Bitcoin Core fixes TCP urgent-data flaw affecting non-Linux nodes
Bitcoin Core released versions 29.5, 30.4, 31.2 and 32.1 fixing a Medium-severity bug in which a malicious peer could exhaust memory on Windows, macOS or BSD nodes by sending TCP urgent data, letting a paused peer bypass backpressure. The project said the flaw was found by an automated LLM scan in Elias Rohrer's Project Loupe at Spiral and validated by Gregory Sanders.
Key facts
BTC after this site detected it
- 5 minutes-0.05%Gate · USDT
- 1 hour+0.38%Gate · USDT
Claims and open questions
Includes an official statement from the project or venue. Official claims are still not independent verification.
core coin BTC · official source
What sources claim
- Bitcoin Core stated that on platforms other than Linux a malicious peer could crash a node by sending TCP urgent (out-of-band) data, and that fixes shipped in versions 29.5, 30.4, 31.2 and 32.1.
- Bitcoin Core said the issue is rated Medium severity and easily discoverable, and that Linux users are not affected because it only affects the select() socket code path.
- Bitcoin Core said the issue was discovered through an automated LLM scan as part of Elias Rohrer's Project Loupe at Spiral, and the finding was validated and surfaced to the team by Gregory Sanders.
Still unresolved
- Which release channels or distributions beyond the listed Bitcoin Core versions carry the fix has not been spelled out by the project.
- What the malformed TCP urgent-data sequence looks like in practice, and whether an exploit has been observed in the wild, is not stated in the disclosure.
Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished.
Source evidence
Published Oct 28, 2026, 04:00 · Received Oct 28, 2026, 18:14
Market reaction after detection
Measured from the sample nearest site detection, on the same source and quote currency.
| Window | Return | Actual sampled interval / source |
|---|---|---|
| 5 minutes | -0.05% | Oct 28, 2026, 18:14 → Oct 28, 2026, 18:19 (UTC) Gate · USDT |
| 1 hour | +0.38% | Oct 28, 2026, 18:14 → Oct 28, 2026, 19:14 (UTC) Gate · USDT |
Timing does not establish causation. Methods and limitations →
Recent BTC events and market reactions
- Bitcoin Core discloses low-severity undo file overflow bug and releases fixes
- 2026 crypto hack losses reach $2.35 billion, report shared with Bitcoin Magazine says
- Strategy shareholders approve daily dividends on four preferred stocks
- Bitcoin Core fixes memory growth flaw affecting pre-BIP31 peers
- Bitwise lifts 2036 bitcoin price target to about $1.6 million
Get the next BTC event with its sources: Follow BTC by RSS →