<oembed><type>rich</type><version>1.0</version><author_name>hodlonaut (npub1cj…wj2rh)</author_name><author_url>https://nostr.ae/npub1cjw49ftnxene9wdxujz3tp7zspp0kf862cjud4nm3j2usag6eg2smwj2rh</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>In 2025 Bitcoin Core removed a decade-old mempool policy default — a configurable limit on how much non-financial data nodes would relay. OP_RETURN was effectively uncapped.&#xA;&#xA;Not a consensus rule. A default setting. But defaults govern what most of the network does. Which governs what miners see. Which governs what gets mined.  &#xA;&#xA;The justification: it wasn’t working anyway, data was getting in through a loophole.  &#xA;&#xA;What wasn’t disclosed: that loophole had been deliberately kept open.  &#xA;&#xA;Here’s the documented sequence:&#xA;&#xA;2014: Luke Dashjr creates the -datacarriersize configuration option.  &#xA;&#xA;Its description: &#34;Maximum size of data in data carrier transactions we relay and mine.&#34;  &#xA;&#xA;Broad by design. Covers all transaction components.  That&#39;s the operative text for ~10 years.&#xA;&#xA;***&#xA;&#xA;Late 2023: Developer Marco Falke changes the -datacarriersize description in v26.0.&#xA;&#xA;New wording inserts &#34;scriptPubKey&#34; — outputs only.&#xA;&#xA;Inscriptions use the input/witness section.&#xA;&#xA;That single word change surgically excluded inscription spam from the option&#39;s scope.&#xA;&#xA;***&#xA;&#xA;That change was not a typo fix.&#xA;&#xA;AJ Towns ACKed it.&#xA;&#xA;The diff is documented. The before/after screenshot exists.&#xA;&#xA;The configuration option Luke built to protect the network had its scope quietly narrowed — while he was still maintaining the project.&#xA;&#xA;***&#xA;&#xA;Sept 2023: Luke submits PR #28408.&#xA;&#xA;Purpose: extend -datacarriersize to cover the SegWit/Taproot witness loophole inscriptions were using to bypass existing limits.&#xA;&#xA;A direct fix. Using the exact configuration option he built. Nine years earlier.&#xA;&#xA;***&#xA;&#xA;Gloria Zhao rejects it.&#xA;&#xA;On-record comment: &#34;History of this config option suggests datacarriersize is meant to limit the size of data in OP_RETURN outputs, so this statement is untrue.&#34;&#xA;&#xA;She cites curated historical PRs to support the narrowed reading.&#xA;&#xA;***&#xA;&#xA;She does not mention that the operative description in the codebase had been changed in v26.0 by Marco Falke.&#xA;&#xA;AJ Towns — who ACKed that documentation change — then gives an Approach NACK on Luke&#39;s patch.&#xA;&#xA;The same man enabled the rejection and then ratified it.&#xA;&#xA;***&#xA;&#xA;Peter Todd also NACKs. Calls Luke&#39;s patch &#34;censoring&#34; transactions.&#xA;&#xA;He does not disclose he operates Libre Relay — a direct-to-miner relay that routes inscription transactions around mempool policy.&#xA;&#xA;He built the bypass. Then called closing it censorship.&#xA;&#xA;***&#xA;&#xA;PR #28408 closes. 11 Concept NACKs vs 9 Concept ACKs.&#xA;&#xA;The loophole remains open.&#xA;&#xA;Jan 5, 2024: Luke opens Issue #29187 and formally designates the bypass as a security vulnerability: CVE-2023-50428.&#xA;&#xA;&#34;Active exploitation... very harmful to Bitcoin even today.&#34;&#xA;&#xA;***&#xA;&#xA;Oct 2024: Contributor darosior disputes the CVE.&#xA;&#xA;&#34;The large majority of contributors disagree this is a security vulnerability. I believe the CVE system is being abused.&#34;&#xA;&#xA;Next day, achow101 closes the issue.&#xA;&#xA;The vulnerability is officially declared not a vulnerability.