Core Lightning Urges Urgent Upgrades Following Security Audit

Developers have not yet released CVE identifiers or confirmed evidence of active exploitation, but the potential risk has prompted a call for proactive maintenance. For those unable to update their systems immediately, the project suggests running nodes in a restricted mode. By launching the daemon with the –offline flag, operators can disconnect from network peers and cease payment routing while keeping the software active to monitor the Bitcoin blockchain.

Maintaining an active daemon is critical because it allows the node to respond if a counterparty attempts to force-close a Lightning channel. If a node is shut down entirely, the operator loses the ability to monitor the blockchain for such transactions, which could leave funds vulnerable. Once the patch is deployed, operators must remember to remove the –offline configuration to restore standard payment routing and peer connectivity. This latest security push follows a series of earlier denial-of-service fixes, including memory exhaustion issues that previously targeted the network’s connection and gossip components.