Bitcoin Core Discloses Three Security Vulnerabilities Affecting Mining Operations and Node Protection
Bitcoin Core developers have disclosed three security vulnerabilities that previously exposed Bitcoin network nodes to mining disruptions, delayed block processing, and potential weaknesses in network access protections. The issues were patched in October 2025, before their technical details were publicly released through security advisories published on November 10, 2026.
The disclosures cover one high-severity vulnerability and two medium-severity flaws affecting different Bitcoin Core software versions and network configurations. The most serious issue could disrupt mining operations, while the other vulnerabilities created opportunities for transaction processing delays and potential privacy-related security risks.
High-Severity Bitcoin Core Vulnerability Threatened Mining Operations
The most critical issue, identified as CVE-2025-62861, affected Bitcoin Core versions 28.0 through 28.2 and versions 29.0 through 29.1. Security researcher Niklas Goegge reported the vulnerability on September 26, 2025.
The flaw involved transaction handling during blockchain reorganizations, when previously confirmed transactions could return to the network's memory pool. Bitcoin Core incorrectly applied transaction eviction rules in this process, potentially removing certain transactions while leaving transactions dependent on them behind.
This inconsistency could interfere with miners attempting to construct valid block templates. Mining nodes affected by the problem required a software restart to restore normal operations, making the vulnerability particularly relevant to operators managing Bitcoin mining infrastructure.
Two Additional Flaws Exposed Bitcoin Nodes to Network Risks
The second vulnerability, CVE-2025-62859, carried a medium-severity classification and involved transaction witness data. Researcher Eugene Siegel reported the issue in April 2025 after identifying weaknesses involving compact blocks and specific network configurations.
The vulnerability could allow malicious network peers to manipulate transaction witness data and delay Bitcoin block processing by ten minutes. Exploitation was possible against affected nodes operating in blocksonly mode or nodes whose connections to all three high-bandwidth peers were controlled by an attacker.
A separate weakness, tracked as CVE-2025-62860, involved Bitcoin Core's optional whitelist settings and Tor connections. Under affected configurations, incoming Tor peers could mistakenly receive elevated permissions.
This behavior could bypass certain denial-of-service restrictions and privacy safeguards intended to protect Bitcoin nodes. Bitcoin Core estimated that thousands of reachable mainnet nodes had configurations granting whitelist privileges to incoming Tor connections.
Bitcoin Core 30.0 and 29.2 Include Security Fixes
Developers addressed all three vulnerabilities through Bitcoin Core version 30.0, released on October 10, 2025. A subsequent release, version 29.2, introduced corresponding security fixes on October 14, providing another patched software option for node operators.
The published advisories also identify October 27, 2026, as the end-of-life date for the final vulnerable Bitcoin Core version.
The disclosures follow another high-severity memory safety vulnerability that Bitcoin Core developers patched before publicly revealing its technical details in May 2026.
The latest advisories document security weaknesses affecting three important areas of Bitcoin infrastructure: mining reliability, block processing, and network access protections. They also provide affected software versions and corresponding fixes for node operators.
Source: According to security advisories published on November 10
Writer: Marcus RenfieldCrypto Market Analyst & Onchain WriterMarcus Renfield covers cryptocurrency markets with a focus on onchain data, Bitcoin price action, and emerging market narratives. His writing examines how capital flows, network activity, and broader market structure influence short- and medium-term trends.He aims to provide clear, data-informed analysis for readers seeking a deeper understanding of crypto market dynamics.