Public disclosure of three vulnerabilities affecting Bitcoin Core <v25.0

Oct 9 - Oct 9, 2024

  • The recent communication highlights significant security vulnerabilities identified in Bitcoin Core versions preceding 25.0, marking an important development for users and contributors alike.

These vulnerabilities are meticulously documented and can be found through the provided links, which include detailed discussions on issues like mutated blocks hindering propagation, challenges with sending large inventories, and a specific vulnerability that could lead to a crash when processing block transactions. The URLs for these vulnerabilities are as follows: issues related to mutated blocks are documented at https://bitcoincore.org/en/2024/10/08/disclose-mutated-blocks-hindering-propagation/, problems regarding the sending of large inventories at https://bitcoincore.org/en/2024/10/08/disclose-large-inv-to-send/, and the vulnerability leading to crashes during block transaction processing is outlined at https://bitcoincore.org/en/2024/10/08/disclose-blocktxn-crash/.

Furthermore, this announcement signifies the progressive adoption of a new vulnerability disclosure policy by the project, aimed at enhancing transparency and security measures within the Bitcoin Core community. This policy initiative represents a step forward in addressing and mitigating potential risks associated with digital currency transactions and systems. The full details of this new policy framework can be accessed at https://bitcoincore.org/en/security-advisories/policy.

Additionally, there is a commitment to continue this line of communication, with an anticipation of disclosing any vulnerabilities affecting versions before 26.0 in the upcoming month, should they exist. This ongoing effort underscores the project's dedication to security and its proactive stance on informing and protecting its user base against possible threats.

Bitcoin Logo

TLDR

Join Our Newsletter

We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.

Explore all Products

ChatBTC imageBitcoin searchBitcoin TranscriptsSaving SatoshiBitcoin Transcripts Review
Built with 🧡 by the Bitcoin Dev Project
View our public visitor count

We'd love to hear your feedback on this project?

Give Feedback