ORBITRUM← Back to Signals

Bitcoin Core · security

Bitcoin Core Fixes Three Security Flaws, but Some Nodes Remain Exposed

By Orbitrum

Bitcoin Core disclosed three security vulnerabilities on October 28, 2026, after releasing fixes in versions 29.5, 30.4, 31.2 and 32.1, although certain older systems remain vulnerable.

Cybersecurity news graphic showing the Bitcoin symbol alongside a computer server and a security warning, representing three newly disclosed Bitcoin Core vulnerabilities affecting node software.

What security flaws did Bitcoin Core disclose?

The three vulnerabilities include a remotely triggered memory exhaustion attack that can crash Windows, macOS and BSD nodes, a slower memory exhaustion attack involving malicious peers, and an undo file overflow that can cause nodes to shut down under extreme conditions.

Orbitrum Investor Impact

Why do these vulnerabilities matter for Bitcoin network security?

The flaws threaten the availability of affected Bitcoin Core nodes, potentially interrupting transaction validation and relay services, but the published advisories do not identify a mechanism for stealing bitcoin or changing its supply.

Which Bitcoin Core versions fix the vulnerabilities?

Versions 29.5, 30.4, 31.2 and 32.1 contain fixes for all three disclosed issues on supported systems, but the undo file overflow can still affect 32 bit systems and nodes storing block data on FAT32 file systems.

How serious is the risk to unpatched Bitcoin nodes?

Bitcoin Core rates the two memory exhaustion vulnerabilities as medium severity and the undo file overflow as low severity; the TCP urgent data flaw can crash a connected vulnerable Windows, macOS or BSD node, while exploiting the undo file flaw requires exceptionally difficult conditions.

Could these Bitcoin Core vulnerabilities affect BTC holders?

The direct exposure concerns node availability rather than bitcoin ownership or token supply, so the disclosures establish an operational security risk without demonstrating a direct loss mechanism for BTC holders or a predictable effect on its market price.

What happens next for Bitcoin Core security?

Node operators need to install an appropriate patched release and address any remaining unsupported system exposure, while Bitcoin Core has also announced plans to disclose three additional medium and high severity vulnerabilities previously fixed in version 30.0 approximately two weeks after the October 27 release.

Sources

Original signal: CoinDesk ↗

Continue researching

Open Bitcoin Core in the Orbitrum app

Review its expert coverage and continue your research in Orbitrum. Access to full expert research depends on each expert's offer.

Open Bitcoin Core in the Orbitrum app

Prefer a public overview? View Bitcoin Core's public project profile

See more Orbitrum in Google

Add Orbitrum as a Preferred Source to make our research more likely to appear for you in Google Search.