[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 4 sources · 3 days · First seen · Last updated

Bitcoin Lightning Network security vulnerabilities

Overview

The Bitcoin Lightning Network ecosystem has faced multiple security challenges involving both wallet applications and node software.

Developers of Core Lightning, an open-source software for running nodes, issued an urgent warning regarding active attacks targeting unpatched systems running version 26.06.7 or earlier. The vulnerability could allow attackers to take nodes offline or facilitate a faulty channel closure that transfers node funds to an opposing party. A patch was released in version 26.06.8 to address these flaws.

In a separate incident, the Lightning Network-focused wallet Blink reported a hack occurring on September 19 that resulted in the theft of 6.61 bitcoins, valued at approximately US$ 566,000. Developers noted the vulnerability had been active since October 2023. Blink has since patched the flaw, reimbursed affected users, and established a reward program to assist in the recovery of funds.

Entities

Core Lightning · Bitcoin Lightning Network · Blink · Bitcoin · MetaMask

Timeline

  1. [TECHNOLOGY] 2 sources
    Lightning Network faces security threats and wallet hack

    Security flaws in the Bitcoin Lightning Network have led to a 6.61 BTC hack of the Blink wallet and active attacks against unpatched Core Lightning nodes.

  2. [TECHNOLOGY] 2 sources
    Core Lightning software targeted by attackers in urgent security warning

    Core Lightning developers have issued an urgent warning for users to upgrade to version 26.06.8 following reports of attackers targeting unpatched Bitcoin Lightning Network nodes.

Sources

criptonoticias.com.br · crypto-insiders.nl · cryptopolitan.com · merca2.es