AI Scan Finds Flaws That Crash Bitcoin Nodes on Windows and Mac
An artificial intelligence scan of Bitcoin Core code uncovered three software vulnerabilities, including a critical defect that allows remote attackers to crash nodes running on Windows, macOS, or BSD by flooding them with data until memory exhaustion occurs. The disclosure follows a policy shift by Bitcoin Core developers to publicly release patches for easily discoverable bugs immediately rather than maintaining long secrecy periods.
Bitcoin Core disclosed the security flaws on October 29, 2026, after human contributors verified findings generated by a large language model scan, coindesk.com reported. The primary vulnerability, initially flagged on October 23, targeted nodes by overwhelming them with incoming connection traffic until the system crashed. Developers confirmed the issue the day it was found, deployed fixes on October 27, and published full technical details alongside two additional software flaws.
Policy Shift Accelerates Vulnerability Disclosures
Historically, Bitcoin Core developers kept medium-severity security flaws confidential for up to a year to give network operators adequate time to upgrade infrastructure before malicious actors identified the weaknesses. That practice ended on October 22 for bugs categorized as easily discoverable, as large language models lowered the cost and technical barrier for automated code analysis. Fixes now ship directly to all supported software versions alongside public advisories.
The second vulnerability identified by the automated scan demonstrated the practical necessity of the policy change. Reported to the project on September 15, an independent developer discovered the identical flaw six days later. The defect permitted a connected node to falsely claim operation on an outdated protocol version and stall, accumulating incoming and outgoing message data at rates between two and five megabytes per hour per connection.
Low Severity Flaw Causes Node Failure on 32-Bit Systems
A third vulnerability, rated low severity, was independently discovered three times across the automated scan and separate developer reports submitted in August and October. The defect involved miners crafting transaction blocks capable of overflowing files designated for blockchain reorganizations. While 64-bit systems handle the reorganization stress over extended periods, Windows machines and 32-bit operating systems face outright node failure where standard restarts prove ineffective.
Nodes operating on 32-bit architecture or storing blockchain data on older FAT32 formatted drives remain exposed even after applying the latest software patches. Meanwhile, release documentation indicates that three additional medium- and high-severity vulnerabilities resolved in Bitcoin Core version 30.0 are scheduled for public disclosure in two weeks.