Current outcome
Bitcoin Core has formally changed its vulnerability disclosure process by merging the policy update, adopting rapid fixes, backports to all maintained releases, and public security advisories for flaws easily discoverable by AI/LLMs.
Progress timeline
2 material updates- #01
Bitcoin Core正调整其安全政策,部分漏洞将立即修复并公开
Bitcoin Core is revising its security vulnerability disclosure policy so that flaws easily discoverable via LLM prompts are fixed across maintained releases and publicly disclosed as soon as possible, while other vulnerabilities retain severity-based staged disclosure.
Source evidence: theblockbeats · Cointelegraph
- #02
Bitcoin Core Rewrites Its Security Policy for a World Where AI Finds Bugs in One Prompt
Bitcoin Core merged the security policy update: vulnerabilities easily discoverable by LLMs will be backported to all maintained releases and shipped as a new version with a security advisory as soon as possible, rather than held under a long embargo.
State after update: Bitcoin Core has formally changed its vulnerability disclosure process by merging the policy update, adopting rapid fixes, backports to all maintained releases, and public security advisories for flaws easily discoverable by AI/LLMs.
Source evidence: Decrypt