Bitcoin Core overhauls security disclosure rules to counter AI bug-discovery threats

Bitcoin Core has eliminated lengthy security embargoes for bugs categorized as easily discoverable, opting instead for accelerated point releases and immediate public advisories. The policy update applies to all actively maintained versions—currently 29.x, 30.x, and 31.x. Previously, maintainers held medium- and high-severity flaws under embargo for about a year until affected versions reached end-of-life. However, developers concluded the traditional model provided little protection as large language models allow adversaries to rapidly surface code vulnerabilities. Other issues retain existing tiered timelines, including two-week disclosure windows for low-severity fixes.