Bitcoin Core Drops Its Year-Long Embargo for Bugs a Single AI Prompt Can Expose

Bitcoin Core is ending the year-long wait for security patches that a language model can find again in a single prompt. A change to the project’s security disclosure policy , merged on October 22, creates an “easily discoverable” class of vulnerability and instructs maintainers to ship a point release and a public advisory “as soon as possible” — bypassing the standard embargo that keeps a medium- or high-severity bug secret for roughly a year. The trigger is blunt. Maintainers are fielding more reports for bugs that keep getting rediscovered, because language models have lowered the effort needed to find them.