Lightning Node Users Urged to Upgrade Amidst Attack Risk
Bitcoin users who run their own nodes on the Lightning Network are at risk of losing funds if they don't upgrade to the latest software. Core Lightning, a main client for the network, warned that attackers have been targeting nodes running version 26.06.7 or earlier.
The team shipped an update on September 22, which fixed several bugs that could cost node operators money. However, the developers are not disclosing the specific flaw being exploited, saying only that it would be harder for other attackers to copy the exploits if they revealed more technical details.
Some of the bugs listed in the changelog include faulty channel closes, which could hand a node's funds to the other side, as well as crashes and offline nodes. Most users who utilize Lightning through a wallet app do not need to worry, as the app provider usually handles the upgrade.