Bank of America Puts 1,000 Contractors on Software Flaw Cleanup

Bank of America has brought in 1,000 contractors to patch software flaws exposed by Anthropic's Mythos, a development that offers a rare look at what it actually costs to defend against AI-driven vulnerability discovery.

The headcount is the most striking detail. Fixing a flaw is rarely a single step. Each issue has to be confirmed, repaired, tested against the bank's existing systems, and rolled out without disrupting the services customers rely on. A surge of 1,000 contract workers suggests the number of findings was too large for the bank's in-house teams to absorb on their own.

That imbalance is the broader story. AI tools can search code and surface weaknesses far faster than people can close them, so the bottleneck shifts from discovery to remediation. Organizations that find problems quickly still need to spend heavily to fix them, and that spending falls on the defenders.

The report, as summarized, does not say how long the contractors will be engaged, what the project costs, or which systems were affected. Those details would show how large the remediation burden really is and whether other large institutions face similar backlogs. For now, the number itself makes the point: finding AI-exposed flaws is the easy part, and fixing them at scale takes a workforce.