Core Lightning discovers security flaws, urges node operators to update

Core Lightning finds security issues in its software

Core Lightning, an open-source version of Bitcoin’s Lightning Network, has found several security weaknesses in its system. The Lightning Network is a tool that helps Bitcoin transactions happen faster and cheaper by moving them off the main Bitcoin network.

The team behind Core Lightning announced that it will release a security update soon. Until then, it has given node operators—people who run the software that keeps the network working—steps to protect their systems.

What node operators should do now

• The main advice is to install the upcoming security update as soon as it is available.
• If operators cannot update right away, they should restart their nodes with the “--offline” setting. This keeps the node running but stops it from sending, receiving, or routing payments.
• Operators should remove the “--offline” setting after updating to reconnect their nodes to the network.
• The team did not share details about the vulnerabilities or whether any attacks have happened because of them.

Why keeping nodes running matters

The Core Lightning team explained that keeping the node software active, even in offline mode, helps it stay in sync with the Bitcoin blockchain. This is important because if another party closes a payment channel, the node needs to respond. A completely stopped node cannot do this.

What is confirmed and what is not

• Confirmed: Core Lightning has found multiple security vulnerabilities in its software.
• Confirmed: The team will release a security update to fix these issues.
• Confirmed: Node operators are advised to update or use the “--offline” setting until they can.
• Unclear: The exact nature or seriousness of the vulnerabilities.
• Unclear: Whether any attacks or losses have happened because of these flaws.

Why this matters for Lightning Network users

The Lightning Network is used by people and businesses to make quick and low-cost Bitcoin payments. If nodes are not secure, payments could be at risk. Updating the software or following the team’s advice helps keep the network safe for everyone.

Sources

• Cointelegraph