Bitcoin Core 29.5, 30.4, 31.2 and 32.1 fix three AI-found bugs, including a remote crash of Windows, macOS and BSD nodes

Bitcoin Core published three advisories on Oct 28 2026 for bugs first found by an automated LLM scan (Elias Rohrer's Project Loupe at Spiral) and validated by Gregory Sanders. The worst, rated Medium: on platforms other than Linux, a malicious peer can send TCP urgent (out-of-band) data to bypass read backpressure and queue unlimited data, which Bitcoin Core says lets it "trivially crash any Windows, macOS or BSD node it is connected to". A second Medium bug lets a peer that claims not to support BIP 31 pings stay paused forever while its message queue grows (up to 2MB per hour per inbound peer, 5MB per hour per outbound peer). A Low-severity undo-file overflow lets a miner corrupt other nodes' undo data, impractical on 64-bit systems. All three are fixed in 29.5, 30.4, 31.2 and 32.1 and were disclosed early under Core's new policy for "easily discoverable" bugs.

Why this severity: Bitcoin Core rates two bugs Medium and one Low; the TCP urgent-data bug lets any connected peer crash non-Linux nodes; no exploitation reported

Started

Oct 28, 2026

• #Bitcoin
• Windows
• macOS
• AI / LLM tooling