<p>Version 2 P2P transport probably fixes at least part of this as it encrypts the traffic between Nodes.</p>
<p>From the paper:</p>
<blockquote>
<p>An obvious countermeasure would be to encrypt and
authenticate Bitcoin traffic. This would prevent even opportunistic
man-in-the-middle attacks (i.e. even if the user is unlucky
to choose the malicious Exit relay). - IX. COUNTERMEASURES</p>
</blockquote>
<p>The <strong>Motivation</strong> paragraph of BIP324 addresses this:
<a href="https://github.com/dhruv/bips/blob/bip324/bip-0324.mediawiki#user-content-Motivation" rel="nofollow noreferrer">https://github.com/dhruv/bips/blob/bip324/bip-0324.mediawiki#user-content-Motivation</a></p>
<p>More ressources on BIP324: <a href="https://bitcoinops.org/en/topics/v2-p2p-transport/" rel="nofollow noreferrer">https://bitcoinops.org/en/topics/v2-p2p-transport/</a></p>

CC BY-SA 4.0
2024-07-25T09:49:43.593Z
2024-07-25T09:49:43.593Z
f321x
<p>This <a href="https://arxiv.org/pdf/1410.6079.pdf" rel="noreferrer">paper</a> explains how combining Bitcoin and Tor creates an attack vector. A man in the middle can control the information flow between all users who connect over Tor. This paper is from 2014. Has this sort of risk been mitigated by new engineering yet?</p>

<security><tor>
Bitcoin over Tor and man in the middle attack: risks mitigated yet?
user270124
# Bitcoin over Tor and man in the middle attack: risks mitigated yet?

(Asked by: username_0 on 2021-01-18)

This [paper](https://arxiv.org/pdf/1410.6079.pdf) explains how combining Bitcoin and Tor creates an attack vector. A man in the middle can control the information flow between all users who connect over Tor. This paper is from 2014. Has this sort of risk been mitigated by new engineering yet?

**Tags:** security, tor


---

## 1 answers

### Answer by username_1 on 2024-07-25. Score: 1

Version 2 P2P transport probably fixes at least part of this as it encrypts the traffic between Nodes.

From the paper:

> An obvious countermeasure would be to encrypt and
> authenticate Bitcoin traffic. This would prevent even opportunistic
> man-in-the-middle attacks (i.e. even if the user is unlucky
> to choose the malicious Exit relay). - IX. COUNTERMEASURES

The **Motivation** paragraph of BIP324 addresses this:
<https://github.com/dhruv/bips/blob/bip324/bip-0324.mediawiki#user-content-Motivation>

More ressources on BIP324: <https://bitcoinops.org/en/topics/v2-p2p-transport/>


---

