Bitcoin Core is changing its security disclosure policy because large language models have made some flaws easy to rediscover, so long embargoes offer little protection. Under the new policy, vulnerabilities deemed easily discoverable will be fixed as soon as possible across all maintained major versions, with security advisories published alongside the updates. Other flaws will follow severity-based schedules: low-severity bugs will be disclosed two weeks after the fix is released, while medium and high-severity bugs will be disclosed two weeks after the last affected release reaches End of Life, typically a year after the fix. The change follows a volunteer Bitcoin Red Team report of nearly 5,000 potential issues across 390 projects in August, though only about a fifth had been reproduced at that point.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Cointelegraph ↗
Keywords
bitcoincryptoartificial intelligencecybersecurity
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 10/22/2026 | 81,416.09 |
| Change that session | -3.18% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- ‘Wow, it’s a real discovery’: Claude cracks a 25-year NSA number mystery
An Anthropic AI model traced five seeds for NIST elliptic curves, supplied by the NSA in the late 1990s, to an ordinary random-number generator fed with 1997 and 1998 timestamps, in under 30 minutes. The finding makes a hidden NSA backdoor less likely and requires no action from NIST curve users, though questions remain about how some elements were chosen. Bitcoin was not affected because it uses secp256k1, a simpler curve with little room to hide a weakness, though sufficiently powerful quantum computers could eventually pose a separate threat. The 25-year puzzle had a bounty that started at $12,288 and could rise past $36,000 if donated to charity.
- Crypto Firms Launch Quantum Alliance as 6 Million Bitcoin Sit Exposed
Nine blockchain organizations launched the Quantum Alliance, an open standards body that will define “quantum-ready” and set common ways to test quantum-resistance claims. The group warns that roughly 6.04 million BTC, about 30% of supply, is quantum-exposed because of elliptic-curve signatures, with forecasts pointing toward the late 2020s. A Google Quantum AI study cut the qubits needed to break Bitcoin’s cryptography to under 500,000, though no machine can do it yet. Modeled on the IETF, the Alliance will work in four groups covering migration, zero-knowledge systems, wallet security and cross-chain compatibility. Separately, a consortium backed by BlackRock, Strategy and Coinbase has committed $15 million to the problem.
- Scammer Lost $4.8M in Bitcoin to Tampered Ledger Wallets: Chainalysis
Chainalysis said one of the biggest victims of the Ledger wallet drain was a scammer who lost more than 60 BTC, about $4.8 million. The funds came from a task scam, and the scammer moved them into three Ledger addresses on September 22, before thieves emptied all three into a single wallet on October 9. Ledger has tied all confirmed losses to devices sold by reseller CryptoBilis, where an implant reads the 24-word recovery phrase during setup and sends it out over LTE. Ledger has asked resellers and distributors in six Southeast Asian countries and Hong Kong to suspend sales, while onchain investigator Specter has traced more than $86 million in suspected thefts that Ledger says it has not verified.
- Quantum Alliance forms amid warnings 6.4 million bitcoin face future quantum threat
Nine crypto companies have launched the Quantum Alliance to develop common security standards for bitcoin, Ethereum and other blockchains against future quantum attacks. Experts warn that a future quantum computer could derive secret keys from publicly visible keys, putting an estimated 6.4 million bitcoin at risk, including 1.1 million attributed to Satoshi Nakamoto; the Alliance says 30.2% of supply has exposed public keys, but no existing machine can exploit them yet. Researchers disagree on timing, with Richard Carback calling 2028 realistic. Proposals to freeze, move or place vulnerable bitcoin in a trust have raised concerns about property rights and neutrality, and any upgrade would require coordination across the Bitcoin ecosystem.
- Scammer gets scammed in Ledger spy-chip exploit, loses almost $5 million in bitcoin
Chainalysis said a scammer who earned millions through fake online job offers lost more than $4.9 million in bitcoin after thieves compromised Ledger hardware wallets. The scammer had moved proceeds from the scheme to three Ledger wallet addresses, which attackers emptied, taking 60 BTC. The breach is linked to Ledger devices sold by Southeast Asian reseller CryptoBilis, which contained unauthorized hardware implants able to transmit wallet recovery information over a mobile network. Chainalysis announced the findings on X on Thursday.
- Scammer loses $4.8M stored on tampered Ledgers: Asia Express
Ledger suspended its reseller network in Southeast Asia after thieves stole more than $103.4 million from 530 addresses through tampered Ledgers inserted into the supply chain. Chainalysis reports that one scammer was also a victim, losing 60 Bitcoin (about $4.8 million) from three newly bought Ledgers containing spyware, with all funds drained into the same wallet. Ledger says all confirmed thefts so far are in Asia, while Trezor will shut some distant resellers from Jan. 1. Elsewhere, South Korea approved blocking 27 websites of unregistered crypto exchanges, Thailand launched Bitcoin and Ether ETF trading, and Australia opened consultation on crypto platform rules.
