diff --git a/p2p/protocol/holepunch/svc.go b/p2p/protocol/holepunch/svc.go
index 8fc9158f8e..f7ca7c4a12 100644
--- a/p2p/protocol/holepunch/svc.go
+++ b/p2p/protocol/holepunch/svc.go
@@ -45,9 +45,11 @@ type Service struct {
 	ctx       context.Context
 	ctxCancel context.CancelFunc
 
-	host        host.Host
-	ids         identify.IDService
-	holePuncher *holePuncher
+	host host.Host
+	ids  identify.IDService
+
+	holePuncherMx sync.Mutex
+	holePuncher   *holePuncher
 
 	hasPublicAddrsChan chan struct{}
 
@@ -138,7 +140,9 @@ func (s *Service) watchForPublicAddr() {
 			if e.(event.EvtLocalReachabilityChanged).Reachability != network.ReachabilityPrivate {
 				continue
 			}
+			s.holePuncherMx.Lock()
 			s.holePuncher = newHolePuncher(s.host, s.ids, s.tracer)
+			s.holePuncherMx.Unlock()
 			close(s.hasPublicAddrsChan)
 			return
 		}
@@ -147,7 +151,12 @@ func (s *Service) watchForPublicAddr() {
 
 // Close closes the Hole Punch Service.
 func (s *Service) Close() error {
-	err := s.holePuncher.Close()
+	var err error
+	s.holePuncherMx.Lock()
+	if s.holePuncher != nil {
+		err = s.holePuncher.Close()
+	}
+	s.holePuncherMx.Unlock()
 	s.tracer.Close()
 	s.host.RemoveStreamHandler(Protocol)
 	s.ctxCancel()
@@ -257,5 +266,8 @@ func (s *Service) handleNewStream(str network.Stream) {
 // TODO: find a solution for this.
 func (s *Service) DirectConnect(p peer.ID) error {
 	<-s.hasPublicAddrsChan
-	return s.holePuncher.DirectConnect(p)
+	s.holePuncherMx.Lock()
+	holePuncher := s.holePuncher
+	s.holePuncherMx.Unlock()
+	return holePuncher.DirectConnect(p)
 }
diff --git a/version.json b/version.json
index 0a972ecb1b..de9df8be8d 100644
--- a/version.json
+++ b/version.json
@@ -1,3 +1,3 @@
 {
-  "version": "v0.19.0"
+  "version": "v0.19.1"
 }