Kraken Parent Payward Joins Glasswing, Gets Access to Claude Mythos to Hunt Security Flaws

Kraken parent company Payward has joined Anthropic’s Project Glasswing and is using Claude Mythos to hunt for security flaws.

The move follows an open letter from over 40 Bitcoin and crypto companies, including Kraken, sent last week to Anthropic, OpenAI, and other leading AI labs demanding frontier labs open trusted-access programs to qualified defenders to help guard against threats.

Payward said Monday that the company will use Mythos 5 to scan its systems for vulnerabilities, with findings sent to its security teams for review. It’s the first reported crypto company to join the project and gain access to Claude Mythos 5.

“Selection gives Payward’s security division early access to the same class of model, sharpening its ability to combat sophisticated software vulnerabilities and protect millions of customers across the globe,” Payward wrote.

Flaws found in third-party open-source software will be reported to project maintainers, the company said, adding that the approach could help protect its financial infrastructure and strengthen open-source software used across the crypto industry.

Project Glasswing is Anthropic’s cybersecurity program that gives vetted organizations access to its most capable cyber models. Launched in April and expanded in June, the program’s partners have since uncovered thousands of high- or critical-severity vulnerabilities.

Anthropic did not immediately respond to a request for comment by Decrypt.

The news comes amid growing evidence that AI models can be powerful tools for both finding and exploiting software vulnerabilities. In April, Mozilla reported Anthropic’s Claude Mythos identified 271 vulnerabilities in Firefox during testing.

Last week, more than 40 Bitcoin and crypto companies, including Ark Invest, Coinbase, Block and BitGo, called on major AI labs to give qualified security researchers access to their most powerful models. Organized by the Bitcoin Policy Institute, the letter argued that developers protecting open-source financial infrastructure need access to frontier AI to find and fix vulnerabilities before attackers exploit them.

“Security has always been an unfair game. An attacker needs to find one flaw. A defender has to find all of them, first, every single day,” Payward Co-CEO Arjun Sethi said. “Frontier AI is the first thing that flips that asymmetry. A model can read every line of code the way an attacker would, at machine scale, so we find the flaw before anyone can build the exploit.”