Core Lightning warns of attacks on unpatched nodes
Core Lightning urges node operators to upgrade after attacks hit older versions. Update now to patch security flaws, avoid crashes, and protect Lightning funds.
Core Lightning has urged operators of older Bitcoin Lightning Network nodes to upgrade after reports that attackers are targeting unpatched systems. The opensource software team said anyone running version 26.06.7 or earlier should move to the latest release as soon as possible.
The project did not say which vulnerabilities were being exploited or what damage could result. In September, Core Lightning said it was investigating an issue affecting experimental features and later released version 26.06.8 with bug fixes and security patches.
The latest update addressed several problems, including crashes, memory exhaustion in the REST interface and a channelclosing bug that could expose users to fund losses through penalties. The team also said it withheld some tests in the release to make exploitation harder while operators updated.