Torbrowser updates are verified through the Tor consensus
Torbrowser's updater checks the Tor consensus to see whether Torbrowser's current version is recommended. If not, the updater gets updates from a location described in the consensus, and verifies downloaded updates against a hash provided in the consensus.