CVE-2025-54604

Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2)

High · published October 28, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

⚡ A rogue Bitcoin transaction could bring your node to its knees! With CVE-2025-54604, Bitcoin Core versions up to 29.0 suffer from uncontrolled resource consumption. 😱 Imagine a restaurant that takes in unlimited orders without considering its kitchen capacity – eventually, the cooks can’t keep up, and the whole service grinds to a halt. This vulnerability allows attackers to overwhelm the Bitcoin Core software, just like that frantic scenario. If exploited, this vulnerability could lead to a denial of service, crippling the performance of your Bitcoin node. An attacker could send a flood of requests that exhaust system resources, leaving your service slow or completely unresponsive – talk about a wallet-breaking situation!

Put simply

Imagine a restaurant that takes in unlimited orders without considering its kitchen capacity – eventually, the cooks can’t keep up, and the whole service grinds to a halt. This vulnerability allows attackers to overwhelm the Bitcoin Core software, just like that frantic scenario. This issue stems from the software's failure to properly manage incoming requests, allowing an attacker to consume system resources uncontrollably. Simply put, it doesn't have the checks in place to keep things running smoothly under load.

What to do

If exploited, this vulnerability could lead to a denial of service, crippling the performance of your Bitcoin node. An attacker could send a flood of requests that exhaust system resources, leaving your service slow or completely unresponsive – talk about a wallet-breaking situation! To mitigate this risk, update your Bitcoin Core to version 29.1 or later immediately. Additionally, consider implementing rate limiting on incoming requests to protect your resources from being overwhelmed in the future. 🛡️ You've got this! With these steps, your Bitcoin node will be back in fighting shape in no time. 💪✨

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.4th percentile
Published
2025-10-28T00:00Z
EPSS history
Timeline
  • 28 OCT 00:00Z
    Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2)
    cvelistv5