Security· ★★★· neutral·

Bitcoin Core fixes unbounded memory growth from paused pre-BIP31 peers

  • —Memory could grow up to 2MB/hour per inbound peer and 5MB/hour per outbound peer
  • —The bug was found via an automated LLM scan in Spiral's Project Loupe
  • —PR #36667 was opened and merged on Oct 26, backported to versions 29–32
  • —Public disclosure followed on Oct 28, 2026
Why it matters: The flaw lets a remote peer slowly exhaust node memory, so operators should upgrade to the latest releases.
Source: Bitcoin Core