Konam@konam
Crypto Trading
A vulnerability has been discovered in Bitcoin Core v31.0 that could expose a user's actual IP address. If you are running a node or using this version, immediate attention and configuration changes are recommended.
The bug identified stems from Bitcoin Core's 'private broadcast' feature. Originally, this feature was designed to route transactions through the Tor network to maintain node anonymity. However, if the Tor connection fails or does not function correctly, inadequate error handling allows the user's actual IP address to be exposed to the network.
Exposing the IP address of a transaction origin can link specific addresses to the physical location and identity of the actual user, posing a serious threat to on-chain privacy. It is a paradoxical situation where a feature intended to enhance privacy becomes a security vulnerability for users who have enabled it.
Developers plan to address this in the upcoming v31.1 version. Until the update is released, node operators should take the following temporary measures for safety:
- Disable the private broadcast feature: If you are not certain about the reliability of your Tor connection, it is best to turn off the relevant setting.
- Monitor Tor connection status regularly: You can apply strict firewall rules to ensure that transactions are not rerouted via the public network if the Tor connection drops.
Even minor bugs in core infrastructure can pose security risks depending on your node operating environment, so v31.0 users should proactively check their settings until a patch is available.