Bitcoin Core published three security advisories on November 10, covering vulnerabilities that were fixed more than a year ago. Crypto Insiders reported on the disclosure on November 11.
The most serious is CVE-2025-62861, rated high severity in the advisory. During a chain reorganization, a flaw in how transactions were handled could leave a node’s mempool in an inconsistent state, and the advisory says such a node “cannot produce blocks until it is restarted.” Affected versions are 28.0 to 28.2 and 29.0 to 29.1. The advisory credits Niklas Goegge, who reported it on September 26, 2025.
CVE-2025-62860, rated medium, concerns inbound Tor connections wrongly receiving the privileges of the non-default whitelist option. Nodes that did not set that option were not affected. The advisory says popular node software bundled Tor and set the option, so thousands of reachable mainnet nodes were affected. It was reported by Martin Zumsande and Antoine Poinsot.
CVE-2025-62859, also medium, let a malicious peer stall block processing through compact block witness malleation. The advisory describes repeated stalls as possible under certain conditions. It was reported by Eugene Siegel.
According to the advisories, all three were fixed in versions 30.0 (released October 10, 2025), 29.2 and, for the first two, 28.3. The 29.x line reached end of life on October 27, 2026. Crypto Insiders noted that none of the issues involves stolen coins or a change to consensus rules.
Track the market yourself with AiTraderView’s FREE tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings. Just create a FREE account and try them yourself!
Sources:
Bitcoin Core: CVE-2025-62861 Block template creation halted by TRUC sibling eviction during reorg
Bitcoin Core: CVE-2025-62860 Inbound Tor connections wrongly receive -whitelist permissions
Bitcoin Core: CVE-2025-62859 Block processing stall via witness malleation
Crypto Insiders: Drie lekken in Bitcoin-software konden miners en bitcoincomputers verstoren
⚠️ RISK WARNING & AI DISCLOSURE
- This information is generated by Artificial Intelligence (AI) and complex algorithms. While advanced, these systems can contain errors or inaccuracies and are for educational purposes only.
- Technical analysis provides no guarantees; this information is purely informative.
- All discussed scenarios are hypothetical and do not constitute predictions or expectations.
- Past performance is not an indicator of future results.
- This is not financial advice and is not intended as a call-to-action for the reader.
- No implicit direction is claimed, and no specific behavior of market participants is suggested.