Lightning Network Vulnerabilities Confirmed by Core Developers
Core Lightning developers confirmed that several vulnerabilities in the Bitcoin Lightning Network software are real. The team will publish patched software updates within days, but the technical details will stay secret for two weeks.
The Bitcoin Lightning Network allows small Bitcoin payments to be made off the main blockchain through channels between nodes. Until operators install the fix, money parked in those channels sits behind code that the team already knows is flawed.
Core Lightning (CLN) is one of the main implementations of the Lightning Network, which has been running on Bitcoin's main network since 2018. Blockstream backs the project.
The vulnerabilities were discovered after a wave of AI-generated vulnerability reports from multiple sources over the previous 10 days. A small group of developers and volunteers then sorted real bugs from noise. Several reports held up, turning routine cleanup into a coordinated security release.