The Bitcoin Red Team says 85 of its 4,962 findings are critical and 635 high severity, but only about a fifth have been reproduced with working proof-of-concept code and fewer than 5% of the projects reviewed have been told.