Bitcoin Bugs Are Getting Easier to Find: Core Responds

3 hours ago 4

Rommie Analytics

Key Takeaways

Medium, high bugs: disclosure roughly a year later
Easy-to-find bugs: fixed releases as soon as possible
Fixes go to 31.x, 30.x and 29.x
Version 28.x reached end of life in April

Bitcoin Core developer Antoine Poinsot committed the change to the project’s security policy on October 22. It is a disclosure rule, not a report of a new exploit, and it says nothing about Bitcoin’s cryptography or users’ private keys.

Why AI undercut the embargo

The developers wrote that they had recently seen more reports of vulnerabilities that can easily be found, or found again. They attributed this largely to language models, which lower the bar for spotting certain classes of bugs and can also identify covert fixes: security patches merged into the code without being labelled as such.

That second point undercuts the purpose of an embargo. Bitcoin Core is open source, so a fix is visible in public code long before its details are published...

Read Entire Article