Sixteen volunteers spent 27.5 hours combing through 390 open-source Bitcoin repositories last week, and one of them summed up what they found in a single line: "We're averaging on the order of 1 critical exploit per hour per person." That volunteer is Calle, a pseudonymous Bitcoin developer and PhD physicist who maintains the Cashu ecash protocol and built the Android implementation of Bitchat, a Bluetooth-mesh chat app that moves Bitcoin without an internet connection. Calle is a working developer whom almost nobody outside Bitcoin's core development circles could have named before this month.
That changed the moment the sweep he helped organize turned up 4,962 findings, including 85 critical, across 390 projects, funded by OpenSats at roughly $40,000 in compute costs. Phemex covered that audit as an event on Sunday. This piece is about the person who runs the protocol behind it, the ecash system almost nobody has explained well, and what his volunteer work says about who actually keeps Bitcoin's software safe.
Why Calle Matters After Bitcoin's Biggest Volunteer Security Sweep
Calle has been a fixture of the Bitcoin and Lightning developer community for years, mostly known inside it rather than outside it. He open-sourced Cashu in October 2022, according to Bitcoin Magazine, and has maintained it since through Nutshell, the reference mint implementation, the Cashu protocol's own specification repository, and the Cashu.me wallet that most users touch first. He is a regular speaker at events including BTC Prague and appears frequently on Bitcoin-focused podcasts, where the same theme keeps coming up. Privacy on Bitcoin is unfinished business, and the people building the missing pieces mostly do it as volunteers.
The Red Team audit is why that fact suddenly matters to a much wider audience. Calle was one of roughly 16 researchers who organized the sweep after July's Coldcard firmware exploit exposed how little continuous review Bitcoin's supporting software actually gets. His line about averaging one critical exploit per hour per person was not a marketing flourish. It was a researcher describing, in real time, how much had been sitting unexamined in code that wallets, exchanges and everyday Bitcoin users depend on.
What Ecash and Cashu Actually Are
Ecash is one of the older ideas in digital money, older than Bitcoin itself, and almost no general-audience explainer of it exists despite how often the term now comes up in Bitcoin privacy conversations. Ecash is a bearer-token scheme. A central party called a mint issues digital tokens, and whoever holds a valid token can redeem it, the same way a physical dollar bill works. The privacy trick is that the mint uses a cryptographic technique called blind signing to issue those tokens without ever learning which specific token it handed to which specific user, so it cannot connect a person's identity to how they later spend or redeem it.
Cashu applies that model on top of Bitcoin and the Lightning Network. A user deposits Bitcoin into a Cashu mint, receives blinded ecash tokens in return, and can then send those tokens to anyone else instantly, including with no internet connection at all if the transfer happens locally, before eventually redeeming them back into Bitcoin or Lightning payments through the mint. The tokens themselves are just data, small enough to fit in a QR code or pass over Bluetooth, which is exactly what makes offline use possible. Cashu's own specification process mirrors the model Bitcoin itself uses for protocol proposals, a public, versioned record of exactly what a wallet or mint must implement to be compatible.
The tradeoff is the part worth stating plainly. A Cashu mint is custodial. The user is trusting that operator to hold the underlying Bitcoin in full and to redeem tokens on request, which is a meaningfully different risk than the one weighed in comparisons of self-custody hardware wallets, where the entire point is removing that kind of counterparty trust. What a user gains in exchange is strong transaction privacy, since the mint cannot see who is transacting with whom once tokens are issued, plus instant settlement and the ability to transact with zero internet access. That combination appeals strongly to people who value privacy and offline resilience over holding their own keys at every step, and it appeals far less to Bitcoin users for whom self-custody is the entire point. Neither group is wrong, since each is simply optimizing for different priorities within the same protocol.
|
Method
|
Privacy
|
Custody
|
Speed
|
|
On-chain Bitcoin
|
Pseudonymous, permanently visible on a public ledger
|
Self-custodial when you hold your own keys
|
Minutes, depending on fees and confirmations
|
|
Lightning Network
|
Stronger than on-chain, though routing nodes can see payment metadata
|
Self-custodial with a funded channel, or custodial through a wallet provider
|
Near-instant, usually sub-second
|
|
Cashu ecash
|
Strong, the mint cannot see who holds a token once it is issued
|
Custodial, users trust the mint to redeem tokens in full
|
Instant, and works with no internet connection
|
Bitchat and the Case for Offline Bitcoin Transfers
Bitchat is a Bluetooth-mesh chat app, originally released by Jack Dorsey, that lets phones relay messages device to device with no cell towers, routers or servers involved. Calle built and maintains the Android implementation, and it is where his ecash work becomes tangible for an ordinary user rather than a protocol diagram. His version integrates Cashu and Lightning directly into the chat interface, so a message thread can also carry a payment, redeemable the moment both phones are back in Bluetooth range of each other.
