PANews|Nov 11, 2026 01:42
[Bitcoin Core Discloses Medium-Risk Vulnerability That Can Stall Block Processing; Fix Included in Versions 29.2 and 30.0] According to a Bitcoin Core security bulletin, the medium-risk vulnerability CVE-2025-62859 was disclosed on November 10, 2026. This vulnerability exists in versions prior to 29.2 and 30.0, allowing malicious nodes to exploit witness malleation in compact blocks to suspend block processing under certain conditions. The bulletin states that affected nodes clear their download state after rebuilding the compact block but before checking the witness data. If the check fails, the node falls back to requesting a complete block from the same node and waits for a 10-minute timeout. If an attacker controls three of the victim's high-bandwidth peer nodes, or if the victim is running in -blockonly mode, the attack can be repeated indefinitely.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink