Bitcoin Core Speeds Up Fixes for Easily Found Bugs Amid AI

Bitcoin Core developers have changed the project's vulnerability disclosure policy because AI makes bugs easier to find. Developer Antoine Poinsot announced the change on October 23, 2026, and the policy is published on the Bitcoin Core security advisories page. Vulnerabilities that can be found "with minimal effort, such as through a simple LLM prompt" will now be fixed immediately, without the usual embargo.

Details

For these "easily discoverable" vulnerabilities, the team will publish a point release with the fix for each maintained major version as soon as possible, together with a security advisory. The severity-based embargo periods do not apply.

Everything else follows the timelines. Low-severity issues are disclosed 2 weeks after a major release containing the fix. Medium and high-severity issues are disclosed 2 weeks after the last affected release reaches end of life, roughly a year after the fixed major version first ships. A pre-announcement, with the number of fixed bugs and their severity, goes out two weeks before an embargoed vulnerability is detailed. Critical bugs sit outside the standard policy and are handled ad hoc.

According to Cointelegraph, Poinsot said the embargo "achieves little but it delays the availability of a fixed release." The outlet ties the move to a surge in AI-assisted findings, including an August Bitcoin Red Team report of nearly 5,000 potential issues across 390 projects.

What it means for the market

This is a change to development process, not to network rules: Bitcoin's consensus and protocol are unchanged. For node operators the practical takeaway is that fixes for simple bugs may ship faster, so keeping nodes updated as releases land matters more.

The news has no direct bearing on price; for the live rate see the daily summary and the Bitcoin page.