On October 2, developers of the Core Lightning implementation, maintained by Blockstream, issued an urgent security warning. Operators running software versions 26.06.7 or earlier are advised to update to the current stable release, version 26.06.8, which was published on September 22.
The team reported that attackers are actively targeting unpatched nodes. While specific details regarding the vulnerabilities and potential financial losses remain undisclosed, developers have withheld some test data to prevent reverse engineering of the patches and to allow node operators sufficient time to secure their systems.
This follows a series of security measures taken by the team throughout August and September. In late August, developers recommended that operators use the offline mode to protect their nodes. Additionally, on September 16, the team advised disabling experimental features while investigating potential risks to user funds.
