🩸 Heartbleed Hits Bitcoin Core via BIP70
On 11 April 2014, bitcoin.org warned that Heartbleed, the OpenSSL bug, hit Bitcoin Core through the OpenSSL dependency BIP70 required before 0.9.0. "It is possible that your wallet could be compromised by clicking on a bitcoin: payment request link"; with -rpcssl enabled, the RPC password and private keys were also at risk.
