InvDoS Bitcoin-node vulnerability publicly disclosed
Developers publicly disclosed InvDoS, a denial-of-service weakness that could be used to exhaust the inbound connection slots of Bitcoin nodes.
InvDoS exploited transaction inventory behavior to keep victim nodes busy and occupy inbound connections, potentially making them less reachable by honest peers. The issue affected several Bitcoin implementations and was coordinated through responsible disclosure before public discussion.
The vulnerability did not let an attacker forge transactions or steal coins. Its risk was network-level denial of service and isolation pressure, making it important to distinguish availability attacks from consensus or key-compromise failures.
Public disclosure in September documented both the weakness and the remediation work, providing a useful example of cross-implementation security coordination in Bitcoin infrastructure.