Bitcoin Core disclosed on November 10, 2025, that a misconfiguration had caused thousands of reachable Bitcoin nodes to treat incoming Tor connections as coming from trusted peers. These connections were exempt from denial-of-service limits and some privacy protections, but the privileges did not provide wallet access or enable bitcoin theft. The medium-severity issue, tracked as CVE-2025-62860, affected only configurations whose trusted address range included the Tor daemon’s IP address. The fix shipped in October 2025 with Bitcoin Core 30.0, 29.2, and 28.3, and operators should check their version and configuration before moving to a maintained release.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
