Bitcoin Core Discloses Three Security Vulnerabilities, Urges Node Updates
Bitcoin Core has publicly disclosed three security vulnerabilities, identified as CVE-2025-62859, CVE-2025-62860, and CVE-2025-62861. These flaws were fixed in versions 28.3, 29.2, and 30.0, released in October 2025, but are only now being publicly described following the project's disclosure policy. The most significant vulnerability, CVE-2025-62860, affected thousands of reachable nodes running Bitcoin Core with the anonymity network Tor. This bug caused inbound Tor connections to be treated as trusted peers if the operator had set the `-whitelist` option for an IP range that included the Tor service address. This granted external Tor users the same permissions as internal devices, potentially compromising privacy and availability. The other two flaws include a medium-severity bug (CVE-2025-62859) related to compact block processing, which could stall a node's block processing, and a high-severity flaw (CVE-2025-62861) primarily affecting miners, which could halt block template creation after a chain reo...