Lifestyle
Bitcoin Core Discloses Three Patched Bugs: The Most Serious Could Have Stopped Miners From Building Block Templates
Decrypt reports that Bitcoin Core, the software behind most Bitcoin nodes, has disclosed three security flaws that are now fixed. The most serious could leave a miner's node unable to assemble new blocks until it is restarted. All three are denial-of-service and privacy issues, not coin theft, and no exploitation was reported. Node operators are generally advised to run the latest version.
About 4 min read
What happened
Decrypt reports that Bitcoin Core developers disclosed three security vulnerabilities. Bitcoin Core is the reference software behind most nodes on the Bitcoin network. Nodes are the computers that run Bitcoin software and store and relay transaction and block data. One of the bugs is high severity and could disrupt mining; all three are now fixed.
Decrypt notes the flaws are denial-of-service issues (attacks that stop a system from working normally) and privacy issues, not the kind that let attackers steal coins or forge bitcoin. Also per Decrypt, Bitcoin Core grades vulnerabilities on a four-level scale from "low" to "critical", and these three fall in the middle of that range.
The three vulnerabilities compared
The table uses a few terms. A chain reorganization is when the network switches to a different chain of blocks, replacing recent blocks. A compact block is a condensed format nodes use to relay new blocks. Witness data is the signature data in a transaction used to verify it; Decrypt describes manipulating it as "a form of transaction malleation". Tor is an anonymity network. "Whitelist" permission is a trust permission that lets a connection bypass some protections.
| ID | Issue summary (per Decrypt) | Possible impact |
|---|---|---|
| CVE-2025-62861 | A chain reorganization could wrongly evict some transactions, corrupting the node's mempool | Affected nodes cannot build block templates until restarted, halting miners' work of assembling new blocks |
| CVE-2025-62859 | A peer announces a compact block with manipulated witness data | Could stall the node's block processing |
| CVE-2025-62860 | Inbound connections over Tor wrongly granted "whitelist" permission | Removes some denial-of-service and privacy protections on affected nodes |
The most serious bug: why it matters to miners
Per Decrypt, the most serious bug, CVE-2025-62861, concerns block template creation. This is the process miners rely on to assemble new blocks. According to the advisory, a chain reorganization could wrongly evict certain transactions and corrupt the node's mempool (its waiting area for unconfirmed transactions). Affected nodes would then be unable to build block templates until restarted. For a miner, that means a halt to the work that earns block rewards.
Decrypt also notes that none of the three reaches the critical level, which Bitcoin Core reserves for bugs that threaten "coin theft at the protocol level, unauthorized coin creation or permanent network-wide chain splits". The developers reported no evidence the bugs were exploited.
Background: AI and vulnerability disclosure policy
Decrypt says Bitcoin Core recently rewrote its security policy to account for AI, adding a category for "easily discoverable" vulnerabilities. These are bugs that can be surfaced through a simple AI prompt, and they are now patched and disclosed immediately rather than held under a long embargo (delayed public disclosure). Decrypt also mentions a volunteer group, the "Bitcoin Red Team", that is racing to find AI-discoverable bugs across the ecosystem before attackers can exploit them.
Frequently asked questions
Could these bugs get anyone's bitcoin stolen?
Per Decrypt, all three are denial-of-service and privacy issues, not flaws that let attackers steal coins or forge bitcoin, and developers reported no evidence of exploitation.
Which vulnerability is the most serious?
Decrypt points to CVE-2025-62861: a chain reorganization could corrupt a node's mempool, leaving affected nodes unable to build block templates until restarted.
Have the bugs been fixed?
Yes. Decrypt reports all three are fixed, with the fixes shipped before the advisories were published.
What do I need to do?
Per Decrypt, the general advice is for people running nodes to use the latest Bitcoin Core software to stay protected.
Browse the latest news in this topic
Lifestyle
India's Enforcement Directorate Searches Crypto Exchanges CoinDCX and Delta Exchange, Alleging Offshore Routing of Indian Users' Trades
Decrypt reports that India's Enforcement Directorate searched sites in Bengaluru tied to two crypto exchanges under FEMA. The agency alleges Indian users' trades were routed to offshore platforms at a scale of hundreds of millions of dollars. Both firms say they have cooperated and that services run normally.
Lifestyle
ACE Music v1 Tops Suno v6 on AI Vocal Music Leaderboard, but Decrypt's Tests Show Mixed Results
According to Decrypt, ACE Studio's ACE Music v1 leads Suno v6 on the Artificial Analysis vocal music leaderboard, 1,160 to 1,144 Elo, but the margin is narrow and gaps remain in niche genres.
Lifestyle
Tether Unveils 800-Million-Parameter AI Agent BotPsy, Built for Everyday Tasks on Phones and Other Devices, Beating a 2.5x Larger Model in Tether's Own Tests
Tether has released BotPsy-0.8B, a small AI agent designed to run locally on personal devices for everyday tasks such as settings, messaging and scheduling. Developers can download it for free. Tether's own tests show it beating larger models on several benchmarks, but it suits only low-to-medium-difficulty tasks, not matters involving money, personal information or health, and there is no launch date for a consumer assistant.
Lifestyle
Deutsche Bank Launches Crypto Custody: European Institutional Clients Can Hold Bitcoin, Ether and Three Stablecoins
According to Decrypt, Deutsche Bank's digital asset custody service is live, holding bitcoin, ether and three stablecoins for institutional and corporate clients in Europe. It shows a major traditional bank offering regulated crypto services under EU rules; individuals are not the target clients.