A vulnerability in Bitcoin Core allows miners to run code on others' nodes, with about 43% of nodes still unpatched
According to Protos, btc-42">Bitcoin Core developers recently disclosed a high-risk vulnerability numbered CVE-2024-52911, which affects versions 0.14.1 to 28.4, allowing miners to remotely crash other users' nodes and execute code by mining specially crafted blocks.
The vulnerability was discovered and responsibly disclosed by developer Cory Fields in November 2024. The fix was merged in December of that year and released with version v29 in April 2025. The last vulnerable 28.x version series was discontinued on April 19, 2026.
However, since upgrading Bitcoin full nodes is voluntary, it is estimated that about 43% of nodes are still running the vulnerable old version software, facing potential risks. Fortunately, the cost of implementing such an attack is extremely high—miners would need to allocate significant computational power to mine invalid blocks that do not yield block rewards—so it is likely that it has never been exploited in practice.
You may also like
Strategy Founder: The Next 10 Years of Bitcoin
Forbes Special Report: Stablecoin cross-border payments are faster now, but not cheaper yet
Li Feifei's latest long article: When video generation, robots, and NVIDIA all claim to be world models, we need a taxonomy
Blaming the desolation of the cryptocurrency world on the rise of AI is a form of intellectual laziness
The impact of OUSD on Circle, Tether, and Paxos: not a single negative factor, but a more complex reshaping of competition
A valuation of 8 billion dollars, doubling in 8 months! What makes the crypto-friendly bank Erebor Bank stand out?
340 billion valuation: Li Yanhong's largest IPO, a seat in Kunlunxin's shares is hard to come by
Stablecoins are the "royalists" of the crypto world: Open USD brings the old currency system into play
Cape Verde 2-3 Argentina: The Underdog Team That Stunned the World in Defeat
Cape Verde's run ended in a 3-2 defeat to Argentina, but their journey — three unbeaten draws, one heroic goalkeeper, and a fight that pushed the defending champions to the brink — is the kind of story markets recognize too: small caps can rattle blue chips long before anyone expects it.
Semiconductor stocks plummet, yet Anthropic wants to create a 2nm chip
Where is Zhao Changpeng's billion-dollar investment going? YZi Labs' investment landscape fully revealed
Ethereum Foundation Report: A Basic Guide to Ethereum for Governments and Financial Institutions
A pre-announced harvesting case: After the cryptocurrency price dropped by 99%, the public chain Saga exited to transform into AI
When American giants collectively "defect" from Chinese AI models
BIS Report Compliance Observation: The Real Risks of Stablecoins, Not Just "Depegging"
Portugal 2-1 Croatia: Ronaldo's 20-Year Knockout-Stage Drought Ends With a Debt Finally Collected
Portugal beat Croatia 2-1 in the 2026 global football championship's knockout rounds as Ronaldo scored his first-ever knockout-stage goal, Gonçalo Ramos struck a stoppage-time winner, and VAR ruled out a late equalizer for offside.
