Bitcoin Core Developers Find Privacy Bug That Can Leak User IP Addresses

Bitcoin Core developers disclosed a critical privacy flaw in the newly launched privatebroadcast feature that can expose user IP addresses under specific network conditions, with a fix scheduled for version 31.1. The vulnerability undermines a core value proposition for institutional and privacy-conscious investors who rely on Bitcoin’s anonymity tooling to separate transaction origins from on-chain activity.

• Version 31.0 privatebroadcast feature, launched April 2026, can leak IP addresses when encrypted connections fail and retry over unencrypted channels.
• Attackers can actively trigger IP exposure by deliberately rejecting encrypted handshakes, forcing the software to revert to standard network transmission.
• Fix arrives in version 31.1; affected users should disable the feature or route all traffic through Tor until the patch releases.

• 31.0 Bitcoin Core version where privatebroadcast was introduced, four months before bug disclosure
• 31.1 Upcoming release version containing the privacy bug fix
• June 6 Date Bitcoin Core project publicly disclosed the vulnerability to the community

Bitcoin Core developers announced on June 6 that version 31.0, released in April 2026, contains a privacy vulnerability in its newly added privatebroadcast feature that can reveal a user’s IP address to receiving peers under certain network conditions.

The flaw directly contradicts the feature’s stated purpose: to anonymize transaction origination by routing broadcasts through Tor before reaching the recipient node. The developers confirmed a fix will ship with version 31.1, but offered no timeline for release, leaving affected users in a security gap that requires immediate mitigation.

The bug affects only users who explicitly enabled privatebroadcast on version 31.0, while standard Bitcoin wallet transactions remain unaffected. However, the incident raises sharp questions about quality assurance in Bitcoin Core’s development process and the reliability of privacy features that institutional investors increasingly demand as regulatory scrutiny on crypto transactions deepens.

Failed Encryption Handshake Forces Unencrypted Retry, Exposing Real IP Address

The vulnerability emerges from a fallback mechanism in Bitcoin’s peer connection logic. When privatebroadcast attempts to establish an encrypted connection to another node on the network, the software is designed to send the transaction through Tor first, masking the sender’s identity before the encrypted exchange occurs.

If that encrypted handshake fails, however, the software silently retries using a standard, unencrypted connection and bypasses Tor entirely.

When this unencrypted retry succeeds, the receiving peer learns the sender’s actual IP address, potentially enabling geographic or ISP-based identification. Because the Bitcoin blockchain records all transactions publicly, linking a transaction to an IP address creates a direct bridge between on-chain activity and real-world identity, defeating the privacy guarantee that privatebroadcast promised.

The severity intensifies because attackers need not wait for accidental failures. A malicious node can deliberately send a rejection signal during the encrypted handshake, forcing the software to attempt the unencrypted fallback.

This transforms the bug from a rare network edge case into an active attack vector that any sophisticated adversary can trigger at will against users running version 31.0 with the feature enabled.

Researcher Eugene Siegel Identifies Active Attack Scenario Before Exploitation

Bitcoin Core credited researcher Eugene Siegel with discovering the vulnerability before evidence of active exploitation emerged in the wild. Siegel’s identification of the forced-retry mechanism, particularly the fact that an attacker could deliberately cause the exposure, elevated the threat from theoretical network glitch to practically exploitable security hole.

The disclosure came through official channels on June 6, delivered in measured terms that avoided panic while clearly stating the risk. The project’s advisory note emphasized that “the originator’s IP address may be revealed” under “certain network conditions,” but the phrasing understated the attacker-controlled scenario that Siegel identified.

This gap between the advisory language and the full technical picture created confusion in the developer community about whether the bug was passive or active.

Despite the vulnerability’s direct threat to user privacy, a foundational principle in Bitcoin’s design, financial markets showed minimal reaction. Bitcoin traded near $63,700 on the day of the disclosure, little changed from prior sessions.

The muted response suggests that institutional investors either viewed the risk as isolated to a small number of opt-in users or retained confidence in the development team’s ability to patch the flaw quickly.

Version 31.1 Patch Pending as Users Choose Between Disabling Feature or Full Tor Routing

Until Bitcoin Core releases version 31.1, the project recommended that affected users either disable privatebroadcast entirely or route all their network traffic through Tor as a compensating control.

The latter option imposes significant performance and latency costs, since Tor connections are slower than direct peer links, yet it remains the only way to preserve privacy while using version 31.0 with the feature active.

The recommendation creates an operational dilemma for institutional users and node operators who deployed version 31.0 expecting a seamless privacy upgrade.

Disabling the feature rolls back to standard transaction broadcast, while full Tor routing requires network reconfiguration that may conflict with existing infrastructure or regulatory compliance frameworks that demand network transparency for transaction monitoring.

Bitcoin Core has not announced an estimated release date for version 31.1. The absence of a firm timeline prolongs the exposure window for any user who neglected to apply the mitigation guidance or who discovered the vulnerability only after deploying version 31.0 to production infrastructure.

This uncertainty directly impacts institutional risk management, since large operators cannot confidently forecast when the vulnerability will be fully remediated across their systems.

Privacy Feature Rollout Highlights Quality Control Gaps in Bitcoin Core Process

The privatebroadcast feature landed in version 31.0 as part of Bitcoin Core’s ongoing effort to strengthen privacy protections at the protocol level.

Privacy has become a regulatory and competitive flashpoint: governments worldwide are tightening rules on anonymous crypto transactions, while institutional investors increasingly demand tools to segregate their transaction patterns from public scrutiny. A feature-ready privacy tool in Bitcoin Core’s mainline release carried symbolic weight in the developer community’s commitment to that goal.

The bug’s discovery, months after release, exposes a potential gap in the testing regime for optional privacy features. Version 31.0 reached users in April 2026, and the vulnerability remained undetected until Eugene Siegel’s external review surfaced it in early June.

This two-month lag raises the question of whether Bitcoin Core’s code review or continuous integration testing fully exercises the fallback and retry logic under adversarial conditions.

Institutional users who build on Bitcoin Core, including exchanges, custody providers, and blockchain infrastructure firms, now face a trust calculus. Should they assume that additional scrutiny will uncover similar issues in other newly introduced features, or does this incident represent an isolated misstep in an otherwise reliable codebase?

The uncertainty arrives at a moment when regulatory frameworks are beginning to rely on Bitcoin Core as a reference implementation for custody and settlement standards.

Ongoing Debate Over Bitcoin Core Governance and Maintenance Authority Resurfaces

The vulnerability disclosure reignited broader questions about who holds ultimate responsibility for Bitcoin Core maintenance and which governance structure ensures accountability when serious flaws slip through. Bitcoin Core development is a decentralized, volunteer-driven effort overseen by a maintainer group, not a single company or centralized team with formal liability.

When bugs emerge, responsibility is diffuse: the researcher who finds it, the developers who miss it during review, and the maintainers who set release schedules all share blame without clear hierarchy.

This structural reality matters to institutional investors who are accustomed to commercial software vendors with defined security response policies, bug bounty programs, and service level agreements. Bitcoin Core operates under no such framework.

The project announced the fix would arrive “with 31.1,” but does not commit to a release window or security hotline for urgent installations at large operators.

The incident follows a recent dispute within the Bitcoin development community over transaction relay policy, another area where decentralized governance has struggled to reach consensus quickly. The accumulating friction suggests that Bitcoin Core’s informal decision-making model may not scale well to the complexity of maintaining a financial protocol that institutional capital now depends on.

Institutional investors and node operators running Bitcoin Core 31.0 with privatebroadcast enabled should immediately apply the recommended mitigations: disable