An automated LLM scan run under Project Loupe, a tool built by Elias Rohrer at Spiral, surfaced the bugs. Bitcoin Core developer Gregory Sanders validated the findings, and the team published the disclosure of the most serious issue on October 28.

The main flaw, rated medium severity, lets a malicious peer send TCP urgent data to bypass per-peer read limits and queue unbounded data. In practice, it can trivially crash any Windows, macOS or BSD node it is connected to. Linux nodes use a different socket backend and are not affected.

The other two issues are a medium-severity slow memory leak tied to paused pre-BIP31 peers and a low-severity undo file overflow that requires impractical reorg conditions. Fixes shipped in versions 29.5, 30.4, 31.2 and 32.1, and no CVE numbers were assigned.

The gap was tight: the scan flagged the main bug on October 23, and a patched release was out four days later.