Bitcoin Core disclosed a Tor traffic processing vulnerability and has released a fix.

Bitcoin Core disclosed a vulnerability: when service providers bundled Bitcoin Core with Tor, incoming Tor traffic was treated as local traffic, causing nodes with whitelist settings to relax spam and privacy restrictions on external nodes, allowing them to inherit a "trusted" state across thousands of nodes. A fix for this vulnerability was released in October 2025, with details announced by Bitcoin Core two weeks after the end of support for the 29.x series. Another high-severity vulnerability could prevent mining nodes from building valid blocks until they restart. No attacks have been reported so far, and nodes without whitelist settings are unaffected.