Bitcoin Core 31.0 - privatebroadcast feature has a privacy vulnerability

robot
Abstract generation in progress
Wu said that Bitcoin Core announced that the new -privatebroadcast feature introduced in version 31.0 has a privacy vulnerability. Under certain network conditions, it may cause the transaction initiator's IP address to be revealed to receiving nodes. The fix will be included in version 31.1.
This vulnerability occurs when private broadcast nodes support BIP324 v2 transmission over IPv4 or IPv6. If the v2 handshake fails, Bitcoin Core will retry with v1, but this reconnection will not go through the Tor proxy and will connect directly via IPv4 or IPv6.
Affected are Bitcoin Core 31.0 nodes that have enabled -privatebroadcast, broadcast transactions via sendrawtransaction RPC, and can directly establish outbound IPv4/IPv6 connections; wallet RPC, onion, and I2P nodes are not affected.
Bitcoin Core recommends that users disable -privatebroadcast, disable v2 transmission, or route outbound IPv4/IPv6 traffic through Tor before upgrading to 31.1.
BTC1.38%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 5
  • 2
  • Share
Comment
Add a comment
Add a comment
SandwichDodger
· 1h ago
Attention to sendrawtransaction users: this combination is the most dangerous
View OriginalReply0
BridgeSideBanter
· 3h ago
IPv4/IPv6 direct connection fallback v1, IPs are directly exposed, classic downgrade attack
View OriginalReply0
GateUser-d6fb8ff1
· 3h ago
This vulnerability is quite covert; if the v2 handshake fails, it exposes everything.
View OriginalReply0
GateUser-ecded933
· 3h ago
It's good that the wallet RPC is working fine; regular users can breathe a sigh of relief.
View OriginalReply0
GateUser-15b19a42
· 3h ago
-privatebroadcast listening to security is actually risky
View OriginalReply0
  • Pinned