Core Lightning Nodes Under Active Attack
According to monitoring reports from Bitcoin News on October 4, the development team behind the Lightning Network client Core Lightning has issued an urgent security alert to the community. The report indicates active attack campaigns targeting specific versions of the software.
Vulnerable Versions and Attack Scope
Attackers are specifically targeting nodes that continue to operate on Core Lightning version 26.06.7 and earlier releases. These outdated systems contain known security flaws that malicious actors are actively exploiting.
Critical Security Patches in v26.06.8
The development team released version 26.06.8 on September 22, which addresses several significant vulnerabilities:
- Funds Safety Issue: Patched a critical bug that could compromise user funds during certain channel closure scenarios
- System Stability Flaws: Fixed vulnerabilities that could cause node crashes or memory exhaustion
- Additional Security Enhancements: Included various improvements to strengthen overall node security
Current Threat Landscape and Recommendations
While the project has not disclosed specific technical details about the exploited vulnerabilities or confirmed any actual fund losses, the existence of active attacks presents a clear and present danger.
Security experts recommend that all Core Lightning node operators take immediate action:
- Check your current software version immediately
- If running a version below 26.06.8, stop node services promptly
- Upgrade to the latest 26.06.8 release following official guidelines
- Review node security configurations after completing the upgrade
As a Layer-2 scaling solution for Bitcoin, Lightning Network security directly impacts user funds. Maintaining updated software is not only essential for individual node stability but also represents a responsibility to the network's overall health. Delaying upgrades leaves nodes continuously exposed to attack risks and may potentially affect other connected nodes in the network.