Bitcoin Core accelerates disclosure of easily rediscovered vulnerabilities
Developers changed the security policy as AI-assisted discovery reduced confidence that long embargoes would keep easily found flaws private.
Antoine Poinsot announced a Bitcoin Core security-policy change on October 22, 2026. Easily rediscovered vulnerabilities would receive accelerated fixes and disclosure, reflecting the increased ability of large language models and related tools to identify weaknesses independently.
Coordinated disclosure normally gives maintainers time to prepare fixes before publishing details that could help an attacker. That balance changes when a flaw is easy for multiple parties to rediscover: a long embargo can leave users exposed while providing less assurance that exploit knowledge remains confined to the original researchers.
The policy change addressed that trade-off. It connected disclosure timing more closely to the availability of fixes across maintained versions for this class of vulnerability.
It did not mean every reported issue would be announced immediately, nor did it establish that AI systems had compromised Bitcoin's consensus rules. The development concerned the defensive practices of a major implementation, at a time when vulnerability discovery was becoming faster and less dependent on a small number of specialist reviewers.