That matters most exactly when normal infrastructure fails. Bitchat saw close to 50,000 downloads from Nepal in a single day during last September's unrest, and usage spiked again in Iran and India during periods of network restriction, according to reporting at the time. An ecash-and-Lightning payment layer riding on top of that mesh means value can move under the same conditions that make a phone call impossible, without waiting for a bank, an exchange or even a cell signal to come back online. It is a narrow use case by design, and it is precisely the use case where custodial ecash's tradeoffs stop being theoretical.
The Red Team Audit in Context
Phemex already covered the Red Team sweep itself as Sunday's story, so the numbers deserve one clean restatement rather than a rerun. Sixteen volunteers reviewed 390 open-source Bitcoin repositories in 27.5 hours, logging 4,962 findings, of which 85 were flagged critical, funded by OpenSats at roughly $40,000 in compute. What that figure does not mean is 85 exploitable holes sitting inside Bitcoin's core protocol. It means 85 critical-severity issues scattered across a much wider surface of 390 separate projects, ranging from wallets and infrastructure tools to cryptographic libraries, most of which sit well outside Bitcoin Core itself. The trigger for the sweep was July's Coldcard firmware exploit, and the same fragility shows up across DeFi's own long history of bridge and infrastructure exploits.
Calle's role in that sprint was not incidental to his day job. Building and maintaining Cashu means he has spent years auditing his own cryptographic assumptions under the kind of scrutiny that catches subtle bugs before they become the next Coldcard. That background is a large part of why he ended up organizing a review effort rather than just contributing findings to one.
Who Actually Maintains Bitcoin's Periphery
The uncomfortable question the Red Team audit raises is not about any single vulnerability. It is about who is actually paid to look after the hundreds of repositories that wallets, exchanges and everyday users quietly depend on. Bitcoin Core itself gets sustained attention from a relatively well-resourced group of maintainers. The 390 repositories the Red Team swept mostly do not, and Calle's own Cashu work is a case in point. It is a protocol securing real user funds, maintained through a mix of open-source contribution and periodic grants rather than a payroll.
A roughly $40,000 grant covering a 27.5-hour volunteer sprint is the clearest evidence of how thin that coverage actually is. OpenSats exists specifically to plug this gap, and it funded both the audit and Calle's own long-term support grant for Cashu. The real point is one of scale, the same one that comes up whenever an under-profiled technical figureturns out to be doing outsized, thankless work behind a field's most visible headlines. A single weekend of concentrated attention from 16 people surfaced nearly 5,000 issues across code that real money already moves through. Volunteer-funded security review of financial infrastructure is structurally fragile by definition, dependent on a handful of people choosing, unpaid or grant-funded, to keep looking. The Red Team's own plan to open-source its AI-assisted review harness is one attempt to make that coverage less dependent on any one person's weekend, and its adoption rate across those 390 projects is the real story to watch after this one. None of this moves with Wednesday's CPI print, the macro story running elsewhere on Phemex today.
Frequently Asked Questions
What is Cashu?
Cashu is a free, open-source ecash protocol that runs on top of Bitcoin and the Lightning Network, letting users hold and transfer blinded digital tokens issued by a mint. It was open-sourced in October 2022 and gives users strong transaction privacy and instant, even offline, transfers in exchange for trusting the mint to custody the underlying funds in good faith.
Who is Calle?
Calle is a pseudonymous Bitcoin developer and PhD physicist who created and maintains the Cashu ecash protocol and the Android implementation of Bitchat, a Bluetooth-mesh messaging app. He was also one of roughly 16 volunteers behind the August 2026 Bitcoin Red Team security sweep that reviewed 390 open-source repositories in 27.5 hours. No legal name for Calle has been publicly established, and he operates by design under a pseudonym.
Is ecash safe to use?
Ecash is cryptographically strong for privacy, since a properly designed mint cannot link a token to the person who redeems it, but it is custodial by design. Users are trusting the mint operator to hold Bitcoin honestly and to honor redemptions, which makes mint selection, not the cryptography, the main practical risk for anyone holding Cashu tokens.
What is Bitchat?
Bitchat is a decentralized messaging app that connects nearby phones over a Bluetooth mesh network with no internet, servers or phone numbers required. Calle's Android implementation adds Cashu and Lightning support directly into the chat interface, letting users send Bitcoin payments alongside messages even when both devices are offline.
Bottom Line
If you use self-custody wallets and hold your own keys as a non-negotiable, Cashu is not a fit for the funds you care most about protecting, because a mint's custody is exactly the tradeoff you are trying to avoid. If privacy and offline resilience matter more to you than holding every satoshi yourself, a well-run Cashu mint gives you both in a way on-chain Bitcoin and even Lightning currently cannot match. If you are evaluating which Bitcoin-adjacent projects deserve trust, the Red Team's own numbers are the clearest benchmark. 390 repositories reviewed, 4,962 findings, 85 critical, for roughly $40,000 in volunteer-organized compute is not a scandal. It is a baseline showing how much of Bitcoin's real security work still depends on people like Calle choosing to show up. Watch for adoption of the Red Team's promised open-source review harness across those 390 projects. That, more than any single finding, will determine if this sprint was a one-time correction or the start of continuous coverage.
This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency trading involves substantial risk. Always conduct your own research before making trading decisions.
