Thousands of Tor nodes once caused external nodes to inherit "trusted" status, Bitcoin Core discloses vulnerability

Odaily: Bitcoin News posted on X platform that Bitcoin Core has disclosed a vulnerability: when service providers bundle Bitcoin Core with Tor, incoming Tor traffic is treated as local traffic, causing nodes with whitelist settings enabled to relax spam and privacy restrictions for external nodes, allowing them to inherit "trusted" status across thousands of nodes. The fix was released in October 2025, and Bitcoin Core only disclosed the details two weeks after ending support for the 29.x series. Another high-severity vulnerability could prevent mining nodes from building valid blocks until restarted; no related attacks have been reported, and nodes without whitelist settings enabled are not affected.