Node Security

Core Lightnin

2026-10-03 18:29:49

Core Lightning says attackers are targeting nodes on version 26.06.7 and earlier

Core Lightning said attackers are going after nodes still running version 26.06.7 and older releases, according to monitoring cited by Bitcoin News. The project said patch 26.06.8, released on Sept. 22, fixes a channel-closing issue that could put funds at risk, along with bugs that can trigger crashes and memory exhaustion. Core Lightning has not disclosed the name of the vulnerability being used in the attacks, and it has not reported any stolen funds. Operators that have not yet upgraded remain the group currently being targeted.

240

Core Lightnin

2026-08-27 02:12:14

Core Lightning says real vulnerabilities are being fixed, advises nodes to restart with --offline

Core Lightning, a Bitcoin Lightning Network client, said it is reviewing a large number of AI-generated CVE reports and that some of them point to real vulnerabilities now under coordinated remediation. The team advised node operators not to shut their nodes down completely. Instead, it recommended restarting with the --offline flag. In that mode, the node stops peer connections and no longer routes payments, but it continues watching the blockchain and can still respond if a channel counterparty force-closes. Core Lightning also noted that users running Umbrel or Start9 need to apply the setting in startup configuration rather than toggling it from the dashboard. The project said it plans to release signed binaries later, and users should verify the signature before installing the update and bringing their nodes back online.

910

Bitcoin

2026-08-26 20:07:46

Core Lightning Tells Operators to Take Nodes Offline Before Unreleased Fix Goes Public

Core Lightning maintainers have told node operators to take their nodes offline unless they upgrade to a release that had not been published as of Wednesday afternoon, leaving users of one of Bitcoin’s main Lightning implementations with little they can do beyond shutting down and waiting. The warning circulated first in the Core Lightning Discord and later spread through stacker.news and X, where Bitcoin Core contributor Mark Erhardt, known as Murch, said he had confirmed the message with a CLN maintainer and urged operators to act. The team said binaries containing fixes for multiple reported vulnerabilities would be published under a two-week embargo, with signatures to verify reproducibility, but no binaries or advisory had appeared by the time of publication. Core Lightning’s latest tagged release remains v26.06.6 from July 22, and its GitHub security advisories page listed nothing. The notice lands during a tense stretch for Bitcoin infrastructure. Over the past four weeks, the ecosystem has also seen the Coldcard firmware bug fallout, Boltz suspending service, and BTCPay Server warning merchants to update or shut down because of an actively exploited flaw. Despite the security concerns, Bitcoin traded at $78,490 on Wednesday afternoon, down 0.5% over 24 hours and up about 15% over the week, according to CoinGecko.

990

Core Lightnin

2026-08-26 20:14:18

Core Lightning tells node operators to shut down unless they can install an unreleased update

Core Lightning maintainers have warned node operators to shut down their nodes unless they can upgrade to a version that has not yet been released. The warning circulated on Discord and was amplified by Cashu protocol developer Calle, who said the issue involves a serious vulnerability. A patched binary is still unavailable, and technical details of the flaw are being withheld during a two-week embargo. The alert adds to a string of recent Bitcoin infrastructure security incidents. According to the report, this is the fourth such warning in four weeks. Earlier issues affected Coldcard, where a firmware flaw reportedly led to about $114 million in stolen BTC, as well as Boltz and BTCPay Server. The CLN team also said it has received multiple AI-generated CVE reports over the past 10 days and is working to verify and fix the problems.

940

Core Lightnin

2026-08-26 19:34:49

Core Lightning urges users to upgrade and take unpatched nodes offline

Core Lightning developers have warned users to upgrade after confirming a vulnerability that needs to be fixed. According to a post by Bitcoin News on X, the team received a large number of AI-generated CVE reports over the past 10 days and has verified that at least one issue requires a patch. In response, the developers have raised their incident response level and said they will release signed binaries. They also plan to keep details of the vulnerability undisclosed for two weeks. During that window, Core Lightning is urging all users to update. Users who do not upgrade are advised to take their nodes offline. Earlier releases, including version 26.04, will no longer be supported.

890

Ethereum

2026-08-24 06:41:16

Besu fixes five security flaws in version 26.7.1 after findings by CertiK

Ethereum client Besu fixed five security vulnerabilities in version 26.7.1, which was released on July 27, after the issues were identified by blockchain security firm CertiK. Besu then published four detailed security advisories on Aug. 14, with technical details held back until after the patch rollout so node operators had time to upgrade first. According to CertiK Security Engineering Director and Senior Audit Partner Jialiang Chang, that patch-first approach created an 18-day buffer for operators to identify affected deployments, test the new release, and coordinate upgrades with validators or consortium participants. The disclosed issues touched block propagation handling, future-height consensus proposal caching, WebSocket subscription limits, and JSON-RPC filter creation. If left unresolved, the flaws could let attackers drain node memory or thread resources, affecting node availability and consensus processing. Bitcoin.com News said CertiK used its Chain Scan method in a private multi-node test network to run adversarial testing across peer-to-peer, HTTP RPC, WebSocket RPC, and consensus interfaces, and provided reproducible testing tools to the Besu team.

1140

Ethereum

2026-08-24 06:41:52

Ethereum client Besu fixes five security flaws found by CertiK

Ethereum client Besu fixed five security vulnerabilities identified by blockchain security firm CertiK in version 26.7.1, released on July 27, and later published four detailed security advisories on Aug. 14. The vulnerability details were held back at first to give node operators time to upgrade. CertiK Security Engineering Director and Senior Audit Partner Jialiang Chang said the patch-first approach created an 18-day window for operators to identify affected deployments, test the new release and coordinate upgrades with validators or consortium participants. The issues touched block propagation handling, caching of future-height consensus proposals, WebSocket subscription limits and JSON-RPC filter creation. If left unpatched, an attacker could exhaust node memory or thread resources, affecting node availability and consensus processing. CertiK said it used its Chain Scan method to run adversarial testing against peer-to-peer, HTTP RPC, WebSocket RPC and consensus interfaces in a private multi-node test network, and provided reproducible test tools to the Besu team.

1160

Bitcoin Core

2026-07-24 02:05:18

Bitcoin Core 31.1 Patches IP Leak in Private Broadcast and Critical Disk Usage Bug

Bitcoin Core 31.1 fixes an IP leak when using -privatebroadcast and a LevelDB bug causing excessive disk I/O. Wallet migration checks are improved. Full node shutdown required before update.

730