Bitcoin Core disclosed a flaw on Nov. 10 that gave incoming Tor connections trusted status on thousands of reachable Bitcoin mainnet nodes. The vulnerability applied only when a non-default -whitelist configuration included the Tor daemon's IP address. Affected connections could bypass denial-of-service limits and protections against privacy leaks, but the disclosed privileges do not establish wallet access or coin theft. Bitcoin Core released fixes in October 2025. Operators should check the running software version and configuration, then upgrade to a maintained release.