Core Lightning Issues Urgent Warning Over AI-Generated Vulnerability Reports
Core Lightning, a key implementation of Bitcoin's Lightning Network, has issued an urgent warning to node operators. The team is urging them to either upgrade their nodes immediately or take them offline due to AI-generated vulnerability reports.
The alert was circulated in the Core Lightning Discord and confirmed by a maintainer. The message stated that if operators choose not to upgrade, they should 'take your node, offline.' The team emphasized that it will not support previous releases, including version 26.04, given the known risks.
Core Lightning received multiple AI-generated CVE reports over the past 10 days and is triaging them with outside contributors. This follows a surge of AI-assisted audits across Bitcoin's open-source stack, including the volunteer Bitcoin Red Team, which recently filed thousands of findings across hundreds of projects.
The warning affects a network carrying around 3,750 BTC across more than 33,000 channels, according to mempool.space data. Operators who keep channels open on an unpatched node may face forced-closure or fund risk if an exploit drops, while payments routed through affected channels could see liquidity disruptions.