Related markets
Latest news
- SSI forecasts when PNJ's profit will return to the VND 1,000 billion mark
SSI forecasts PNJ's net revenue at VND 39,100 billion in 2026, VND 43,400 billion in 2027 and VND 57,700 billion in 2029, while after-tax profit is forecast at minus VND 6,300 billion in 2026, rising to VND 1,200 billion in 2028. The company holds large inventory, with diamonds making up 52%, and may need to set aside additional provisions for inventory write-downs if gold prices fall. Under SSI's estimated scenario, PNJ's additional repurchase obligation could be about VND 16,800 billion; to ease short-term liquidity pressure, the company plans to issue up to 550 million shares to raise VND 8,000 billion. Preliminary Q3/2026 results show a net loss of VND 258 billion, compared with a profit of VND 496 billion a year earlier. SSI continues to keep PNJ's stock at “Under review”.
- Ethereum delays Glamsterdam Hoodi testnet launch over security risks
Ethereum has postponed the Glamsterdam upgrade on the Hoodi testnet, originally scheduled for Oct. 26, so developers can examine how EIP-8037 and EIP-8038 interact with deployed smart contracts. ChainSecurity warned that the two proposals could weaken safeguards against insufficient gas griefing, potentially letting contracts permanently record failed operations and blocking otherwise valid user actions. The firm said it identified 13 real-world examples of potentially affected contracts and is coordinating responsible disclosure with the projects involved, without naming them. Security researcher pcaversaccio called the risks “serious” in an Oct. 21 GitHub comment and urged a reassessment of the hard fork. The mainnet timeline, which developers had been considering for early December, is now uncertain.
- Proposed 0.2% tax on idle land and land left unused or slow to be put to use
On the morning of October 23, the National Assembly heard the government's proposal and the review report on draft amendments to several tax laws, including the Law on Non-Agricultural Land Use Tax. The government proposes a 0.2% tax rate, with no area limit, for idle land and land that is not or is slowly being put to use, to institutionalize Resolution 21-NQ/TW. The Economic and Financial Committee agrees in principle but says the proposal conflicts with the current law, which applies 0.15% to unused land, and with the draft amended Land Law. It warns of possible double financial obligations for investment projects that leave land unused or slow to use it, and asks the drafting agency to clarify the basis, timeline and relationship with land use fees and land rental payments.
- Pony.ai partners with inDrive, Nvidia to launch robotaxis in Kazakhstan
Pony.ai said it will work with Nvidia and inDrive to explore autonomous ride-hailing services, with Kazakhstan as the first test market. The three companies plan to launch robotaxis in Astana using Pony.ai's seventh-generation vehicles, following an agreement with the Kazakh government; Kazakhstan was chosen for its regulatory readiness after creating its first structured legal framework for driverless transport. Pony.ai will provide the Gen-7 robotaxis, inDrive will provide the ride-hailing platform and run the service, and Nvidia will support the project with AI infrastructure. The partners will assess the technical, operational, regulatory and commercial feasibility of offering level 4-ready autonomous vehicles to riders through the inDrive app. Pony.ai's shares rose 2.8% in Hong Kong trade after the announcement.
- Ethereum delays Glamsterdam test after security devs flag risk to existing contracts
Ethereum developers postponed the Glamsterdam upgrade on the Hoodi test network, which had been due to activate on Oct. 26, after researchers warned that proposed gas rules could let existing smart contracts permanently record failed operations. ChainSecurity said EIP-8037 and EIP-8038 could leave some contracts with more or less gas than expected, potentially making errors permanent or causing otherwise valid operations to fail; for example, creating a new storage slot could require 110,020 gas when a separate allowance is exhausted, versus 22,100 under the old rules. No replacement date has been announced for the Hoodi test or its planned 200 million gas limit, and Ethereum's mainnet upgrade date remains unconfirmed. The findings describe how existing software would behave under the proposed rules and do not indicate that existing contracts are currently being exploited.
- Europe set to ban Russian gas imports; energy giant says it still has the whole world to sell to, gives Brussels 71 days to reconsider
Novatek CEO Leonid Mikhelson said on October 22, on the sidelines of the Verona Eurasian Economic Forum in Istanbul, that Russia cannot be isolated from the global LNG market. He said that if the EU's ban on Russian LNG imports takes effect on January 1, 2027, the company can redirect its cargoes to other markets. Mikhelson added that the EU still has 71 days to make any decision, and that Brussels is paying more attention to industrial production and energy security. He also said European companies with long-term contracts with Russia can keep cooperating to supply gas to markets outside Europe. On a US proposal for Europe to resume buying Russian oil and gas, he said it shows Washington is also concerned about industrial decline and job losses in Europe.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.