News linked to both this project and an event.
Odaily reports: Bitcoin Core developers have merged a security policy adjustment. For vulnerabilities that can be easily discovered or rediscovered through simple large language model (LLM) prompts, the previous long-term confidential disclosure mechanism will no longer be used. The new rules allow developers to mark such issues as "easy to find" during vulnerability classification, then backport fixes to all still-supported versions and release them as soon as possible through minor version updates, along with a security advisory and some vulnerability details.Previously, Bitcoin Core scheduled disclosure based on vulnerability severity, with medium- and high-risk vulnerabilities usually only made public after the affected versions stopped being maintained. This adjustment stems from AI tools lowering the threshold for vulnerability discovery: in July this year, a Bitcoin Red Team composed of 16 developers used AI models to scan about 390 Bitcoin-related projects and recorded 4,962 findings in one day, of which 85 were listed as critical issues. Developers noted that continuing to extend the confidentiality period for such vulnerabilities can no longer effectively prevent attacks and instead delays the release of fixed versions; however, the new rules also mean that fixes may lack longer testing time. Currently, no vulnerability has been officially marked as falling into the "easy to find" category under the new rules. (CoinDesk)
According to Cointelegraph, Bitcoin Core developer Antoine Poinsot stated on Thursday on the bitcoin-dev mailing list that large language models (LLMs) have made certain software vulnerabilities extremely easy to rediscover. Maintaining long-term secrecy is already of limited value and instead delays the release of patched versions, prompting the team to update its vulnerability disclosure policy. The new policy dictates that "easily discoverable" vulnerabilities, which can be identified with minimal cost such as through simple LLM prompts, will be patched as soon as possible across all supported major versions, alongside the simultaneous release of security advisories. Other vulnerabilities will continue to be disclosed based on severity: low-severity vulnerabilities will be disclosed two weeks after the release of the major version containing the fix; medium-to-high-severity vulnerabilities will be disclosed two weeks after the end-of-life (EOL) of the last affected version, typically around one year after the patch release; critical vulnerabilities will be handled through a dedicated process.
According to Forbes, the state of Florida has filed a lawsuit against OpenAI and its CEO Sam Altman, alleging that its generative AI and large language models (LLMs) pose a threat to public health and safety, constituting a "public nuisance" in the legal sense. The state likened AI chatbots to polluting factories, arguing that they cause psychological harm to the public, provide uncertified advice, and disrupt public order. Florida is seeking substantial monetary damages and injunctive relief.
Odaily News: The Japan Financial Services Agency (FSA) has announced personnel appointments. As part of its organizational restructuring, the agency has established a new "Crypto Assets and Stablecoins Division" dedicated to overseeing crypto assets and stablecoins, with Toshiaki Adomi appointed as its first Director. Adomi graduated from the Faculty of Law at Osaka University in 2002 before joining the FSA. He subsequently earned an MBA from the University of Birmingham in the UK and an LLM from the London School of Economics and Political Science, holding positions in banking supervision and policy coordination. From July 2025, he served as a Counselor at the General Policy Bureau, and until August 1, 2026, held the role of Senior Counselor for Postal Savings and Insurance Supervision.
According to the research summary published by Rohan Paul, a large-scale study covering 207 GitHub projects and 1.02 million pull requests shows that introducing AI agent review can reduce code review time by 2.5 to 4.5 days/KLOC, but at the cost of declining review quality—in reviews involving AI, 78%~94% of PRs exhibit "review smells", higher than the 69%~76% in pure human reviews. The study points out that repeatedly assigning the same AI reviewer identity is the main reason leading to the decline in review diversity. Notably, projects that introduced LLM review extensively in the early stage did not achieve significant efficiency improvements.
Brian Armstrong posted on the X platform, stating that Coinbase now includes pre-IPO perpetual contracts, stock options, and will soon support tokenized stocks. Coinbase has also redesigned Coinbase Advanced and has begun integrating global liquidity between US and international users, as well as between Coinbase and Deribit users. CoinbaseDev is providing stablecoin payment capabilities for enterprises, launching fully managed accounts based on its compliance technology stack, and introducing a new developer tools dashboard. On the Base side, Coinbase announced the launch of private transactions and a web-based Base App. Coinbase is also becoming the financial account for AI, supporting wallets for AI agents, providing AI-driven financial advice, and connecting Coinbase accounts to users' commonly used LLMs.
Vitalik Buterin published a research article on May 10, proposing to replace traditional on-chain transfer solutions with zero-knowledge proof (ZK) transactions, pushing crypto payments from "pseudonymity" toward "privacy by default." This solution allows users to complete payment verification without disclosing their full balance and transaction history.Vitalik specifically mentioned that in the era of AI agents, autonomous AI agents need to pay for services such as LLM APIs without leaving traceable footprints. He stated that through recursive SNARKs and a ZK API credit mechanism, Ethereum Layer 2 can achieve private payments at speeds and costs close to those of transparent transactions.Additionally, the proposal includes selective disclosure and "proof of innocence" mechanisms, allowing users to provide compliance proof to regulators or tax authorities without revealing on-chain privacy data, thereby meeting anti-money laundering requirements. Vitalik believes that the transparent and public nature of blockchain is a major obstacle to the widespread adoption of crypto payments.