Bitcoin Core has added a safeguard against signing transactions that may not bind funds to the payment destination a user approved.

The change, merged into Bitcoin Core’s master development branch on Sept. 25, targets a narrow flaw in partially signed Bitcoin transactions, or PSBTs , that could produce a valid signature without protecting the intended output.

Bitcoin Optech highlighted the update on Oct. 2. The issue does not expose a user’s private key, but creates a different risk: a signature can remain valid even when the transaction’s recipient is changed under specific conditions.

The weakness involves SIGHASH_SINGLE which is a signing mode designed to commit an input to the output in the corresponding position. If the transaction contains no output at that position, the protection breaks down differently depending on the type of Bitcoin being spent.

For legacy inputs, the missing-output case can produce a signature over a fixed hash value. Bitcoin Core developers said that signature may then be reusable against other unspent outputs controlled by the same key when the same structural conditions are present.

SegWit v0 transactions retain stronger protections because the signature still commits to the specific coin being spent and its amount. The destination output, however, can remain unbound.

That creates an authorization problem for wallets and signing devices: software could present one payment to the user while producing a signature that does not cryptographically guarantee that the approved recipient remains unchanged.

Bitcoin Core already rejected the edge case through its raw-transaction signing interface. Its PSBT path, including walletprocesspsbt could still sign it.

From an on-chain analytics and liquidity distribution perspective, developments around "Bitcoin Core’s new fix closes gap that could redirect funds without stealing keys" signal important shifts in network participation. Market participants observe that derivative funding metrics, exchange reserve telemetry, and smart contract protocol interactions reflect cautious accumulation alongside disciplined risk hedging across the sector.

Technical research analysts at CryptoAce VIP note that high-density order book clusters and volume-weighted average price (VWAP) benchmarks near recent consolidation floors will serve as pivotal indicators. Market observers are advised to cross-examine telemetry on verified block explorers before making capital allocations.

Editorial Fact-Check & Verification Note: This briefing was curated, corroborated, and synthesized by the CryptoAce VIP Editorial Desk. Readers following "Bitcoin Core’s new fix closes gap that could redirect funds without stealing keys" are encouraged to review the full primary source coverage linked below for complete historical context, direct quotes, and official statements.