Bitcoin Core merged a disclosure-policy update on October 22 that creates a faster route for vulnerabilities classified as easy to rediscover, including with AI. For those flaws, maintainers plan to release a fix for each supported major version as soon as possible, alongside a security advisory, rather than follow the usual severity-based embargo.
Other disclosure rules remain in place: low-severity issues normally become public two weeks after a major release containing a fix, while medium- and high-severity issues generally wait until two weeks after the last affected version loses support. Critical flaws still receive individual handling. Developer Antoine Poinsot warned that faster fixes will spend less time in development branches before release. The update does not identify a new attack on the Bitcoin network.