Bitcoin Core changes security rules as AI makes finding code bugs dangerously easy
Bitcoin Core will now immediately patch and disclose vulnerabilities that can be found with a single prompt to an artificial intelligence model, abandoning the previous practice of keeping such flaws secret for months.
Bitcoin Core, the software that powers most of the bitcoin network, will no longer sit on bug fixes for months when the flaw is one an AI can easily find again. The project’s maintainers merged a change to the security policy on Thursday, replacing a system that graded vulnerabilities by severity and timed disclosure accordingly.
Previously, low-severity flaws were revealed two weeks after the next major version shipped, while medium and high-severity issues stayed under embargo until two weeks after the last affected version reached end of life. The logic was that shipping a fix quietly and explaining it later would keep attackers from learning about a hole before the people running nodes, the computers that check and relay every bitcoin transaction, had upgraded.
However, the old rule was built for a world where finding a bug took skill, and the spread of AI tools has broken how that process worked. This is largely due to LLMs drastically reducing the bar to find certain classes of issues or identify covert fixes.
New policy for AI-discoverable flaws
Core can now flag a bug as easy to discover during triage, which in practice means one that "can be found with a simple prompt to an LLM." Those bugs get a fix copied back to every version Core still supports, shipped in a point release "as soon as possible" along with a security advisory carrying some details.
"For these issues that are easy to find, this is the wrong tradeoff," the policy reads of the old embargo. "The embargo period achieves little but it delays the availability of a fixed release."
Fixes "won’t have as much ‘bake time’" in testing before they reach users, however, Poinsot wrote. He refused a proposal by longtime bitcoin security researcher Antoine Riard to keep the option of shipping a fix without an advisory and holding the details back case by case.
"Alerting users of a security vulnerability without any details could create more risk unnecessarily," he wrote, pointing to "a rushed migration by users who would otherwise not be affected."
AI-assisted security reports surge
The policy follows a surge in AI-assisted security reports, including a review of 390 bitcoin projects that identified 4,962 potential flaws, 85 of them critical. A volunteer group of 16 developers calling itself the Bitcoin Red Team ran AI models across these projects in about a day in late July.
Within days, a BTCPay Server flaw the group had reported privately was being exploited on live merchant servers. The attacks drained the Lightning nodes merchants use to take small bitcoin payments. Core Lightning, one of the main Lightning implementations, told operators to disconnect after AI-generated reports to its small team turned out to be real.
A bigger loss came from a bug no AI needed to find. A flaw in Coldcard hardware-wallet firmware, dormant since 2021, let attackers drain 594 BTC in 25 minutes on July 30, and losses neared $114 million across four sweeps. When Coldcard shipped its fix, it said AI had helped catch more bugs along the way.
Related
