Bitcoin Core · security
Bitcoin Core Fixes Three Security Flaws, but Some Nodes Remain Exposed
Bitcoin Core disclosed three security vulnerabilities on October 28, 2026, after releasing fixes in versions 29.5, 30.4, 31.2 and 32.1, although certain older systems remain vulnerable.
What security flaws did Bitcoin Core disclose?
The three vulnerabilities include a remotely triggered memory exhaustion attack that can crash Windows, macOS and BSD nodes, a slower memory exhaustion attack involving malicious peers, and an undo file overflow that can cause nodes to shut down under extreme conditions.
Orbitrum Investor Impact
Why do these vulnerabilities matter for Bitcoin network security?
The flaws threaten the availability of affected Bitcoin Core nodes, potentially interrupting transaction validation and relay services, but the published advisories do not identify a mechanism for stealing bitcoin or changing its supply.
Which Bitcoin Core versions fix the vulnerabilities?
Versions 29.5, 30.4, 31.2 and 32.1 contain fixes for all three disclosed issues on supported systems, but the undo file overflow can still affect 32 bit systems and nodes storing block data on FAT32 file systems.
How serious is the risk to unpatched Bitcoin nodes?
Bitcoin Core rates the two memory exhaustion vulnerabilities as medium severity and the undo file overflow as low severity; the TCP urgent data flaw can crash a connected vulnerable Windows, macOS or BSD node, while exploiting the undo file flaw requires exceptionally difficult conditions.
Could these Bitcoin Core vulnerabilities affect BTC holders?
The direct exposure concerns node availability rather than bitcoin ownership or token supply, so the disclosures establish an operational security risk without demonstrating a direct loss mechanism for BTC holders or a predictable effect on its market price.
What happens next for Bitcoin Core security?
Node operators need to install an appropriate patched release and address any remaining unsupported system exposure, while Bitcoin Core has also announced plans to disclose three additional medium and high severity vulnerabilities previously fixed in version 30.0 approximately two weeks after the October 27 release.
Sources
- Bitcoin Core — Unbounded memory growth through TCP urgent data on non Linux systems
- Bitcoin Core — Slow unbounded memory growth on paused pre BIP31 peers
- Bitcoin Core — Undo file overflow under extreme conditions
- Bitcoin Core — Bitcoin Core 32.1
- CoinDesk — AI found a way to crash bitcoin nodes on Windows and Macs. It's now public
Original signal: CoinDesk ↗
Continue researching
Open Bitcoin Core in the Orbitrum app
Review its expert coverage and continue your research in Orbitrum. Access to full expert research depends on each expert's offer.
Open Bitcoin Core in the Orbitrum appPrefer a public overview? View Bitcoin Core's public project profile
See more Orbitrum in Google
Add Orbitrum as a Preferred Source to make our research more likely to appear for you in Google Search.