43.6% of Peers Advertising Bitcoin Core Versions Ran End-of-Life Releases

The policy calls for developers to backport fixes for vulnerabilities they judge easy to rediscover to every maintained major release line, issue point releases as soon as possible and publish security advisories with the updates. The change was covered in an earlier report on Bitcoin Core's security policy . Developers can classify a flaw as easily discoverable during triage. A bug can qualify if it is easy to find—for example, with a simple question to a large language model—but the category also covers flaws found without AI. Other vulnerabilities remain on a severity-based disclosure schedule.