Bitcoin Core Vulnerability CVE-2024-52911 Disclosed

A high-risk vulnerability, identified as CVE-2024-52911, has been disclosed by Bitcoin Core developers, affecting versions 0.14.1 to 28.4. According to ChainCatcher, this flaw allows miners to remotely crash other users' nodes and execute code by mining specially crafted blocks. The vulnerability was discovered by developer Cory Fields in November 2024 and responsibly disclosed. A fix was merged in December of the same year and released with version 29 in April 2025. The last series of versions containing the vulnerability, 28.x, ceased maintenance on April 19, 2026. Despite this, approximately 43% of nodes are estimated to still be running the vulnerable software due to the voluntary nature of Bitcoin full node upgrades, posing potential risks. Fortunately, the cost of executing such an attack is extremely high, as miners would need to dedicate significant computational power to mine invalid blocks that do not yield block rewards. As a result, it is likely that the vulnerability has never been exploited.