Core Lightning urges patching for Lightning node flaws
BROBROK News · Based on reporting by CryptoSlate ·
Core Lightning has asked Bitcoin Lightning node operators to upgrade to v26.06.10, which fixes issues in channel security, payment handling, and remote commands. The maintainers also advised operators to review remote-access credentials and replace any they cannot account for.
Key points
- v26.06.10 adds fixes for channel security and remote commands.
- The update adds signature checks for dual-funded opens and splicing.
- A removed HTLC could be mistaken for an active payment with the same details.
- The release also tightens rules for dust limits and zero-confirmation channel opens.
- Maintainers recommend binding commando runes to the intended node and replacing unknown credentials.
Why it matters
Buggy Lightning node software can affect payment routing and channel safety for BTC operators. The warning also shows that remote access credentials are part of the security risk, not just the code itself.
Original headline: “Unpatched Bitcoin Lightning nodes face channel-draining bug”
Read the original on CryptoSlate
Summary and analysis written by BROBROK News from the original report. Read the full story on the source website. Not investment advice.