Bitcoin Core developers have updated their vulnerability disclosure policy: issues that are easily detected with AI will be promptly fixed in all supported versions, with details disclosed at the time of the update's release.

Neural networks have simplified vulnerability detection

The team has noted an increase in vulnerability reports, as neural networks have made it easier to identify issues; some problems can now be found with a simple AI query.

Rapid patches and simultaneous disclosure of details

Previously, information about vulnerabilities could remain undisclosed for months, with fixes released in the next major update. Now, easily accessible vulnerabilities will be addressed as quickly as possible in all supported versions, and details will be revealed when updates are published. These changes are reflected in the pull request in the bitcoincore.org repository.

Motivation: keeping more secrets is pointless

According to the developers, keeping such vulnerabilities secret is ineffective, as attackers can independently find them using AI.