Bitcoin Core Discloses Critical Mining Risks in Three Patched Security Vulnerabilities
Bitcoin Core has disclosed three previously patched security vulnerabilities, including a high-severity flaw that could disrupt Bitcoin mining operations. The announcement highlights potential risks affecting block creation, transaction processing, and network privacy.
Developers published the security advisories on November 10, 2026, after releasing fixes in October 2025. The vulnerabilities affected older Bitcoin Core versions, raising concerns for miners and node operators who have not upgraded their software.
High-Severity Bug Threatened Bitcoin Mining Operations
The most serious vulnerability, identified as CVE-2025-62861, affected Bitcoin Core versions 28.0 through 28.2 and 29.0 through 29.1.
The flaw involved transaction handling during blockchain reorganizations, commonly called chain reorganizations or reorgs. These events occur when Bitcoin nodes switch to a competing blockchain history.
Under certain conditions, the bug could leave the memory pool, or mempool, in an inconsistent state. Consequently, affected mining nodes could fail to generate valid block templates, preventing them from producing new blocks until restarted.
Security researcher Niklas Goegge reported the vulnerability in September 2025. Developers addressed the issue in Bitcoin Core 30.0, released on October 10, 2025.
Two Additional Vulnerabilities Exposed Network Risks
Bitcoin Core also disclosed two medium-severity vulnerabilities involving block processing and Tor network connections.
The first, CVE-2025-62859, allowed malicious peers to delay block processing through manipulated transaction witness data. Attackers could potentially stall processing for up to 10 minutes and repeat the disruption under specific network conditions.
Meanwhile, CVE-2025-62860 affected nodes using certain whitelist configurations alongside Tor connections. The flaw could mistakenly grant trusted permissions to incoming Tor peers, weakening protections against denial-of-service attacks and privacy-related risks.
Developers acknowledged that thousands of reachable Bitcoin mainnet nodes had configurations that exposed them to the Tor-related issue. However, nodes without the affected optional whitelist settings remained unaffected.
Security Updates Highlight Importance of Node Maintenance
Bitcoin Core released fixes for all three vulnerabilities in version 30.0, followed by additional patched releases. The final vulnerable release line reached its end of support on October 27, 2026.
The disclosures follow earlier security findings involving memory management and node stability. They also reflect Bitcoin Core’s established practice of delaying certain vulnerability details until affected software versions lose support.
Although the latest disclosures concern previously corrected flaws, outdated installations may remain exposed. Mining operators and Bitcoin node administrators can reduce these risks by upgrading to supported software versions containing the security fixes.
