The-Decoder Anthropic's Claude Automates Code Verification, Uncovers Hundreds of Bugs
Article Content
- •Claude generated 180 million lines of proofs for 239 program entry points across 123 libraries.
- •Hundreds of bugs were uncovered that traditional testing missed, including critical security flaws.
- •The verification process is limited to specific conditions, such as input sizes under 64 MB.
Anthropic, in collaboration with Theorem, utilized its AI model Claude to generate 180 million lines of mathematical proofs for 239 entry points across 123 open-source libraries. This process aimed to verify that the libraries would not crash under specific tested conditions, although it does not guarantee universal correctness or security. The verification effort revealed hundreds of bugs that traditional testing methods had overlooked. The proofs generated are limited to certain conditions, such as inputs smaller than 64 MB. The independent verification tool Rocq confirmed the results, which highlighted the potential for AI to enhance software verification processes significantly. Despite the advancements, the proofs do not ensure error-free software under all circumstances, and the computational costs remain high. Anthropic's initiative represents a significant step towards integrating formal verification into routine software development.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Airbus in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What libraries were verified?
What limitations exist in the verification process?
How many bugs were discovered?
Continue Reading
.NET Vulnerability CVE-2026-111497 Requires Immediate Action On October 25, 2026, Microsoft released out-of-band security updates for.NET addressing CVE-2026-111497, a vulnerability in the Brotli decompression algorithm that allows unauthorized attackers to elevate privileges over a network. The flaw affects.NET versions 8, 9, 10, and 11, particularly in applications that…
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…