Bitcoin Core Exposes Tor Whitelist Vulnerability
A flaw in Bitcoin Core’s whitelist settings allowed Tor connections to gain trusted permissions on thousands of nodes, removing spam and privacy safeguards.
Bitcoin Core has disclosed a vulnerability that allowed incoming Tor connections to receive trusted permissions on thousands of nodes, removing spam and privacy safeguards. The flaw, identified as CVE-2025-62860, stemmed from whitelist settings that matched Tor traffic to trusted peer ranges, bypassing denial‑of‑service limits. The issue was reported on September 12, 2025, and patched in Bitcoin Core 30.0 on October 10, 2025.
Key Facts
Instant Telegram notifications for large on-chain moves.
- CVE‑2025‑62860 let Tor peers bypass whitelist limits on thousands of mainnet nodes.
- The bug was fixed in Bitcoin Core 30.0, with earlier releases 29.2 and 28.3 also patched.
- The flaw removed protections against spam and privacy leaks.
- Two other vulnerabilities, CVE‑2025‑62861 (mining node block template issue) and CVE‑2025‑62859 (compact‑block delay), were disclosed in the same advisory.
- The vulnerability was discovered by Martin Zumsande and Antoine Poinsot.
Impact
The flaw exposed a large portion of the Bitcoin network to potential abuse from Tor peers, potentially allowing malicious actors to bypass network safeguards. While no funds were reported lost, the incident underscores the importance of secure configuration and timely patching in core protocol software.
Source: crypto.news
This article is for information only and is not investment advice. BullishMarketCap news is produced with AI assistance from public sources and reviewed by our editors; see our editorial policy. Spotted an error? Tell us.
