# Bitcoin Lightning Network security vulnerabilities

> Live situation record from CLSTR: https://clstr.news/situations/bitcoin-lightning-network-security-vulnerabilities
> Updated: 2026-09-13T15:57:49.000Z. Sources: 15. Developments: 2.

Security vulnerabilities have been identified within different implementations of the Bitcoin Lightning Network.

In late August, developers of Core Lightning (CLN) issued an urgent alert after AI-generated reports revealed multiple flaws. To mitigate risks, maintainers advised node operators to use an upcoming emergency release or operate in ‘offline mode’ to prevent peer connections while monitoring the blockchain. Developers implemented a 14-day embargo on specific technical details to prevent attackers from reverse-engineering the fixes.

Following this, the Lightning Development Kit (LDK) released version 0.2.6 to address two critical vulnerabilities. The first flaw involved the ‘splice’ function, where incorrect fee calculations could allow a malicious peer to divert funds. The second issue involved a payment hash conflict that could prevent a node from successfully restarting after receiving a bogus payment, leading to service disruptions.

## Timeline

### 2026-09-13: Lightning Development Kit releases update to fix security flaws

The Lightning Development Kit released v0.2.6 to fix vulnerabilities that could allow fund diversion during splice operations and prevent nodes from restarting due to payment hash errors.

2 sources. https://clstr.news/cluster/lightning-development-kit-releases-update-to-fix-security-flaws

### 2026-08-26: Core Lightning issues urgent security alert for Bitcoin nodes

Core Lightning developers have issued an urgent warning for Bitcoin Lightning node operators to upgrade software or go offline following the discovery of multiple AI-generated vulnerabilities.

13 sources. https://clstr.news/cluster/core-lightning-urges-node-operators-to-go-offline-due-to-vulnerabilities

---
Cite as: Bitcoin Lightning Network security vulnerabilities. CLSTR, https://clstr.news/situations/bitcoin-lightning-network-security-vulnerabilities
