Bitcoin Core updates security policy for AI-era vulnerabilities

• Bitcoin Core is changing its vulnerability disclosure policy to address security flaws that researchers can easily rediscover.
• Developers plan to backport fixes to all currently maintained releases and issue updates as quickly as possible.
• The change responds to increased vulnerability reports linked to large language models making certain security issues easier to identify.

Bitcoin Core is revising its security disclosure policy to accelerate fixes for vulnerabilities that researchers can easily rediscover.

The change addresses rising vulnerability reports as large language models make certain software flaws easier to identify.

“Any security policy is going to make a tradeoff between two goals that are in tension: transparency and giving users sufficient time to upgrade,” Bitcoin Core contributor Antoine Poinsot said in a statement.

Under the revised approach, developers can shorten disclosure delays for vulnerabilities that attackers could readily discover before users receive security updates.

Bitcoin Core plans to backport fixes to all currently maintained releases and publish security advisories alongside corrected versions.

Previously, longer embargo periods often meant security fixes remained unavailable until the next major release, delaying protection for users.

The revised policy aims to balance public transparency with giving Bitcoin users and node operators enough time to upgrade safely.

The update marks a shift towards faster vulnerability remediation for Bitcoin Core software as AI tools change security research practices.