Hacking News
Bitcoin Library Flaws Risk Massive Fee Drain
Two Bitcoin library flaws have been identified by Bitcoinjs-lib, a library used to build Bitcoin applications. The library has patched two bugs that can make software understate the miner fee a valid transaction would pay if broadcast and accepted. The flaws affect partially signed Bitcoin transactions (PSBT) and can lead to valid transactions bypassing safety checks, potentially resulting in massive miner fees being underreported. Maintainers need to review their dependency version and how they validate imported PSBTs to mitigate these risks.