# Bitcoin Core closes a signing path that could let an attacker redirect a payment without stealing keys

The merged fix stops the wallet from signing a SIGHASH_SINGLE input that has no matching output, but no release has yet been confirmed to ship it.

- Published: 2026-10-05T05:31:33.542Z
- Canonical: https://polylog.news/crypto/2026-10-05/bitcoin-core-closes-a-signing-path-that-could-let-an-attacke
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [CryptoSlate](https://cryptoslate.com/bitcoin-cores-new-fix-closes-gap-that-could-redirect-funds-without-stealing-keys/), [GitHub bitcoin/bitcoin PR #35984](https://github.com/bitcoin/bitcoin/pull/35984), [GitHub bitcoin/bitcoin Issue #35977](https://github.com/bitcoin/bitcoin/issues/35977), [GitHub diybitcoinhardware/embit PR #152](https://github.com/diybitcoinhardware/embit/pull/152)

Bitcoin Core developers merged a change on September 25. It stops the wallet from producing a type of signature that is not tied to the transaction it appears to approve, CryptoSlate reported. The fix is tracked in pull request 35984 and is…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-10-05/bitcoin-core-closes-a-signing-path-that-could-let-an-attacke (subscription information: https://polylog.news/pricing).