Bitcoin Core to Publicly Demonstrate Bitcoin Consensus Vulnerabilities on Signet

Bitcoin Core developers have scheduled a public demonstration of so-called "attack blocks" on the Signet testnet for April 8. These specially engineered blocks require significantly more computational resources to validate than standard ones.

Why This Matters

The demonstration aims to visually prove the severity of four known Bitcoin consensus vulnerabilities. All four fall within the scope of the Great Consensus Cleanup initiative, formalized as BIP-54 — a Bitcoin Improvement Proposal that describes a bundled soft fork designed to patch multiple protocol weaknesses in a single upgrade.

If activated, BIP-54 would shield Bitcoin from several long-known attack vectors, bolstering the overall resilience and security of the network.

The Four Vulnerabilities BIP-54 Addresses

The proposal targets four distinct issues:

• Timewarp attack. Miners controlling substantial hashrate can manipulate block timestamps to artificially lower mining difficulty. BIP-54 introduces new rules governing timestamps of the first and last block in each difficulty adjustment period.
• Computationally expensive transactions. Certain specially crafted transactions can take anywhere from several minutes to an hour to verify on modest hardware, straining nodes and giving miners a tool to pressure competitors. BIP-54 caps the number of potentially executable signature operations per transaction — exceeding the limit renders the transaction invalid.
• 64-byte transaction ambiguity in the Merkle tree. A transaction exactly 64 bytes in size creates ambiguity — it can be interpreted as either a leaf or an internal node in the Merkle tree. This weakens inclusion proofs and makes the Merkle root unreliable. Under BIP-54, transactions of exactly 64 bytes become invalid.
• Legacy BIP-30 check. This old safeguard against duplicate TxIDs became largely redundant after BIP-34 activation but has remained in the consensus rules for historical reasons. BIP-54 mandates that new Coinbase transactions must be unique, allowing the legacy check to be permanently retired.

How the Demonstration Will Work

The developers emphasized they will not showcase the worst-case attack scenario. Script and transaction details will be withheld to avoid providing additional information to potential attackers. Instead, participants will observe blocks whose verification demands an order of magnitude more resources than normal.

The event kicks off at 10:00 EST (14:00 UTC). Anyone can spin up a Bitcoin Core node on Signet — requiring roughly 32–33 GB of disk space — and watch the mining and block processing in real time.

A visualization patch has been prepared for the bitcoin-tui terminal interface, maintained by developer AJ Towns. It enables real-time monitoring of block processing through a dedicated Slow Blocks tab. The developers cautioned, however, that the patch was built quickly and has not undergone a full audit. For safety, participants are advised to use fresh nodes with no funds on the device.

Broader Context

The demonstration comes amid growing attention to Bitcoin's technical security. Earlier in April, UTXOracle creator Steve Jeffress discovered that approximately 99% of Taproot transactions on the Bitcoin network turned out to be "dust."