Bitcoin Core Patch Fixes Flaw That Could Redirect Funds
Developers merged a code fix into Bitcoin Core to repair a vulnerability in partially signed transactions.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- A flaw involving missing outputs in SIGHASH_SINGLE requests could let attackers redirect Bitcoin without private keys.
- Bitcoin Core developers merged a fix into the project's PSBT codebase.
- The patch currently lacks a confirmed release version for deployment.
Bitcoin Core developers just merged a patch fixing a subtle flaw. Left unchecked, it could let attackers reroute transaction funds without needing to steal private keys.
The bug sits inside SIGHASH_SINGLE requests that lack outputs. Under very specific conditions, a missing output leaves recipients completely unbound from where the transaction was supposed to go. Devs patched the vulnerability right inside the repository's Partially Signed Bitcoin Transaction (PSBT) code.
The fix is officially in the main project repository, though maintainers haven't attached it to a scheduled release version yet.
Why it matters
You don't need a stolen private key if you can trick a network into sending money to the wrong address. While this fix targets an edge case in complex, multi-party transactions, closing it locks down Bitcoin's underlying transaction infrastructure against subtle exploits.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Priya Nair
Priya covers the AI side of crypto — agent tokens, decentralised compute and where the two industries actually meet.