Wu reported that Bitcoin Core issued a statement revealing that the new -privatebroadcast feature introduced in version 31.0 has a privacy vulnerability. Under certain network conditions, it may cause the transaction initiator's IP address to be disclosed to receiving nodes. The fix will be included in version 31.1.


This vulnerability occurs when private broadcast supports BIP324 v2 transmission on IPv4 or IPv6 nodes. If the v2 handshake fails, Bitcoin Core will retry with v1, but this reconnection will not go through the Tor proxy and will connect directly via IPv4 or IPv6 to the peer.
Affected are Bitcoin Core 31.0 nodes that have enabled -privatebroadcast, broadcast transactions via sendrawtransaction RPC, and can directly establish outbound IPv4/IPv6 connections. Wallet RPC, onion, and I2P node connections are not affected.
Bitcoin Core recommends that relevant users disable -privatebroadcast, disable v2 transmission, or route outbound IPv4/IPv6 traffic through Tor before upgrading to version 31.1.
BTC-0.01%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned