⚡ CORE LIGHTNING WARNS ATTACKERS ARE TARGETING UNPATCHED NODES

Core Lightning has issued an urgent security warning to Bitcoin Lightning node operators.

The team says it has received reports that attackers are targeting nodes running:

v26.06.7 or earlier.

Operators are being told to upgrade to:

v26.06.8

The update has been available since September 22 and addresses several confirmed issues, including:

• A crash-on-send bug
• REST requests that can exhaust node memory
• A channel-closing flaw that could result in funds being lost through a penalty mechanism

Important:

This is NOT a vulnerability in Bitcoin’s base layer.

The issue affects Core Lightning, one implementation of the Lightning Network.

Bitcoin’s consensus rules and the Bitcoin blockchain itself are not affected.

Also important:

Core Lightning has not publicly identified exactly which vulnerabilities attackers are exploiting.

And there are currently no publicly confirmed reports of funds being lost through the attacks.

But the warning has now moved beyond a theoretical vulnerability.

Unpatched Lightning infrastructure is reportedly being actively targeted.

Running your own node gives you sovereignty.

It also means running your own security infrastructure.

@BitcoinNews