#比特币Core披露Tor流量漏洞
A tech explainer: What exactly is this “Tor vulnerability”? Explained in one sentence
$BTC A lot of people panicked when they saw “Bitcoin Core discloses Tor vulnerability.” Don’t rush to judgment—first get the timeline straight.
Vulnerability ID: CVE-2025-62860. The core issue in one sentence: when service providers bundle Bitcoin Core with Tor, incoming Tor traffic is mistakenly classified as “local traffic.” If you have -whitelist enabled and the IP range includes your local Tor proxy, strangers connecting from outside via Tor inherit the permissions you grant to “trusted local nodes,” while spam protections and privacy restrictions are relaxed.
Key facts:
· Fixed versions: 30.0 / 29.2 / 28.3, released back in October 2025
· Public disclosure: November 10, 2026, two weeks after the last affected 29.x series reached end of life
· Nodes that did not enable -whitelist were never affected
This isn’t a “brand-new vulnerability that just appeared today.” It’s a routine disclosure more than a year after the patch was released. Public disclosure ≠ new risk—don’t let the headlines sway you.
#BitcoinCore #安全
A tech explainer: What exactly is this “Tor vulnerability”? Explained in one sentence
$BTC A lot of people panicked when they saw “Bitcoin Core discloses Tor vulnerability.” Don’t rush to judgment—first get the timeline straight.
Vulnerability ID: CVE-2025-62860. The core issue in one sentence: when service providers bundle Bitcoin Core with Tor, incoming Tor traffic is mistakenly classified as “local traffic.” If you have -whitelist enabled and the IP range includes your local Tor proxy, strangers connecting from outside via Tor inherit the permissions you grant to “trusted local nodes,” while spam protections and privacy restrictions are relaxed.
Key facts:
· Fixed versions: 30.0 / 29.2 / 28.3, released back in October 2025
· Public disclosure: November 10, 2026, two weeks after the last affected 29.x series reached end of life
· Nodes that did not enable -whitelist were never affected
This isn’t a “brand-new vulnerability that just appeared today.” It’s a routine disclosure more than a year after the patch was released. Public disclosure ≠ new risk—don’t let the headlines sway you.
#BitcoinCore #安全