Bitcoin Core Patch Addresses Significant Tor Configuration Flaw
Bitcoin Core developers have recently disclosed a medium-severity vulnerability, identified as CVE-2025-62860, which mistakenly granted "trusted peer" status to thousands of nodes connecting via the Tor network. The flaw emerged from a configuration oversight where incoming Tor connections were granted exemptions from denial-of-service (DoS) limits and privacy protections, potentially weakening the network's overall resilience. While the issue did not put user funds or wallets at risk, it highlighted a critical gap in how the software interpreted trust for proxied connections.
The Mechanics of Mistaken Trust
The vulnerability was triggered when a node's -whitelist setting included the IP address of its own Tor daemon.
Because Bitcoin Core identifies the Tor daemon as the source of an incoming connection rather than the remote peer's actual network address, it applied whitelist permissions to any traffic passing through that daemon.
This meant that remote, anonymous peers were inadvertently treated as trusted local entities, allowing them to bypass the standard security throttles designed to prevent network abuse and data leaks.
This misidentification was particularly prevalent in bundled software packages where Tor and Bitcoin Core were pre-configured to work together with automated whitelisting.
Remediation and Node Operator Guidance
Following the discovery of the flaw by researchers in September 2025, Bitcoin Core released a series of patches to fundamentally change how trust is granted. The fix ensures that incoming "onion" connections are strictly excluded from address-based whitelist grants, effectively closing the loophole for remote peers. Current maintenance versions—including 30.x, 31.x, and the latest 32.1—incorporate these protections and have rendered older, vulnerable versions like 28.x and 29.x obsolete. Node operators are strongly encouraged to verify their software versions and ensure their current configurations do not inadvertently grant broad permissions to local proxies or Tor daemons.
