Skip to main content
CadNews - Comparative News Analysis
Topics
Sign in
Back to brief

Crypto · October 23, 2026

Bitcoin Core Ends Long Embargoes for Bugs AI Can Rediscover

4 sources →

Bitcoin Core maintainers have updated the project’s security disclosure policy to end months-long embargoes for vulnerabilities that can be easily rediscovered using Large Language Models (LLMs). The change, proposed by Chaincode Labs developer Antoine Poinsot and merged on October 22, 2026, aims to accelerate the patching process. Previously, medium and high-severity issues remained confidential for extended periods; however, developers noted that LLMs have lowered the barrier for identifying security flaws and recognizing covert fixes in the code. While this shift speeds up disclosures, maintainers acknowledged that it may result in updates receiving less testing before being released to users.

Read the original coverage

Hype check

How the hype check works

Confirmed · 1

Backed by filings, on-chain data, official statements or several independent publishers.

  • Bitcoin Core changed its security disclosure policy to end long embargoes for AI-discoverable bugs. (Antoine Poinsot)

Claimed · 2

Said by a company, project or person; not yet independently confirmed.

  • AI models found hundreds of bitcoin bugs over the summer before human developers did. (CoinDesk)
  • A review of 390 Bitcoin projects found 4,962 potential flaws. (CoinDesk)

Speculation · 1

Price talk, forecasts or unnamed sources, quoted as someone else's view.

  • Updates may receive less testing before reaching users under the new policy. (Bitcoin Core maintainers)

Reported by multiple outlets

  • Bitcoin Core merged a change to its security disclosure policy on Thursday, October 22, 2026.
  • The policy change ends long embargoes for vulnerabilities that AI/LLMs can easily rediscover.
  • The proposal was written by Chaincode Labs developer Antoine Poinsot.
  • The change was motivated by an increase in security reports driven by LLMs reducing the barrier to finding bugs.
  • Bitcoin Core previously graded vulnerabilities by severity and timed disclosures based on those grades.

Reported by only some outlets

  • A review of 390 Bitcoin projects identified 4,962 potential flaws, with 85 categorized as critical.
  • The previous policy for low-severity flaws involved making them public two weeks after the next major version shipped.
  • The new policy may lead to updates receiving less testing before reaching users.

About these outlets

CadNews does not determine absolute truth or endorse political viewpoints. It compares publicly available reporting, identifies shared facts, highlights framing differences, and flags uncertainty.