Bitcoin Core has adjusted its security vulnerability disclosure policy, prioritizing the timely patching and publication of security announcements for vulnerabilities easily discovered by the large language model in all maintained versions. Bitcoin Core developer Antoine Poinsot stated that the large language model lowers the barrier to vulnerability rediscovery, limiting the protective effect of delayed patching. Low-risk vulnerabilities will be disclosed two weeks after patch release, medium- and high-risk vulnerabilities two weeks after the affected version's lifecycle ends, and critical vulnerabilities will be handled using a temporary procedure. In August, the Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects. In the same month, Core Lightning developers requested node operators to upgrade or take their nodes offline and postponed the disclosure of technical details for two weeks.
