About a week ago, a vulnerability was discovered in the new private transaction broadcast feature that was introduced in Bitcoin Core v31. The feature is disabled by default. So unless you explicitly enabled the feature, you are not affected.

The private broadcast feature has your node spin up three ephemeral peers over tor specifically for transaction broadcast, broadcasts the transaction to these peers, then disconnects from them.

The vulnerability culminates in the transaction being broadcast over clearnet despite the private transaction broadcast feature being enabled.

If your node is configured to proxy all p2p traffic over tor, however, your clearnet IP will not be exposed by this vulnerability. The vulnerability only applies to nodes that do normal p2p communication (block relay, mempool, etc.) over the clearnet but rely on the new private broadcast feature to relay transactions over tor.

Read more on the official writeup:

https://bitcoincore.org/en/2026/06/06/privatebroadcast-ip-leak/