Bitcoin Core releases security updates to fix AI-discovered vulnerabilities

The Bitcoin Core project has released version 32.1 to address three security vulnerabilities identified through automated source code analysis using large language models. This follows a change in the project’s vulnerability disclosure policy on October 22, 2026, aimed at releasing fixes more rapidly for flaws that are easily discoverable by AI.

The vulnerabilities include two medium-severity issues and one low-severity issue. One medium-severity flaw allows a malicious peer to crash nodes running on Windows, macOS, or BSD by exploiting TCP-Urgent data to exhaust memory. A second medium-severity flaw involves a peer pretending to use an outdated protocol, causing memory consumption to grow by approximately 2 MB per hour for incoming connections and 5 MB per hour for outgoing connections.

The third, low-severity vulnerability involves a miner creating blocks that could cause file overflows during blockchain reorganizations, potentially crashing 64-bit systems. While developers consider a successful attack on this third flaw difficult to execute, the updates provide critical protection for the network's infrastructure.

In addition to security patches, version 32.1 introduces technical improvements such as faster block validation, reduced disk space usage for transaction indexes, and enhanced privacy features via Tor.