&#xA;&#xA;***&#xA;&#xA;April 2025: Peter Todd files PR #32359 to remove the OP_RETURN limit entirely.&#xA;&#xA;He later admits: &#34;This pull-req wasn&#39;t my idea. I was asked to open it by an active Core dev because entities like Citrea are using unprunable outputs instead of OP_Return.&#34;&#xA;&#xA;***&#xA;&#xA;Citrea: a VC-funded ZK-rollup whose business model needed more on-chain data storage.&#xA;&#xA;Jameson Lopp publicly advocates for the PR.&#xA;&#xA;He is an investor in Citrea.&#xA;&#xA;This was not disclosed.&#xA;&#xA;***&#xA;&#xA;Samson Mow calls it &#34;PR laundering&#34; — routing through Todd to fake independent initiative.&#xA;&#xA;Antoine Poinsot (Chaincode Labs) connected to early discussions.&#xA;&#xA;The same Poinsot who disputed Luke&#39;s CVE in October 2024.&#xA;&#xA;He sits at both ends of the sequence.&#xA;&#xA;***&#xA;&#xA;June 9, 2025: Gloria Zhao merges the uncapped OP_RETURN change.&#xA;&#xA;The primary public justification: inscription data via the witness loophole is less prunable, so OP_RETURN should be uncapped to redirect it.&#xA;&#xA;The harm reduction argument.&#xA;&#xA;***&#xA;&#xA;That argument is entirely dependent on the witness loophole remaining open.&#xA;&#xA;If PR #28408 had been merged in 2023, the loophole would be closed.&#xA;&#xA;The harm reduction argument would not exist.&#xA;&#xA;It would have had nothing to reduce harm from.&#xA;&#xA;***&#xA;&#xA;The person who rejected the patch that would have closed the loophole is the same person who merged the change that used the open loophole as its justification.&#xA;&#xA;That is not a coincidence.&#xA;&#xA;That is a sequence.&#xA;&#xA;***&#xA;&#xA;The last entry in Luke&#39;s closed CVE issue reads:&#xA;&#xA;&#34;glozow mentioned this on Jun 9, 2025 — policy: uncap datacarrier by default #32406&#34;&#xA;&#xA;The issue opened to fix the vulnerability referenced from the PR that exploited the unfixed vulnerability.&#xA;&#xA;GitHub closes the loop.&#xA;&#xA;***&#xA;&#xA;Every step is documented:&#xA;&#xA;→ Docs narrowed (v26.0, ACK: Towns)&#xA;→ Patch rejected using narrowed docs (Zhao, Chow)&#xA;→ CVE designated (Luke, Jan 2024)&#xA;→ CVE closed (darosior, achow101, Oct 2024)&#xA;→ Removal PR commissioned (Todd)&#xA;→ Uncap merged (Zhao, Jun 9 2025)&#xA;&#xA;***&#xA;&#xA;Adam Back claimed the narrowed definition &#34;was always the original intent.&#34;&#xA;&#xA;The original 2014 text has no mention of OP_RETURN, scriptPubKey, or outputs.&#xA;&#xA;That restriction was introduced in v26.0.&#xA;&#xA;He treated an amendment as original intent.&#xA;&#xA;***&#xA;&#xA;The PR had 423 thumbs-down against 105 thumbs-up.&#xA;&#xA;Ava Chow had said publicly in Dec 2023: &#34;If it is controversial, then we don&#39;t touch it.&#34;&#xA;&#xA;It was merged anyway.&#xA;&#xA;Luke Dashjr was muted on the PR. Bitcoin Mechanic was muted on the PR.&#xA;&#xA;***&#xA;&#xA;Bitcoin Core&#39;s response:&#xA;&#xA;→ 31 devs sign a letter calling opposition &#34;censorship&#34;&#xA;→ GitHub moderators mute the loudest critics&#xA;&#xA;And:&#xA;&#xA;→ Nick Szabo breaks 5-year silence: &#34;run Knots&#34;&#xA;→ 22% of the network switches to alternative software&#xA;&#xA;***&#xA;&#xA;The documentation was rewritten.&#xA;The patch was rejected using the rewrite.&#xA;The loophole was kept open.&#xA;The open loophole became the justification.&#xA;The justification enabled the uncap.&#xA;The person who rejected the patch merged the uncap.&#xA;&#xA;All on the public record.</html></oembed>