According to CoinMeta, Bitcoin Core has disclosed a vulnerability: when service providers bind Bitcoin Core with TOR, the incoming TOR traffic is treated as local traffic, causing nodes with whitelist settings to relax restrictions on spam messages and privacy, allowing them to inherit a "trusted" status across thousands of nodes. This vulnerability fix was released in October 2025, and details about it were made public two weeks after Bitcoin Core stopped support for the 29.x series. There is also another high-severity vulnerability that may prevent mining nodes from being able to construct valid blocks until they are restarted. No related attacks have been reported yet, and nodes without whitelist settings are not affected.