Core Lightning warns attackers target nodes on 26.06.7, urges upgrade to 26.06.8
Bitcoin.com News reports Core Lightning warned on Oct. 1 that attackers are targeting Bitcoin Lightning nodes running version 26.06.7 or earlier, urging an upgrade to 26.06.8.
Why it matters
Nodes left on version 26.06.7 or earlier carry a channel-closing defect patched on Sept. 22, and Bitcoin.com News did not report how many operators remain unpatched. The project has not confirmed a successful attack or named the exploited vulnerabilities, so any loss total is unverified, and the warning so far rests on one outlet's report of a single project statement.
Key facts
Core Lightning warned that attackers are targeting Bitcoin Lightning nodes running version 26.06.7 or earlier.
Reported by Bitcoin.com News
Core Lightning released version 26.06.8 on Sept. 22.
Reported by Bitcoin.com News
Version 26.06.8 fixes a channel-closing flaw capable of putting funds at risk.
Reported by Bitcoin.com News
Version 26.06.8 also fixes denial-of-service problems.
Reported by Bitcoin.com News
Core Lightning has not identified which vulnerabilities attackers are exploiting.
Reported by Bitcoin.com News
Core Lightning has not confirmed that any attack succeeded.
Reported by Bitcoin.com News
No stolen funds have been reported in connection with the targeting.
Reported by Bitcoin.com News
Core Lightning told node operators to upgrade immediately.
Reported by Bitcoin.com News
What happened
Bitcoin.com News reported on Oct. 2 that Core Lightning, the node software project for the Bitcoin Lightning Network, warned on Oct. 1 that operators running version 26.06.7 or earlier are being actively targeted. The alert came roughly ten days after version 26.06.8 shipped on Sept. 22, fixing several security problems ranging from denial-of-service issues to a channel-closing defect capable of putting funds at risk. Bitcoin.com News said Core Lightning has not identified which vulnerabilities the attackers are exploiting. The outlet added that the project has not confirmed that any attack succeeded and has reported no stolen funds, while telling operators to upgrade immediately. Only Bitcoin.com News has covered the warning, so the targeting claim rests on a single report.
How the story developed
- Update
Core Lightning ships version 26.06.8 with security fixes
The release patches a channel-closing flaw that can put funds at risk plus denial-of-service problems.
- Official statement
Core Lightning warns of attacks on unpatched nodes
The project says operators on version 26.06.7 or earlier are being actively targeted, about ten days after the patch.
- First report
First report by Bitcoin.com News
Bitcoin Lightning Nodes Targeted as Core Lightning Sounds Alarm
- Update
Bitcoin.com News reports the Core Lightning warning
The outlet says the project has not named the exploited vulnerabilities, has not confirmed a successful attack and has reported no stolen funds.
Affected entities
Original sources
| Publisher | Report | Role | Published |
|---|---|---|---|
| Bitcoin.com News Company, official | Bitcoin Lightning Nodes Targeted as Core Lightning Sounds Alarm | Original |
Related events
Blackrock Report Sidelines Bitcoin in AI Payments as Block Adds Lightning to x402
Blackrock's new report largely leaves bitcoin out of AI agent payments while Block adds Bitcoin Lightning support to the x402 payment protocol.
Tether to issue USDT on Bitcoin in October via Tether-backed project Utexo
Utexo, a Tether-backed project, plans to start issuing USDT on Bitcoin in October with private transfers, direct BTC swaps and bitcoin-backed loans.
Block joins the x402 Foundation and contributes Bitcoin Lightning support
Block joined the x402 Foundation and added Bitcoin Lightning to the HTTP 402 payment standard, announced on September 24, giving AI agents a low-cost rail for small payments.
Bitcoin developer Paul Sztorc criticizes Lightning Network usability while researchers unveil post-quantum defense
Paul Sztorc claims custodial services dominate Lightning payments, while university researchers announce a hybrid post-quantum security implementation for the network.
Core Lightning tells operators on version 26.06.7 or earlier to upgrade after node attack reports
Core Lightning urged node operators running version 26.06.7 or earlier to upgrade immediately after reports that attackers were targeting unpatched nodes.
WhiteBIT Integrates Lightning Network for Bitcoin Deposits and Withdrawals
Swiss crypto exchange WhiteBIT adds Lightning Network support via Voltage, enabling faster and cheaper bitcoin transactions for its users.