The Tor security notice does not affect everyone who has $BTC .

On November 10, Bitcoin Core published a bug that granted trusted permissions to incoming Tor connections on certain nodes. This weakened protections against flooding and information leaks.

The condition matters: it occurred when configuring a trusted list that included the Tor proxy address. Nodes without that option were not affected.

The fix was released back in October 2025, in versions 30.0, 29.2, and 28.3. Publishing the details now does not mean the bug was discovered today.

I would first check which version and configuration the notice mentions. A security headline is of little use if it does not explain who needs to review anything.