decrypt.coarticleBitcoin Core Rewrites Its Security Policy for a World Where AI Finds Bugs in One Prompt
Bitcoin Core merged a security policy update in October 2026 that adds an "easily discoverable" label for vulnerabilities findable with a simple LLM query. Such bugs get a fix backported to all maintained releases and a new version shipped fast with an advisory, instead of a long embargo. Antoine Poinsot of Chaincode Labs proposed the change after a spike in reports. The article also recaps the Bitcoin Red Team and AI-found Lightning and wallet bugs.
TL;DR Bitcoin Core now fast-tracks fixes and public advisories for LLM-discoverable bugs instead of holding them under long embargo.
Organisations named here
- Antoine Poinsot
- Chaincode Labs
- easily discoverable vulnerabilities
Technologies named here
- Bitcoin Core
- Bitcoin Red Team
- AI-driven audit
- Lightning implementations
- Hardware wallets
- Large Language Models
- Bitcoin
- LLM
Techniques named here
- Disclosure policy
- Contrast with the earlier approach
Threat actors named here
- Bitcoin Red Team
Related in AI Security
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
github.comadvisoryFlowise MCP Security Bypass Enables RCE
github.comrepoYesWeHack Claude Kit
jfrog.comarticle