Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 15 sources · 18 days · First seen about 1 month ago · Last updated 16 days ago

Bitcoin Lightning Network security vulnerabilities

Overview

Security vulnerabilities have been identified within different implementations of the Bitcoin Lightning Network.

In late August, developers of Core Lightning (CLN) issued an urgent alert after AI-generated reports revealed multiple flaws. To mitigate risks, maintainers advised node operators to use an upcoming emergency release or operate in ‘offline mode’ to prevent peer connections while monitoring the blockchain. Developers implemented a 14-day embargo on specific technical details to prevent attackers from reverse-engineering the fixes.

Following this, the Lightning Development Kit (LDK) released version 0.2.6 to address two critical vulnerabilities. The first flaw involved the ‘splice’ function, where incorrect fee calculations could allow a malicious peer to divert funds. The second issue involved a payment hash conflict that could prevent a node from successfully restarting after receiving a bogus payment, leading to service disruptions.

Entities

Bitcoin Lightning Network · OpenSats · Blockstream · Lightning Development Kit · Bitcoin

Timeline

16 days ago

[TECHNOLOGY] 2 sources
Lightning Development Kit releases update to fix security flaws
The Lightning Development Kit released v0.2.6 to fix vulnerabilities that could allow fund diversion during splice operations and prevent nodes from restarting due to payment hash errors.
about 1 month ago

[TECHNOLOGY] 13 sources
Core Lightning issues urgent security alert for Bitcoin nodes
Core Lightning developers have issued an urgent warning for Bitcoin Lightning node operators to upgrade software or go offline following the discovery of multiple AI-generated vulnerabilities.

Sources

abmedia.io · bitcoinethereumnews.com · blockmedia.co.kr · blocktempo.com · coindeskjapan.com · crypto.news · cryptonomist.ch · cryptopolitan.com · decrypt.co · detlionblood32.wordpress.com · news.bitcoin.com · newsbit.nl · portaldobitcoin.uol.com.br · siamblockchain.com · u.today