Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2025-46598: n/a

0
High
VulnerabilityCVE-2025-46598cvecve-2025-46598
Published: Fri Mar 20 2026 (03/20/2026, 00:00:00 UTC)
Source: CVE Database V5

Description

CVE-2025-46598 is a denial of service (DoS) vulnerability affecting Bitcoin Core versions up to 29. 0. The flaw allows an attacker to craft a specific transaction that can disrupt the normal operation of Bitcoin Core nodes, potentially causing them to crash or become unresponsive. No known exploits are currently reported in the wild, and no patches or fixes have been linked yet. The vulnerability does not require authentication but does require the attacker to submit a crafted transaction to the network. This could impact the availability of Bitcoin nodes, affecting transaction processing and network reliability. Organizations running Bitcoin Core nodes should monitor for updates and consider network-level protections to mitigate potential exploitation. Countries with significant Bitcoin infrastructure and cryptocurrency activity are at higher risk. Given the potential to disrupt node availability and the ease of exploitation via crafted transactions, this vulnerability is assessed as high severity.

AI-Powered Analysis

AILast updated: 03/20/2026, 15:38:51 UTC

Technical Analysis

CVE-2025-46598 is a denial of service vulnerability identified in Bitcoin Core, the reference implementation of the Bitcoin protocol, affecting all versions through 29.0. The vulnerability arises from the way Bitcoin Core processes certain crafted transactions, which can cause the node software to crash or become unresponsive, effectively denying service to legitimate users. The exact technical mechanism of the crafted transaction is not detailed, but it likely involves malformed or specially constructed transaction data that triggers a fault in transaction validation or memory handling within the node software. Since Bitcoin Core nodes are critical for validating and relaying transactions across the Bitcoin network, a successful DoS attack could degrade network performance or partition the network by incapacitating nodes. No CVSS score has been assigned yet, and no patches or mitigations have been officially released. The vulnerability does not require authentication, as anyone able to broadcast transactions to the Bitcoin network can attempt exploitation. No user interaction beyond transaction submission is needed. The lack of known exploits in the wild suggests the vulnerability is either newly discovered or not yet weaponized. However, the potential impact on node availability and network stability makes this a significant concern for operators of Bitcoin infrastructure.

Potential Impact

The primary impact of CVE-2025-46598 is on the availability of Bitcoin Core nodes. Successful exploitation can cause nodes to crash or become unresponsive, disrupting their ability to validate and relay transactions. This can lead to temporary network instability, slower transaction processing, and potential fragmentation if multiple nodes are affected simultaneously. Organizations relying on Bitcoin Core nodes for transaction validation, wallet services, or blockchain data may experience service interruptions, affecting end users and business operations. While the vulnerability does not directly compromise confidentiality or integrity of blockchain data, the denial of service can undermine trust and reliability in Bitcoin services. Large-scale exploitation could impact cryptocurrency exchanges, payment processors, and financial institutions that depend on stable Bitcoin network connectivity. Given Bitcoin's global usage, disruptions could have cascading effects on cryptocurrency markets and related financial services.

Mitigation Recommendations

Until an official patch is released, organizations should implement network-level protections such as filtering or rate limiting incoming transactions from untrusted sources to reduce exposure to crafted malicious transactions. Running Bitcoin Core nodes behind firewalls and using transaction relay policies to limit acceptance of suspicious transactions can help mitigate risk. Monitoring node logs and performance metrics for signs of abnormal crashes or hangs is critical for early detection. Operators should subscribe to Bitcoin Core security advisories and promptly apply updates once patches addressing this vulnerability become available. Deploying redundant nodes and load balancing can improve resilience against DoS attacks. Additionally, participating in community discussions and threat intelligence sharing can provide early warnings and mitigation strategies. Avoid exposing Bitcoin Core RPC interfaces publicly without strong authentication to prevent indirect exploitation vectors.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
mitre
Date Reserved
2025-04-25T00:00:00.000Z
Cvss Version
null
State
PUBLISHED

Threat ID: 69bd66a5e32a4fbe5fa5cd2d

Added to database: 3/20/2026, 3:24:21 PM

Last enriched: 3/20/2026, 3:38:51 PM

Last updated: 3/20/2026, 4:29:05 PM

Views: 4

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console in Console -> Billing for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses