In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it not a bug.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bitcoin_core | Bitcoin | 0.9 (including) | 26.0 (including) |
| Bitcoin_knots | Bitcoinknots | 0.9 (including) | 25.1 (excluding) |