Community Trust ScoreVerified
Bitcoin Core developers released security updates on October 28 to address three vulnerabilities identified through an AI-powered code scan. The most significant flaw allows attackers to crash Bitcoin nodes running on Windows and macOS by exploiting how the software handles network connections.
AI-assisted discovery process
The vulnerabilities were discovered on October 23 via Project Loupe, an automated code-scanning initiative developed by Elias Rohrer at Spiral. Bitcoin Core contributor Gregory Sanders verified the findings before they were passed to the project’s security team. The discovery process highlights a shift in how software weaknesses are identified, with automated tools playing a central role in uncovering issues that may have otherwise remained hidden.
The primary vulnerability involves the handling of TCP data on operating systems other than Linux. An attacker connected to a vulnerable node could send specially crafted data that causes the software to consume increasing amounts of memory. This process can eventually exhaust the node’s memory resources, leading to a crash. The advisory specifies that this denial-of-service issue affects Windows, macOS, and BSD systems. Linux nodes are not vulnerable to this specific flaw because they utilize a different mechanism for monitoring network connections.
Additional vulnerabilities and policy changes
The investigation also uncovered two additional weaknesses. One issue involved outdated peer connections that could remain open while messages accumulated in memory, potentially exhausting node resources. The third issue concerned the files Bitcoin Core uses to reverse blockchain changes during reorganizations. An attacker with substantial mining capabilities could theoretically corrupt these records to force nodes to shut down, though developers classified this vulnerability as low severity due to the impractical circumstances required for exploitation.
Bitcoin Core changed its security disclosure policy in response to the increasing ease with which AI tools can discover software weaknesses. Under the updated policy, vulnerabilities considered easy to discover can receive faster patches and public advisories. This approach aims to balance the need for rapid response with the limitations of keeping flaws secret when automated tools can independently rediscover them.
Security fixes are available in Bitcoin Core versions 29.5, 30.4, 31.2, and 32.1. Node operators running affected versions are advised to review the official release information and update their software. A limitation exists for the fix addressing the undo-file vulnerability, as it does not fully protect 32-bit systems or nodes storing blockchain data on FAT32 drives. A node that crashes may temporarily stop validating and relaying transactions, which can disrupt services that depend on it.
Frequently Asked Questions
Which operating systems are affected by the Bitcoin Core denial-of-service vulnerability?
The denial-of-service vulnerability affects Windows, macOS, and BSD systems. Linux nodes are not vulnerable to this specific flaw because they use a different mechanism for monitoring network connections.
Which Bitcoin Core versions include the security fixes?
Security fixes are available in Bitcoin Core versions 29.5, 30.4, 31.2, and 32.1. Operators should update to these versions to address the identified vulnerabilities.
