Core Lightning warns attackers target unpatched Bitcoin Lightning nodes

CryptoVideos brief
Built from 2 sources 2 Oct 2026 · 06:39 UTC 1 min read

Core Lightning, open-source software for the Bitcoin Lightning Network, has urged node operators running version 26.06.7 or earlier to upgrade immediately. The warning follows reports of attackers targeting unpatched nodes. Version 26.06.8, released with patches for flaws that could crash nodes, exhaust REST interface memory or cause fund loss during channel closures, addresses the reported vulnerabilities. The team has not disclosed which vulnerabilities are being targeted or if any attacks have succeeded. Earlier August updates followed a wave of AI-generated vulnerability reports.

Key points

Core Lightning urged node operators on version 26.06.7 or earlier to upgrade immediately
Version 26.06.8 patches flaws that could crash nodes, exhaust REST memory or cause channel closure fund loss
Core Lightning has not disclosed which vulnerabilities attackers are targeting unpatched nodes
Earlier August Core Lightning updates followed a wave of AI-generated vulnerability reports

Why it matters

Unpatched Core Lightning nodes face risk of crashes, fund loss or memory exhaustion from active attacker targeting. The lack of disclosed target vulnerability details means operators cannot assess specific exposure without upgrading.

What's unclear

Which specific vulnerabilities attackers are targeting unpatched Core Lightning nodes

Whether any reported attacks have succeeded or caused user fund losses

Price context · BTC

At publication

$86,036.00

Now

$85,843.00

Change since

−0.22%

7 days · dashed line = publication

Sources · 2 publishers

Cointelegraph Tier 1 First report 04:18 UTC

Core Lightning warns attackers are targeting unpatched Bitcoin nodes

Crypto.news Tier 2 06:34 UTC

Bitcoin Lightning security alert issued as attackers target older Core Lightning nodes

Coverage timeline

Oct 2, 04:18First reported by Cointelegraph
Oct 2, 06:34Confirmed by Crypto.news
Oct 2, 06:39CryptoVideos brief published

How this brief was made. Our system found this event in 2 independent publications, summarised two complete reports with AI and checked every number above against the source text. Sources are linked in full. Not financial advice. Report an error