C✓WhyCoinMovesTHE EVIDENCE DESK
EN ▾
EN中文한국어日本語
← BTC event archive

Bitcoin Core fixes TCP urgent-data flaw affecting non-Linux nodes

Bitcoin Core released versions 29.5, 30.4, 31.2 and 32.1 fixing a Medium-severity bug in which a malicious peer could exhaust memory on Windows, macOS or BSD nodes by sending TCP urgent data, letting a paused peer bypass backpressure. The project said the flaw was found by an automated LLM scan in Elias Rohrer's Project Loupe at Spiral and validated by Gregory Sanders.

Key facts

Official sourceMajor story

BTC after this site detected it

  • 5 minutes-0.05%Gate · USDT
  • 1 hour+0.38%Gate · USDT
Source published First received Updated UTC

Claims and open questions

Evidence strength Official source

Includes an official statement from the project or venue. Official claims are still not independent verification.

ImportanceMajor story

core coin BTC · official source

What sources claim

  • Bitcoin Core stated that on platforms other than Linux a malicious peer could crash a node by sending TCP urgent (out-of-band) data, and that fixes shipped in versions 29.5, 30.4, 31.2 and 32.1.
  • Bitcoin Core said the issue is rated Medium severity and easily discoverable, and that Linux users are not affected because it only affects the select() socket code path.
  • Bitcoin Core said the issue was discovered through an automated LLM scan as part of Elias Rohrer's Project Loupe at Spiral, and the finding was validated and surfaced to the team by Gregory Sanders.

Still unresolved

  • Which release channels or distributions beyond the listed Bitcoin Core versions carry the fix has not been spelled out by the project.
  • What the malformed TCP urgent-data sequence looks like in practice, and whether an exploit has been observed in the wild, is not stated in the disclosure.

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished.

Source evidence

1
Bitcoin CoreOfficial channel
Unbounded memory growth through TCP urgent data on non-Linux systems ↗

Published Oct 28, 2026, 04:00 · Received Oct 28, 2026, 18:14

Market reaction after detection

Measured from the sample nearest site detection, on the same source and quote currency.

Observed returns after site detection
WindowReturnActual sampled interval / source
5 minutes-0.05%Oct 28, 2026, 18:14 → Oct 28, 2026, 18:19 (UTC)
Gate · USDT
1 hour+0.38%Oct 28, 2026, 18:14 → Oct 28, 2026, 19:14 (UTC)
Gate · USDT

Timing does not establish causation. Methods and limitations →

Recent BTC events and market reactions

Full coin archive →

Get the next BTC event with its sources: Follow BTC by RSS →

Research for this archive