Key Highlights Three vulnerabilities were discovered in Bitcoin Core using an automated code scan driven by a large language model, followed by human verification. A memory accumulation flaw allowed peers pretending to run outdated protocol versions to stall and fill victim nodes’ memory at up to 2MB to 5MB per hour per connection. A low-severity ...
Key Highlights Bitcoin Core is adapting its vulnerability disclosure process due to artificial intelligence tools lowering the barrier for discovering software flaws. Bugs classified as easily discoverable via large language models will bypass extended embargoes and receive rapid point releases across all supported versions alongside public advisories. The policy change follows an initiative by the ...
Key Highlights: A privacy flaw involving Bitcoin Core’s opt-in privatebroadcast feature could allow outside observers to link private transactions to standard node activity. The vulnerability stems from peer “discouragement” handling, where behavioral penalties applied to shared network addresses created observable external side effects. Developers have updated the codebase to decouple private-broadcast peers from standard discouragement ...
Key Highlights: Bitcoin Core developers have addressed an authorization vulnerability involving the SIGHASH_SINGLE signing mode when a transaction lacks a corresponding output. While legacy raw-transaction signing interfaces previously blocked this edge case, the Partially Signed Bitcoin Transaction (PSBT) workflow remained susceptible, potentially allowing signatures that fail to bind the approved recipient. Merged into Bitcoin Core’s ...