Cory Fields proposed hidden quantum-safe traps that force a thief to post matching collateral, which an owner could claim by proving ownership.

A flaw in version 3 transaction sibling eviction could halt block template generation during reorganizations, fixed across versions 28.3, 29.2, and 30.0.

New proposals in Bitcoin Optech #430 tackle peer-to-peer reachability for home nodes and target potential 2027 activation timelines for consensus cleanup.

TL;DR The Bitcoin Core team disclosed three patched Bitcoin Core vulnerabilities that affect block templates, Tor peer rules, and compact block sync. Tracked as CVE-2025-62861, CVE-2025-62860, and CVE-2025-62859, the bugs can halt mining nodes, expose Tor hosts, or stall block sync. Node operators on older builds must update to versions 30.0, 29.2, or 28.3 right away. Why It Matters Bitcoin Core serves as the main software tool for checking transactions and mining blocks on the Bitcoin network.

Fixes address memory exhaustion and file overflow risks, affecting Windows, macOS, and BSD systems.

Fixes address memory exhaustion and file overflow risks, affecting Windows, macOS, and BSD systems.

Bitcoin operates without a central authority, yet its underlying software requires updates. The process relies on Bitcoin Improvement Proposals, developer review, and node activation to ensure only widely supported changes take effect.

Bitcoin operates without a central authority, yet its underlying software requires updates. The process relies on Bitcoin Improvement Proposals, developer review, and node activation to ensure only widely supported changes take effect.

A single remote computer can crash full cryptocurrency nodes across multiple platforms. Specifically, researchers uncovered a Bitcoin Core DoS vulnerability that enables severe memory exhaustion. The defect affects nodes operating on Windows, macOS, and BSD operating systems. Consequently, an unauthenticated peer can force an out-of-memory crash without local operating system access. Furthermore, executing this attack requires only a standard peer-to-peer network connection.

A single remote computer can crash full cryptocurrency nodes across multiple platforms. Specifically, researchers uncovered a Bitcoin Core DoS vulnerability that enables severe memory exhaustion. The defect affects nodes operating on Windows, macOS, and BSD operating systems. Consequently, an unauthenticated peer can force an out-of-memory crash without local operating system access. Furthermore, executing this attack requires only a standard peer-to-peer network connection.

Vulnerability allowed attackers to crash Windows, macOS, and BSD nodes via TCP urgent data.

Developers patched a bug discovered by an automated AI scan that could cause nodes to crash under extreme reorganization conditions.

Vulnerability allowed attackers to crash Windows, macOS, and BSD nodes via TCP urgent data.

Developers patched a bug discovered by an automated AI scan that could cause nodes to crash under extreme reorganization conditions.

Developers resolved a queue accumulation flaw affecting pre-BIP31 peers that allowed unbounded memory leaks up to 5MB per hour.

Developers resolved a queue accumulation flaw affecting pre-BIP31 peers that allowed unbounded memory leaks up to 5MB per hour.

Developers tagged the signed final build v32.1 for the reference client, marking the latest update to the major 32.x software cycle.

Bitcoin Core now fast-tracks fixes and disclosure for vulnerabilities that AI tools can easily rediscover, ending embargoes that could last up to a year.

ビットコイン（BTC）の主要な基盤ソフト「Bitcoin Core（ビットコインコア）」は、AIなどで簡単に見つかる脆弱性について、修正版の提供と情報公開を早め ... The post BitcoinCore、脆弱性の非開示期間を廃止──AI進化で方針変更 first appeared on NADA NEWS（ナダ・ニュース）.