Bitcoin Core developer: "Inscriptions" are exploiting vulnerabilities in Bitcoin Core to send spam to the blockchain

ChainCatcher news, Bitcoin Core developer Luke Dashjr stated on X that "Inscriptions" are exploiting a vulnerability in the Bitcoin Core client to send spam to the blockchain. Since 2013, Bitcoin Core has allowed users to set an additional data size limit ('-datacarriersize') when forwarding or mining transactions. Inscriptions bypass this limit by disguising their data as program code.

Luke Dashjr stated, "This vulnerability was recently fixed in Bitcoin Knots v25.1. Due to severe disruptions in my workflow at the end of last year (v24 was completely skipped), the fix took longer than usual. The upcoming v26 version of Bitcoin Core still has the vulnerability. I can only hope it will be finally fixed before next year's v27."