Unpatched Bitcoin Lightning nodes face channel-draining bug

Core Lightning, software for operating Bitcoin Lightning payment nodes, is urging users to install v26.06.10 to address channel-security, payment-resolution, and remote-access flaws. Maintainers also recommend reviewing the credentials used for remote commands, making access restrictions a separate task alongside the software upgrade. The release notice recommends upgrading as soon as practical. Maintainers have temporarily withheld security-fix tests to slow the conversion of patches into working exploits and give operators more time to upgrade. The new version adds checks on a peer's transaction signatures during Bitcoin dual-funded channel opening and splicing, following the Lightning protocol's BOLT 2 specification, according to the tagged changelog .

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CryptoSlate.