Bitcoin Core 31.1 Addresses Critical Privacy Vulnerability

Cryptonews

Bitcoin Core 31.1 Addresses Critical Privacy Vulnerability

First seen 9 Jul 2026, 18:11 UTC • •57.8

Article Content

1 / 3

Browse articles

ThreatCluster •July 10, 2026 at 00:58 UTC

•Bitcoin Core version 31.1 released to fix a critical IP address leakage vulnerability.
•The update ensures node operators can remain anonymous without exposing their clearnet IP addresses.
•Users must shut down their nodes before installing the update to apply security and performance improvements.

Bitcoin developers released version 31.1 of Bitcoin Core on July 9, 2026, which addresses a critical privacy vulnerability that could expose node operators' IP addresses. The update fixes an IP address leak associated with the -privatebroadcast feature, ensuring that users can maintain anonymity while operating nodes. Additionally, the release resolves a database engine flaw causing excessive disk operations, which was straining hardware. Node operators are advised to update their systems promptly to benefit from these security enhancements. Users must shut down their active nodes before installing the new binaries to apply the updates effectively.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 93d ago How this analysis works

Timeline

2026-07-09

Bitcoin Core version 31.1 released

The new version addresses a critical privacy vulnerability and resolves database engine flaws affecting node operations.

2026-07-09

Node operators advised to update

Users are urged to promptly update their systems to benefit from the security and database improvements offered in version 31.1.

More articles in this cluster (2)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Affected Platform (1)

Bitcoin Core

Relationships

Data Breach targets Bitcoin Core
Data Breach related to CWE-200 - Exposure of Sensitive Information

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…