Security disclosures and vulnerabilities
Bugs that could have been exploited, how they were disclosed, and the policy arguments about when to tell the public. The CVE threads here are the primary record of what went wrong and how quickly it was fixed.
104 threads and 940 messages, 19 Jun 2011 to 22 Oct 2026.
Read on LearnBitcoin
Bitcoin Optech
The threads, in order
Listed by the date of each thread's first message.
2011 3 threads
- Bitcoin fun day! Douglas Huff3 messages
- Newly introduced DoS Luke Dashjr10 messages
- My thoughts on DoS code Amir Taaki1 message
2012 5 threads
- Quote on BIP 16 Amir Taaki9 messages
- Duplicate transactions vulnerability Pieter Wuille23 messages
- A better Spanish translation for vulnerability page Jean-Pierre Rupp2 messages
- Full disclosure on the Bitcoin-Qt on Windows problem Gavin Andresen1 message
- 3 messages
2013 7 threads
- Large-blocks and censorship Peter Todd7 messages
- DOS-Attacks on bitcoin-client? Oliver Egginger4 messages
- Anti DoS for tx replacement Mike Hearn26 messages
- Revocability with known trusted escrow services? Peter Vessenes10 messages
- 2 messages
- 17 messages
- Peer Discovery and Overlay Jeremy Spilman5 messages
2014 2 threads
- Fee drop Peter Todd12 messages
- SIGHASH_ANYONECANPAY extra inputs DoS attack Peter Todd1 message
2015 5 threads
- 5 messages
- 6 messages
- 10 messages
- Disclosure: consensus bug indirectly solved by BIP66 Pieter Wuille4 messages
- ALERT: Vulnerability in UPnP library used by Bitcoin Core Wladimir J. van der Laan1 message
2016 3 threads
- Pre-BIP Growth Soft-hardfork Luke Dashjr3 messages
- SIGHASH_NOINPUT in Segregated Witness Joseph Poon8 messages
- Reasons to add sync flags to Bitcoin Ethan Scruples6 messages
2017 7 threads
- SHA1 collisions make Git vulnerable to attakcs by third-parties, not just repo maintainers Peter Todd32 messages
- 3 messages
- Treating ‘ASICBOOST’ as a Security Vulnerability Cameron Garnham7 messages
- 12 messages
- Fast Merkle Trees Russell O'Connor9 messages
- Responsible disclosure of bugs Simon Liu17 messages
- 10 messages
2018 7 threads
- JSONRPC vulnerability in Electrum 2.6 to 3.0.4 Thomas Voegtlin1 message
- KETAMINE: Multiple vulnerabilities in SecureRandom(), numerous cryptocurrency products affected. ketamine10 messages
- 9 messages
- Alert key disclosure Bryan Bishop1 message
- Getting around to fixing the timewarp attack. Gregory Maxwell5 messages
- On the initial notice of CVE-2018-17144 Bryan Bishop3 messages
- 1 message
2019 6 threads
- 1 message
- BIP Proposal: The Great Consensus Cleanup Matt Corallo29 messages
- 1 message
- Add a moving checkpoint to the Bitcoin protocol Kenshiro []10 messages
- CVE-2017-18350 disclosure Luke Dashjr5 messages
- 1 message
2020 6 threads
- 7 messages
- 7 messages
- Overview of anti-covert-channel signing techniques Pieter Wuille10 messages
- MIN_STANDARD_TX_NONWITNESS_SIZE and OP_RETURN Thomas Voegtlin5 messages
- Lightning - Is HTLC vulnerable? And mention of Channel Factories Mr. Lee Chiffre3 messages
- 1 message
2021 4 threads
- LOT=False is dangerous and shouldn't be used Luke Dashjr9 messages
- 7 messages
- Waiting SIGHASH_ANYPREVOUT and Packing Packages Antoine Riard6 messages
- 14 messages
2022 5 threads
- 5 messages
- Playing with full-rbf peers for fun and L2s security Antoine Riard27 messages
- 2 messages
- 4 messages
- 2 messages
2023 8 threads
- 11 messages
- 4 messages
- 7 messages
- 2 messages
- Full Disclosure: CVE-2023-40231 / CVE-2023-40232 / CVE-2023-40233 / CVE-2023-40234 "All your mempool are belong to us" Antoine Riard59 messages
- 13 messages
- 8 messages
- 10 messages
2024 12 threads
- A Free-Relay Attack Exploiting RBF Rule #6 Peter Todd22 messages
- 1 message
- Bitcoin Core Security Disclosure Policy Antoine Poinsot4 messages
- 3 messages
- 42 messages
- 3 messages
- 3 messages
- No Bitcoin Core vulnerability to disclose this month Antoine Poinsot1 message
- 2 messages
- 1 message
- 1 message
- Full Disclosure: "Transaction-Relay Throughput Overflow Attacks against Off-Chain Protocols" Antoine Riard1 message
2025 14 threads
- Update on the Great Consensus Cleanup Revival Antoine Poinsot15 messages
- 17 messages
- Against Allowing Quantum Recovery of Bitcoin Jameson Lopp43 messages
- Hashed keys are actually fully quantum secure Martin Habovštiak14 messages
- 2 messages
- 17 messages
- 3 messages
- A Post Quantum Migration Proposal Jameson Lopp25 messages
- 9 messages
- Quantum-Resistant Transition Framework for Bitcoin Bitcoin Foundation9 messages
- A Bitcoin Scripting Proposal BIP Quartet Rusty Russell10 messages
- Public disclosure of 4 Bitcoin Core security advisories Antoine Poinsot1 message
- 1 message
- 2 messages
2026 10 threads
- The limitations of cryptographic agility in Bitcoin Pieter Wuille16 messages
- In defense of a PQ output type Antoine Poinsot36 messages
- 64-Byte Transactions and Potential Legitimate Uses Jeremy Rubin8 messages
- 2 messages
- What if we let Quantum Hunters get Bitcoin rewards ? Amon BAZONGO7 messages
- 18 messages
- Aligning privacy incentives in P2MR conduition20 messages
- 6 messages
- 5 messages
- Bitcoin Core security policy update Antoine Poinsot1 message