Bitcoin Core's upcoming update on October 10 focuses on enhancing transaction verification speed and addressing critical security vulnerabilities.
Key Details
- Final version of Bitcoin Core 32.0 scheduled for October 10.
- Improvements include faster block verification and updated transaction formats.
- Security patches address wallet name vulnerabilities and high memory usage.
The Bitcoin Core software, which enables users to verify Bitcoin transactions independently, is undergoing a significant update aimed at boosting performance and strengthening security measures.
Currently in its release-candidate phase, Bitcoin Core 32.0 is on track for final release on October 10, though this date may adjust depending on the results of ongoing testing.
This update is particularly relevant for node operators and developers who rely on the software for various applications, including wallet services. Notably, the enhancements will allow for faster block verification by enabling parallel database reading without impacting the generation rate of Bitcoin blocks.
The update will also introduce new default formats for sharing partially signed transactions among wallets and signing devices, while still offering access to older formats upon request.
Security improvements include a fix for vulnerabilities related to specially crafted wallet names, which could potentially execute unwanted commands on a node's system, particularly affecting non-Windows platforms. This risk was highlighted as a concern for authenticated users who could inadvertently trigger the walletnotify feature during transactions.
Another critical patch addresses excessive memory consumption in the updated HTTP server, which manages requests from connected applications. Matthew Zipkin, a contributor to the project, identified a “memory exhaustion scenario” and proposed a patch to mitigate this risk, which was subsequently integrated into Bitcoin Core 32.0 on September 5.
Additional findings from the review process indicated that unauthenticated requests could also lead to increased memory usage, particularly with the REST interface active. Following updates to the patch, tests showed a significant reduction in memory growth from 3.2 GB to approximately 3 MB over 90 seconds for 16 unauthenticated connections.
In addition to these enhancements, other developers have been actively addressing various vulnerabilities in the Bitcoin ecosystem. For instance, BitBox has patched critical firmware vulnerabilities in its hardware wallets, while Core Lightning developers have informed node operators about confirmed issues and are working on fixes.
