Bitcoin inscriptions listed in the U.S. vulnerability database

share
Bitcoin inscriptions listed in the U.S. vulnerability database

The U.S. National Vulnerability Database, NVD, officially classified Bitcoin's Inscriptions technology as a network security risk on December 9th, making it a nationally recognized vulnerability. The controversy surrounding Inscriptions continues to ferment within the cryptocurrency community.

Will ORDI and other BRC20 tokens be eliminated? Developers pledge to fix Bitcoin vulnerabilities next year, sparking debates within the Bitcoin community.

Inscriptions Listed on the U.S. Vulnerability Database

The NVD database, managed by the U.S. National Institute of Standards and Technology (NIST) under the U.S. Department of Commerce, lists vulnerabilities that have been identified and recorded. The specific vulnerability has been assigned the CVE code 2023-50428.

The database indicates that in versions prior to Bitcoin Core v26 and Bitcoin Knots 25.1.knots client software, the data carrier size limit can still be bypassed by obfuscating data as code.

The controversy's protagonist, Bitcoin Core developer Luke Dashjr, also mentioned the event of being listed in the database on Twitter.

SlowMist Founder: Inscriptions Labeled with Vulnerability Tag

Yu Xian presented three opinions on this matter:

  1. Although anyone can apply for a CVE code, it is one of the most well-known vulnerability proofs in the eyes of cybersecurity organizations, which may concern those involved in the Bitcoin ecosystem.

  2. It is normal for CVE codes to be referenced by the NVD, and it is not as exaggerated as "Bitcoin extremists seeking government assistance."

  3. Once Inscriptions has been labeled with a vulnerability tag, it may be difficult to remove.

He stated:

Some say I am spreading FUD, but I am just objectively conveying some security concepts and viewpoints. If this is considered FUD, you might as well let go of these things you are so obsessed with and take a closer look at the real world.