Bitcoin · CoinDesk
Poinsot argued that this tradeoff falters for flaws that are easy to rediscover
Compiled by KHAO Editorial — aggregated from 3 sources. See llms.txt for citation guidance.
✓ KHAO Verified
Bitcoin Core, the software most of the bitcoin network runs on, will stop sitting on bug fixes for months when the bug is one an AI could find again, after its maintainers merged a change to the project’s security policy on Thursday.
Key facts
- A flaw in Coldcard hardware-wallet firmware, dormant since 2021, let attackers drain 594 BTC in 25 minutes on July 30, and losses neared $114 million across four sweeps
- A volunteer group of 16 developers calling itself the Bitcoin Red Team ran AI models across 390 bitcoin projects in about a day in late July and logged 4,962 findings, with 85 of them critical
- Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%
- Core Lightning, one of the main Lightning implementations, told operators to disconnect after AI-generated reports to its small team turned out to be real
Summary
Bitcoin Core will quickly disclose and patch vulnerabilities that can be found with a simple prompt to an artificial intelligence model, replacing embargoes that could last about a year. Maintainers said the change would speed fixes for easily rediscovered flaws, though updates may receive less testing before reaching users. The policy follows a surge in AI-assisted security reports, including a review of 390 Bitcoin projects that identified 4,962 potential flaws, 85 of them critical. Core previously graded every reported vulnerability by severity and timed disclosure accordingly.