researchAnthropic

Anthropic Says Claude Proved Security Properties for 239 Entry Points Across 123 Libraries

TL;DR

Anthropic published research on October 22, 2026, reporting that Claude produced machine-checked formal proofs of security properties at the RISC-V assembly level. The proofs cover 239 fuzz-test entry points across 123 open-source libraries, in a collaboration with Theorem.

1 min read
0

Anthropic published research on October 22, 2026, reporting that Claude produced machine-checked formal proofs of security properties at the RISC-V assembly code level for 239 fuzz-test entry points across 123 open-source libraries. The work was done in a collaboration with Theorem, according to Anthropic. The details below come from a summary carried by Unite.AI.

What Anthropic reports

  • Scope: 239 fuzz-test entry points across 123 open-source libraries.
  • Proof level: machine-checked formal proofs at the RISC-V assembly code level.
  • Bug fixes: according to Anthropic, Claude patched the bugs it found.
  • Property proved: after patching, Claude proved the programs will always exit normally, without triggering memory-safety errors or failing assertions.
  • Input bound: the guarantee holds for every input under 64 MB, according to Anthropic.
  • Partner: Theorem.

The summary does not name the Claude model used, and no benchmark scores, pricing or context window figures are given for this research.

What this means

Fuzz testing samples inputs and can only show that the tested inputs did not cause a failure. A machine-checked proof of the kind Anthropic describes is a different claim: that the property holds for every input within the stated bound, here 64 MB. Anthropic also says the proofs sit at the RISC-V assembly level, not at the source level. The bug patching and the proving are reported as part of one workflow, with Claude doing both. These are Anthropic's own claims, and the 239 entry points and 123 libraries are the figures that define the scope of what it says was proved.

Source: unite.ai ↗

Related Articles

research

Claude traces NSA-supplied NIST curve seeds to lrand48 generator in under 30 minutes, per Anthropic

According to Anthropic, Claude worked out in under 30 minutes how the NSA generated the seeds behind several NIST-standardized elliptic curves. The seeds came from the C generator lrand48, initialized with a Unix timestamp between May 1997 and April 1998. Anthropic is donating the $36,864 bounty to the Internet Security Research Group.

product update

Anthropic launches Claude Duet, an always-on agent, in research preview for US Pro and Max users

Anthropic announced Claude Duet on October 21, 2026, a proactive agent that runs on its own cloud computer and keeps working when the app is closed. It is a research preview for US Pro and Max subscribers, with no extra charge but usage counted against existing plan limits. Anthropic says it is powered by Claude Opus 5.5.

research

Claude designs 318,484 protein binders against scorpion toxins; 17 of 211 lab-tested designs bind

Anthropic's Claude, working inside its Claude Science environment, largely autonomously designed protein binders against five neurotoxins from four scorpion species. Of 211 designs tested in the lab, 17 met the criteria for a binder, and two independent labs confirmed the results. Whether any of them work as an antivenom has not been tested.

changelog

Amazon Bedrock adds schema-enforced structured outputs for all Anthropic Claude models on both endpoints

Amazon Bedrock now supports structured outputs for all Anthropic Claude models on both the bedrock-runtime and bedrock-mantle endpoints. The feature uses constrained decoding to enforce a JSON schema during token generation, and it includes strict tool use for agentic workflows.

Comments

Loading...