In this article5 sections
Bitcoin Core has disclosed that it fixed three vulnerabilities capable of slowing down or crashing Bitcoin nodes, with the fixes reaching operators through releases published this week. The bugs were first flagged by an AI-enabled security scan run by Project Loupe on Friday, October 23, and the Bitcoin Core security team was notified the same day, AMBCrypto reported.
New versions of Bitcoin Core — 29, 30, 31 and 32 — shipped with the relevant fixes between October 26 and October 28. The disclosure itself landed on October 28.
Also read: Ethereum Halts Glamsterdam Hoodi Testnet Over Gas Bugs
Key facts
- Three bugs were found by an AI-enabled security scan by Project Loupe on October 23, 2026.
- One flaw let a malicious actor crash nodes running on Windows and macOS, while Linux systems were unaffected.
- A second bug hoarded data in memory, draining RAM and limiting a node’s capacity to process new transactions.
- A third issue involved corrupted data on older 32-bit systems and was rated low severity; the other two were rated medium.
- Fixes were released in Bitcoin Core versions 29, 30, 31 and 32 between October 26 and October 28.
What the three flaws could do
Nodes are the validators in Bitcoin: they enforce the network’s rules so miners cannot cheat it, and bitcoin implementations are widely used by exchanges, wallets and other service providers to confirm transfers are legitimate.
The Windows and macOS flaw could force service providers to restart their software manually. The memory bug worked by hoarding data in RAM, which slowed systems and could leave them unable to handle new transactions. The 32-bit defect, tagged low severity, could shut a machine down entirely.
Taken together, the first two fit the pattern of a denial-of-service attack, in which an attacker spams the node system to make it unstable. AMBCrypto noted that none of the vulnerabilities could result in stolen Bitcoin or a compromised private key.
Faster disclosure replaces the one-year wait
The gap between notification and public disclosure was roughly a week, against the typical one-year hold for medium-severity issues, a period designed to give operators time to upgrade. Bitcoin Core has since changed its policy: it will not keep most bugs secret for long. In its own wording as relayed by AMBCrypto, the project said that for easily discoverable vulnerabilities it will publish a point release containing the fix for each maintained major version as soon as possible, along with a security advisory.
The trigger is AI. Models that find bugs quickly can also help attackers exploit them quickly, and the same tools have cut both ways elsewhere in crypto. Ripple used AI to prevent an unlimited XRP mint risk valued at $90 billion, while AI models enabled the $100 million Coldcard exploit and were largely responsible for high-value hacks and scams, according to Chainalysis. The Bitcoin Core team has also started automated testing to flag bugs and harden security.
Why it matters
Exchanges, wallet providers and other businesses that run Bitcoin Core now have a shorter window between a fix and a public advisory, so internal upgrade schedules that once assumed a year of quiet are no longer realistic. Operators who skipped earlier releases should treat the new point releases as the baseline, since the issues affect node uptime rather than custody.
What to watch
Watch whether Bitcoin Core publishes a security advisory and point-release fix at the same time for the next easily discoverable bug, as its revised policy promises. The project has not said how quickly it would treat quantum-related risks, a question the report leaves open.
Reported by AMBCrypto.
Source: AMBCrypto