sense as open-source alternatives become more capable. Many of crypto’s biggest players are still waiting to gain access to powerful new AI models to strengthen their code from attacks, with only a select few having been able to get it. US crypto exchange Coinbase said in June that it hadsecuredaccess to Anthropic’s restricted Mythos model and Zcash’s Zooko WilcoxsaidAnthropic used the model toaudit the Zcash protocolat the request of Shielded Labs, while other major crypto players are seemingly yet to get access. “That’s one advanced frontier model that hasn’t been made available to crypto just yet,” Binance’s chief security officer Jimmy Su told Cointelegraph. “We have been trying to make inroads there. We also talked to other crypto exchanges and our own investors to try to make some progress. But we haven’t gotten the most frontier AI model, like Mythos.” The uneven access creates a new security divide in an industry where exploits can put billions of dollars at risk. While model developers like Anthropic and OpenAI have chosen torestrict their most cyber-capable modelsfrom the public, there are concerns that increasingly powerful open-source alternatives mean crypto firms are left to deal with sophisticated AI-assisted attacks without the most capable tools to defend against them. Anthropic saysMythos 5uses the same underlying model as its publicly available Fable 5, but without safeguards that restrict sensitive cybersecurity work. OpenAI operates a similar tiered system: verified defenders can use GPT-5.5 with “Trusted Access for Cyber,” while its more permissive GPT-5.5-Cyber model is reserved for a smaller group conducting authorized penetration testing. Crypto security executives interviewed by Cointelegraph said there is likely a need to initially restrict access to frontier cyber models, but said continuing to gate them becomes harder to justify once publicly available models approach the same capabilities. Su said Anthropic’s controlled rollout is a responsible approach because newly released models may benefit attackers faster than defenders. “If it enhances the attacker much faster than the defender, then it actually is harming the ecosystem,” he said, adding that a limited testing period could reduce the potential “blast radius.” However, Su said this calculation changes whencompeting modelsbecome more powerful and widely available. “As other more powerful models are being released, the pressure will be on Anthropic to make it more widely available,” he said. The question would be whether defenders can deploy the frontier model as effectively as attackers once it becomes available, he said. Solana Foundation chief information security officer Michael Coates, who joined the foundation in July, also supported safeguards but argued that legitimate defenders need a faster route to them. “I fully understand guardrails for advanced models, but we need to streamline the verification programs, the acceptance programs, to give these models to legitimate defenders,” he said. “We need to make sure that the best models we can get are in the hands of defenders because attackers will have something capable enough.” Blockchain Capital’s Sean Cheetham also supported eventually opening up restrictions, and said that broader availability could ultimately favor defenders as legitimate security researchers greatly outnumber the small groups conducting sophisticated attacks. “If good people can multiply their defense scale… you’re much better off just opening it up and allowing them to defend themselves,” he said. Binance’s lack of access comes despite it being the biggest crypto exchange in the world by daily trading volume. The exchange holds a total of $137.8 billion in assets,accordingto DefiLlama. Crypto custodian Fireblocks, which secures trillions in assets annually, said in April it has sought access to Mythos and at the time, only used Anthropic’s publicly available model for pentesting,accordingto The Information, while Uniswap founder Hayden Adams in JuneslammedFable 5’s safeguards that restrict prompts relating to cybersecurity. The Ethereum Foundation in July said it has been running “coordinated AI agents” to find bugs across its systems, but didn’t disclose which models were being used. Cointelegraph reached out to Ethereum Foundation, Fireblocks and Uniswap to confirm if they have since received access to frontier AI models. Meanwhile, some crypto-adjacent companies have gained access. FIS, which provides technology to banks and partnered with Circle in July last year to let banking clients offer domestic and cross-border payments in USDC,joinedProject Glasswinglast month. Project Glasswing is Anthropic’s gated program for giving vetted cyber defenders and organizations responsible for critical software infrastructure early access to its restricted Mythos models. HackerOne, which provides bug-bounty and security testing services to major crypto exchanges, among others, also said it joined Project Glasswing, though testing is confined to its own infrastructure, not its customers’ programs. Cointelegraph reached out to OpenAI and Anthropic about how many crypto companies have been given access to restricted models. On Monday, Bitcoin swap service Boltz said it haschosen to halt its non-custodial bridgeafter seeing a steady rise in AI-assisted exploits over the past few months. “The pattern is clear: attackers now iterate faster than a team our size can find and patch.” Last week, Bitcoin hardware wallet company Coinkite said a number of its Coldcard devices were exploited due to a flaw in its wallet seed generation, which turned out to be less random than expected. It speculated that the attacker had used AI to review previous versions of the firmware to find and exploit the flaw, despite it using “one of the best available AI models” to review its code just weeks before.