Bitcoin Core developers have merged a policy change: vulnerabilities that a chatbot can rediscover with a single prompt will no longer be subject to months-long embargoes. According to CoinDesk, the change was prompted by an incident this summer, when AI found hundreds of Bitcoin vulnerabilities before humans did.
The rule applies to flaws that automated tools can quickly reproduce; it does not mean that all vulnerabilities will be disclosed immediately. For ordinary readers, it means Bitcoin’s security disclosure practices are moving toward “if machines can find it, it’s no longer secret.” Developers will still determine which vulnerabilities fall within the narrower disclosure window.
The rule applies to flaws that automated tools can quickly reproduce; it does not mean that all vulnerabilities will be disclosed immediately. For ordinary readers, it means Bitcoin’s security disclosure practices are moving toward “if machines can find it, it’s no longer secret.” Developers will still determine which vulnerabilities fall within the narrower disclosure window.