Bitcoin Core developers have revised the security policy to accelerate releases addressing vulnerabilities that AI makes easy to discover. The project adopted the update Thursday. Chaincode Labs developer Antoine Poinsot proposed the change earlier this month, citing an increase in reports of vulnerabilities that are easy to discover or rediscover.
Poinsot wrote that large language models have greatly lowered the difficulty of finding certain categories of flaws or detecting fixes quietly introduced into code. Under the revised policy, Bitcoin Core can designate a reported vulnerability as "easily discoverable." Bitcoin Core expects that designation to cover flaws identifiable through a straightforward query to a large language model. Developers will backport fixes for those vulnerabilities to every maintained release. Developers will publish patched versions as quickly as possible, accompanied by a security advisory explaining the vulnerabilities.
Bitcoin Core operates most of the nodes supporting the Bitcoin network. The project has traditionally kept security fixes confidential for extended periods, frequently waiting for the next major release. That approach reflects a slow upgrade process in which pressure on node operators to update creates risks of its own. However, developers concluded that prolonged secrecy offers little protection for bugs discoverable with one AI prompt and delays access to patched software. Poinsot argued in the discussion that a concealed fix would offer little benefit because a basic AI scan could uncover the vulnerability. Poinsot also argued that extensive backporting would reveal the fix anyway.
AI has substantially changed the security environment surrounding Bitcoin. Over the summer, volunteers formed a "Bitcoin Red Team" to identify AI-discoverable vulnerabilities before attackers could exploit those flaws. An AI-driven audit recorded nearly 5,000 findings across hundreds of cryptocurrency projects in early August. Developers have rushed to fix vulnerabilities uncovered by AI in Lightning implementations and hardware wallets. One Bitcoin bridge shut down after concluding that AI was discovering flaws faster than the bridge could repair those flaws.
Bitcoin Core Updates Security Policy to Address AI-Discoverable Vulnerabilities
OdailyShare
Summary
Bitcoin Core developers have updated their security policy to address AI-discoverable vulnerabilities, aligning with evolving regulatory policy in the crypto space. The change, proposed by Chaincode Labs developer Antoine Poinsot, allows the project to classify certain flaws as easily detectable and backport fixes to all maintained versions. The update follows an AI audit that found nearly 5,000 vulnerabilities in August, prompting urgent fixes in Lightning and hardware wallets. The move comes amid speculation about bitcoin ETF approval, as developers argue AI-driven discovery makes prolonged secrecy ineffective. Patched versions will now be released quickly with security advisories.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.