Source: CoinDesk
“Strangers connecting through Tor could bypass spam and privacy protections on thousands of bitcoin nodes because the software treated them as trusted computers. Bitcoin Core published a formal security advisory on Tuesday, about 13 months after releasing a fix. The code change had been public on GitHub since September 2025, under a title explicitly saying whitelist permissions should not apply to incoming Tor connections. The flaw was one of three developers disclosed Tuesday, all patched in releases issued last October. Another could leave a mining node unable to build blocks until its operator restarted it.” (11/12/26)