Promise

Core

Bitcoin

Standard

<h2 id="a-privacy-promise-that-can-be-broken">A Privacy Promise That Can Be Broken</h2>
Bitcoin Core version 31.0, released in April 2026, shipped a new optional feature called <code>-privatebroadcast</code>. <cite>The feature routes transaction broadcasts exclusively through Tor or I2P, so that a recipient node never learns the sender's IP address or geolocation.</cite> For privacy-conscious node operators, it was a meaningful upgrade. But a flaw found shortly after release undermines the core guarantee.
<cite>Developers have confirmed a privacy bug in the <code>-privatebroadcast</code> feature that may cause the originator's IP address to be revealed to the receiving peer under certain network conditions.</cite><cite>The trouble begins when the software attempts an encrypted connection to another node on the network. If that attempt fails, it quietly retries over a normal, unencrypted connection, skipping Tor entirely.</cite>
What makes this particularly serious is that the failure can be forced. A malicious peer can deliberately cause the encrypted handshake to fail, triggering the fallback and exposing the sender's real IP address in the process.
<h2 id="scope-timing-and-the-fix">Scope, Timing, and the Fix</h2>
<cite>The bug only affects users running version 31.0 who have explicitly enabled the feature. Standard wallet transactions remain unaffected.</cite><cite>Developers credit researcher Eugene Siegel with the discovery.</cite>
<cite>Developers published the advisory on June 6.</cite><a href="https://x.com/bitcoincoreorg" rel="noopener noreferrer nofollow">@bitcoincoreorg</a> then amplified it publicly on X on June 11. <cite>A fix is forthcoming and will be released with Bitcoin Core 31.1.</cite>
<cite>Until version 31.1 ships, affected users should disable the feature or route all their traffic through Tor.</cite> For most Bitcoin users who do not run a node with <code>-privatebroadcast</code> enabled, no action is required.
The episode is a reminder that newly introduced privacy tooling carries inherent risks in its early versions, even when the intent and design are sound. The broader Bitcoin network and its transaction relay layer are unaffected.
Sources: <a href="https://beincrypto.com/bitcoin-core-privacy-bug-ip-leak-2/" rel="noopener noreferrer nofollow">BeInCrypto: Bitcoin Core Developers Find Privacy Bug That Can Leak User IP Addresses</a> <a href="https://bitcoincore.org/en/releases/31.0/" rel="noopener noreferrer nofollow">Bitcoin Core 31.0 Release Notes</a>

Bitcoin Core's new privacy feature can leak the IP it promised to hide

Table of Contents

BSCN

Other articles published on Jun 15, 2026

Join our free newsletter for daily crypto updates!