==============================================================================================================================================================
Vulnerabilidades e bugs
Falhas de segurança, bugs e incidentes em software de Bitcoin e Lightning: divulgações responsáveis (CVEs), ataques de negação de serviço (DoS), bugs de consenso, invasões e roubos. Acompanhar esses casos ajuda a entender onde os sistemas costumam falhar.
Discutido em 23 encontros
- Disclosure: DoS vulnerabilities fixed in Eclair v0.14.0
- Security releases: Core Lightning 26.06.9, LDK v0.2.7, BTCPay Server 2.4.5
- Blink: September 19 attack post mortem and bounty
- Second: bug in Ark server boarding flow drained 0.75 BTC of their liquidity
- Ledger: devices from reseller CryptoBilis drained
- Wallet Migration bug present in Bitcoin Core wallet 30.0 & 30.1
- CVE-2025-46597 - Remote crash on 32-bit systems
- CVE-2025-46598 - CPU DoS from unconfirmed transaction processing
- CVE-2025-54604 - Disk filling from spoofed self connections
- CVE-2025-54605 - Disk filling from invalid blocks
- LND: Infinite inbox DoS
- LND: Excessive failback exploit
- Jade vulnerability