Bitcoin Core reveals Tor flaw that trusted thousands of nodes

Bitcoin Core has disclosed a vulnerability that gave incoming Tor connections trusted permissions on thousands of nodes, removing some protections against spam and privacy leaks. Thousands of reachable nodes granted incoming Tor connections permissions intended for trusted peers. The medium-severity flaw affected certain whitelist configurations and was patched in October 2025. A separate high-severity bug could stop affected mining nodes from creating valid block templates. Bitcoin Core’s security disclosure, published Nov. 10, identifies the Tor issue as CVE-2025-62860. Developers released the details alongside two other vulnerabilities after the last affected release series, 29.x, reached the end of support on Oct. 27.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to crypto.news.