Bitcoin Core has recently updated its security policy in response to advances in artificial intelligence that now allow vulnerabilities to be uncovered using simple prompts. Security expert Jameson Lopp, who is known for his work in Bitcoin cybersecurity and software development, described a surge in vulnerability discovery rates over the past two and a half months, characterizing the trend as exponential.
AI accelerates vulnerability discovery
Lopp cited a new reality where both malicious actors and security researchers can deploy uncensored AI models to rapidly identify exploitable flaws in open-source projects like Bitcoin Core. He emphasized that attackers often adopt these AI tools before defenders can react, resulting in increased pressure on cybersecurity teams.
Security researchers have reportedly struggled to keep pace with the unrelenting pace of newly discovered vulnerabilities, with some “not getting a lot of rest” due to the frequency and urgency of incidents arising from AI-driven attack methods.
Referring to a recent remote code execution flaw in PHP, Lopp noted that, although the potential impact was significant, the actual fallout remained smaller than feared. He attributed this to rapid response measures and improvements in detection tools.
Mini dictionary: Jameson Lopp is a Bitcoin security researcher and co-founder of Casa, a company focused on providing secure personal key management solutions for cryptocurrencies.
Quantum computing raises new concerns
Lopp also commented on the progress in quantum computing, referencing Google’s recent estimate that building a fault-tolerant quantum computer may require 500,000 physical qubits. He pointed out that current quantum computers have only a few hundred usable qubits, and the transition to practical attacks on cryptography is not expected to happen in the immediate future.
He warned that if quantum technology advances faster than anticipated, many cryptocurrency users and networks would not be fully prepared. According to his research, about 30% of wallet addresses currently have exposed keys, making them the most likely targets should quantum attacks become feasible.
Industry shifts to real-time security
In response to evolving threats, Lopp advocated for security practices that move beyond traditional annual audits. He suggested integrating real-time security checks into the development pipeline, emphasizing that static or periodic assessments are no longer adequate.
Immediate and ongoing security reviews are becoming crucial, as cyberattacks can now unfold at unprecedented speed. Lopp highlighted the importance of proactive defenses, particularly as hardware vulnerabilities and physical threats, such as so-called “wrench attacks,” have continued to rise.
Bitcoin Core’s latest policy adjustment aims to keep pace with attackers who increasingly utilize advanced AI tools. The community faces the dual challenge of adapting to near-instant vulnerability disclosure and preparing for future threats posed by quantum computing.
