Malicious code in bitcoin-inscript (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1823 Malicious code in bitcoin-inscript (npm)

--- -= Per source details. Do not edit below this line.=-...

Security update for bitcoin (moderate)

openSUSE Security Update: Security update for bitcoin Announcement ID: openSUSE-SU-2024:0052-1 Rating: moderate References: Cross-References: CVE-2018-17144 CVSS scores: CVE-2018-17144 NVD : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-17144 SUSE: 7.4...

OPENSUSE-SU-2024:10654-1 bitcoin-qt5-0.21.1-2.2 on GA media

These are all security issues fixed in the bitcoin-qt5-0.21.1-2.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10528-1 bitcoin-qt5-0.13.1-1.1 on GA media

These are all security issues fixed in the bitcoin-qt5-0.13.1-1.1 package on the GA media of openSUSE Tumbleweed...

New Bitcoin Token Protocol “Runes” Carries Potential Phishing Risk

By Owais Sultan Is the innovative Runes protocol on Bitcoin a cybersecurity concern waiting to happen? Cybersecurity experts at Resonance Security… This is a post from HackRead.com Read the original post: New Bitcoin Token Protocol "Runes" Carries Potential Phishing Risk...

bitcoin-core:http_request: Use-of-uninitialized-value in evutil_inet_pton

Detailed Report: https://oss-fuzz.com/testcase?key=5162279376060416 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: httprequest Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: evutilinetpton bracketaddrok...

bitcoin-core:wallet_notifications: Container-overflow in std::__1::__wrap_iter<unsigned char*> std::__1::vector<unsigned char, std::__1::

Detailed Report: https://oss-fuzz.com/testcase?key=6031759698362368 Project: bitcoin-core Fuzzing Engine: centipede Fuzz Target: walletnotifications Job Type: centipedeasanbitcoin-core Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x51100004b6a1 Crash State:...

Fully Offline Electronic Cash: Is It an Intractable Problem?

By Daily Contributors Is truly offline offline electronic Cash possible? Unlike Bitcoin, experts dig deeper into the technical hurdles of creating software-based cash that works without the internet. Discover why achieving this might be a tougher nut to crack than expected. This is a post from...

btcd 安全漏洞

btcd is an alternative node-wide Bitcoin implementation written in Go golang open-sourced by Bitcoin in Go. A security vulnerability exists in versions prior to btcd 0.24.0 that stems from not properly implementing the consensus rules outlined in BIP 68 and BIP 112, making it vulnerable to...

Bitcoin Forensic Analysis Uncovers Money Laundering Clusters and Criminal Proceeds

A forensic analysis of a graph dataset containing transactions on the Bitcoin blockchain has revealed clusters associated with illicit activity and money laundering, including detecting criminal proceeds sent to a crypto exchange and previously unknown wallets belonging to a Russian darknet marke...

A Vast New Data Set Could Supercharge the AI Hunt for Crypto Money Laundering

Blockchain analysis firm Elliptic, MIT, and IBM have released a new AI model—and the 200-million-transaction dataset it's trained on—that aims to spot the “shape” of bitcoin money laundering...

CVE-2024-34149

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428. NOTE: some parties oppose this new limit check for example, because they agree with the objective but disagree with the technical mechanism, ...

CVE-2024-34149

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428. NOTE: some parties oppose this new limit check for example, because they agree with the objective but disagree with the technical mechanism, ...

CVE-2024-34149

Bitcoin Core versions through 27.0 and Bitcoin Knots versions before 25.1.knots20231115 are vulnerable due to a missing policy size limit check in the tapscript implementation. This vulnerability is distinct from CVE-2023-50428. To remediate this issue, users should update to Bitcoin Core version...

PT-2024-25720

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions through 27.0 Bitcoin Knots versions prior to 25.1.knots20231115 Description The tapscript implementation does not include a policy size limit check. This is a separate issue from CVE-2023-50428. Some parties have expresse...

CVE-2024-34149

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428. NOTE: some parties oppose this new limit check for example, because they agree with the objective but disagree with the technical mechanism, ...

CVE-2024-34149: Undefined Security Weakness

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428. NOTE: some parties oppose this new limit check for example, because they agree with the objective but disagree with the technical mechanism, ...

CVE-2024-34149

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428. NOTE: some parties oppose this new limit check for example, because they agree with the objective but disagree with the technical mechanism, ...

Bitcoin Core和Bitcoin Knots 安全漏洞

Bitcoin Core is an open source client for verifying the validity of blockchain transactions.Bitcoin Knots is a complete Bitcoin client. A security vulnerability exists in Bitcoin Core version 27.0 and earlier, and Bitcoin Knots version before 25.1.knots20231115, which stems from a lack of policy...