Core Lightning Urges Immediate Upgrade as Attackers Target Unpatched Bitcoin Nodes
The Core Lightning team, maintaining open-source node software for the Bitcoin Lightning Network, has issued an urgent call for operators using older versions to upgrade immediately following reports of hackers targeting unpatched nodes. Previously identified bugs risked fund loss and node crashes, and the newly released 26.06.8 update addresses these issues and patches multiple vulnerabilities.
Upgrade Warning to Node Operators
On September 25, Core Lightning issued an urgent advisory to operators running version 26.06.7 or earlier, urging immediate upgrades to the latest release due to reports of attacks on unpatched nodes. The team withheld specifics on which vulnerabilities were exploited or their impact.
Earlier in August, Core Lightning dealt with a surge of AI-generated and genuine Common Vulnerabilities and Exposures (CVEs) reports. Subsequently, version 26.06.7 was released to address confirmed security issues.
Details of the 26.06.8 Update and Patches
On September 16, Core Lightning announced an investigation into potential issues affecting experimental features, which could compromise user funds. Approximately six days later, version 26.06.8 was published, delivering bug fixes as well as patches for vulnerabilities reported responsibly by Bitcoin Red Team, 12 other named entities, and anonymous reporters.
Notable fixes included flaws that could crash sender nodes, memory exhaustion risks in the REST interface, and a channel-closing bug that might cause users to lose funds due to penalties.
To limit the risk of abuse before operators updated their software, some tests related to the patches were deliberately withheld from the public changelog.
Why it matters
This news is critical for users and operators of the Lightning Network because vulnerabilities in node software can result in fund loss and network disruption. The urgent Core Lightning upgrade helps secure user funds and maintains the network’s stability. The announcement highlights increasing threats to Bitcoin infrastructure and emphasizes the importance of swift response and community collaboration to mitigate risks.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