Bitcoin Core Changes Rules for Disclosing Security Vulnerabilities

Bitcoin Core has changed the way it discloses security vulnerabilities, acknowledging that artificial intelligence has made it easier to identify weaknesses. The new security policy was approved by the project maintainers on Thursday, with the proposal put forward by developer Antoine Poinsot from Chaincode Labs. Until now, less severe bugs were disclosed two weeks after a new version was released, while medium and high severity bugs remained undisclosed for up to two weeks after the end of support for the last version, which could last up to a year. The new rules allow for quicker disclosure of easily discoverable bugs, and fixes will be applied to all supported versions. Poinsot noted that fixes will have less time for testing, while critical bugs will continue to be addressed individually. This change comes after pressure on Bitcoin projects, as the Bitcoin Red Team reviewed 390 repositories and recorded 4,962 findings, including 85 critical ones. In August, Core Lightning developers urged operators to update, as AI-generated reports proved to be accurate.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.