A vulnerability in Bitcoin Core allows miners to run code on other people's nodes; approximately 43% of nodes remain unpatched.

robot
Abstract generation in progress

ChainCatcher reports that, according to Protos, Bitcoin Core developers recently disclosed a high-severity vulnerability numbered CVE-2024-52911.
This vulnerability affects versions 0.14.1 through 28.4, allowing miners to remotely crash other users’ nodes and execute code by mining specially crafted blocks.

The vulnerability was discovered and responsibly disclosed by developer Cory Fields in November 2024.
A fix was merged in December of that year and released with version 29 in April 2025.
The last supported version series with the vulnerability, the 28.x series, was discontinued on April 19, 2026.

However, since upgrading Bitcoin full nodes is voluntary, it is estimated that about 43% of nodes are still running outdated, vulnerable software, posing a potential risk.
Fortunately, the attack is extremely costly to execute—miners would need to dedicate significant computational power to mine invalid blocks that do not yield block rewards—making it unlikely to have been exploited in practice.

BTC0.48%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin