Update
Bitcoin Core Fixes Vulnerable Release
Bitcoin Core disclosed a configuration flaw that affected thousands of reachable Bitcoin mainnet nodes, allowing incoming Tor connections to be treated as trusted peers. The issue was rated medium severity and was fixed in October 2025. The problem arose from a non-default whitelist setting that included the IP address of the Tor daemon, which usually runs on the same machine or local network. The patch excludes incoming onion connections from address-based whitelist grants.