Bitcoin Core changed its disclosure policy for vulnerabilities that can be rediscovered with minimal effort, such as a simple LLM prompt. For these flaws, it will release fixes for each maintained major version as soon as possible alongside a security advisory, without the usual embargo periods. Other vulnerabilities retain severity-based timelines, while critical threats to network integrity are handled case by case. The change reduces delays in distributing fixes when AI makes rediscovery easier; initial reports still go through the private security channel.
Back to Tech
Bitcoin Core accelerates fixes for easily discoverable vulnerabilities
The exception pairs patched releases with advisories across maintained major versions; it does not publish every incoming report immediately.