Bitcoin Core is adjusting its security policy, with some vulnerabilities to be fixed immediately and disclosed publicly.

BlockBeats news, October 23 - Bitcoin Core is adjusting its security vulnerability disclosure policy because large language models (LLMs) have significantly lowered the threshold for discovering certain software vulnerabilities. Bitcoin Core developer Antoine Poinsot stated on Thursday on the Bitcoin developers mailing list that for vulnerabilities that can be easily discovered through simple LLM prompts, delayed disclosure can no longer provide sufficient protection and instead delays the release of fixed versions.

Under the new policy, for easily discoverable vulnerabilities, Bitcoin Core will release fixes for all still-maintained major versions as soon as possible and simultaneously publish security advisories. Other vulnerabilities will still be disclosed in stages according to severity: low-risk vulnerabilities will be made public two weeks after the release of the major version containing the fix; medium- and high-risk vulnerabilities are usually disclosed two weeks after the last affected version reaches end-of-life. Critical vulnerabilities that seriously affect Bitcoin's foundational security will follow a separate handling process.

AI-assisted security research is bringing new pressure to the Bitcoin ecosystem. In August this year, the Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects; Core Lightning developers also urged node operators to upgrade their software or temporarily go offline after receiving multiple AI-generated vulnerability reports. This policy adjustment aims to shorten the exposure window for easily exploitable vulnerabilities and accelerate the delivery of fixed versions.