| Package | Affected versions | Patched versions |
|---|---|---|
| bitcoin core | ≥ 0.9, ≤ 26.0 | |
| bitcoin knots | ≥ 0.9, < 25.1 | 25.1 |
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it "not a bug."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free