bitcoin core · Delving Bitcoin
Bitcoin Core v31.1: fixed a path where -privatebroadcast mode could connect over clearnet
The release discussion reports that v31.1 fixes a path where a connection in -privatebroadcast mode could go over clearnet despite a private network being enabled. The author advises everyone using this mode to update without delay. The message contains no details of the defect or information about exploitation.
Actions to take
If your node starts with -privatebroadcast and does not have these fixes, update to the release specified in the message soon. Until you update, do not rely on this mode as a guarantee of broadcast privacy: broadcasts could go outside the private network. Installations that do not use the mode, and those that already contain this fix, need no action.
Source: delvingbitcoin.org
Incident history
- 27 OctBitcoin Core v31.1: fixed a path where -privatebroadcast mode could connect over clearnet
- 28 OctBitcoin Core 32.1: the same -privatebroadcast IP-leak fix reaches the new major branch; 29.x and older versions reach end of support