I hate to break it to folks that persist in the "Bitcoin is unhackable" delusion but CVE-2010-5139 is a real thing.