AI-Generated Bug Reports Trigger Urgent Security Warning for Core Lightning Nodes

Core Lightning, one of the major implementations powering Bitcoin's Lightning Network, has issued an urgent security warning to its node operators. The alert follows multiple AI-generated vulnerability reports received over a 10-day span from different sources.

The project is asking node operators to either install a new security release or disconnect their nodes from the network until it's ready. This comes at a time when the broader Lightning Network is already shrinking, with public channel capacity down roughly a third since late last year.

Data from Mempool.space showed Bitcoin Lightning's worth approximately $313.5 million on Wednesday, with the public channel capacity reaching 3,998 BTC. That's down sharply from 5,891 BTC recorded on December 27, 2025.

No confirmed fund losses or active attacks have been reported so far in connection with these vulnerabilities. However, developers are treating the situation as critical and urging operators to take immediate action to protect their nodes.