来源原文.

Bitcoin Core maintained an unlimited list of banned IP addresses and performed a quadratic operation on it. This could lead to an OOM crash and a CPU Dos. This issue is considered High severity. Details Bitcoin Core maintained a list of ba…

Disclosure of the details of an integer overflow bug which risked causing a network split, a fix for which was released on January 15th, 2021 in Bitcoin Core version 0.21.0. This issue is considered Medium severity. Technical details A net…

A node could be stalled for hours when processing the orphans of a specially crafted unconfirmed transaction. This issue is considered High severity. Details After accepting a transaction into its mempool, the node would go through its cac…

A node could be forced to allocate large buffers when receiving a message, which could be leveraged to remotely crash it by OOM. This issue is considered Medium severity. Details Without a tighter bound, received messages’ size was limited…

After Bitcoin Core 0.12.0 and before Bitcoin Core 0.15.0 a node could be spammed with minimum difficulty headers, which could possibly be leveraged to crash it by OOM. This issue is considered Medium severity. Details Before the introducti…

A node could be forced to allocate a significant amount of memory upon receiving a specially crafted INV message. This was particularly an issue for nodes with little available memory or a large number of connections. This issue is conside…

An attacker could prevent a node from seeing a specific unconfirmed transaction. This issue is considered Medium severity. Details Before this issue was fixed in PR 19988, the “g_already_asked_for” mechanism was used to schedule GETDATA re…

Bitcoin-Qt could crash upon opening a BIP72 URI. This issue is considered Medium severity. Details BIP72 extends the BIP21 URI scheme with an r parameter to fetch a payment request from. An attacker could simply point the URL contained in…

A malformed GETDATA message could trigger an infinite loop on the receiving node, using 100% of the CPU allocated to this thread and not making further progress on this connection. This issue is considered Low severity. Details Before Bitc…

A buffer overflow enabling a significant data leak was discovered in miniupnpc . Combined with the then recently-disclosed CVE-2015-6031 it enabled an RCE in miniupnpc which could have led to an RCE in Bitcoin Core. This was fixed in Bitco…

On 2024-06-23, 00:19 AM UTC, a phishing email was sent out to 35,794 email addresses by updates@blog.ethereum.org with the following content Users who clicked the link in the email were sent to a malicious website: This website had a crypt…

The Ethereum Foundation, along with Aztec, Polygon, Scroll, Taiko, zkSync, announces the 25 winners of the collaborative ZK grant round. Each sponsor contributed 150,000 USD to the shared pool of 900,000 USD. The winners were selected thro…

As a global public resource, technology must remain open, accessible, and dedicated to promoting the greater good. The Next Billion Fellowship Program is a testament to this vision, seeking to capture stories of communities whose lives are…

Real gross domestic product (GDP) for the U.S. Virgin Islands decreased 1.3 percent in 2022 after increasing 3.7 percent in 2021. The decrease in real GDP reflected declines in exports, private fixed investment, government spending, and pe…

Bitcoin Core version 27.1 is now available for download . See the release notes for more information about the bug fixes in this release. If you have any questions, please stop by the #bitcoin IRC chatroom ( IRC , web ) and we’ll do our be…

Dear Ethereum explorers, Announcements are coming one after another as we get closer to Devcon. Today we’re thrilled to announce the launch of a quadratic funding round for SEA communities by clr.fund! We see the excitement and grassroots…

With just five months to go, we are entering the hot phase before Devcon! The Supporter Program, Impact Forum, and Devcon Scholars have already launched, bringing us closer to the Devcon ticket launch. Today we are sharing the details on h…

We are excited to announce the return of the Devcon Scholars Program for Devcon Southeast Asia! Bringing together builders from diverse geographies and disciplines, the Devcon Scholars Program offers more than just a scholarship to attend…

Ethereum community friends, We're excited to share that the Devcon Supporter Program, which explores new ways to fund Ethereum-related public goods and impactful projects, is BACK for Devcon 7 in SEA. Originally launched at Devcon VI in Bo…

Last week, Ethereum client, testing and research teams from around the world gathered together for a week of intense work on the Pectra network upgrade, PeerDAS and the Verge. Similarly to previous events like Edelweiss 🏔️ or Amphora 🏺, th…