Bitcoin Core discloses medium-severity vulnerability in Tor connection whitelist
Original headlineBitcoin Core 披露 Tor 连接白名单中危漏洞
Not investment advice. Muhabbit scores how much a story may matter, not which way to trade.
Bitcoin Core disclosed a fixed medium-severity vulnerability, CVE-2025-62860, that caused nodes with optional whitelisting enabled and IP ranges covering the Tor proxy to mistakenly grant whitelist status to inbound Tor connections. Thousands of reachable mainnet nodes were affected, with some DoS limits and privacy protections bypassed. Fixes shipped in Bitcoin Core 30.0 and 29.2 in October 2025. Two other flaws disclosed alongside it concerned block processing and mining nodes' block template creation. The disclosure matters because misconfigured whitelisting can weaken spam defenses and leak connection privacy on a large share of the network; operators should verify they run 29.2 or 30.0 and review whitelist ranges that overlap Tor proxy addresses.
Muhabbit's AI wrote this summary in its own words from TechFlow's report and translated it from Chinese. It can get details wrong, so check the source.
Named in this story
Bitcoin Core, Tor, The Block