Bitcoin RED Team

Core Lightning developers have urged Bitcoin Lightning node operators to take protective steps after AI-generated vulnerability reports uncovered genuine flaws. Operators unable to upgrade immediately have been told to restart with --offline rather than shut machines down, preserving blockchain monitoring for channel funds.

A critical BTCPay Server vulnerability exposed LND credential files, allowing attackers to control affected Lightning nodes and move funds. BTCPay has urged operators using LND to update to version 2.4.2 immediately or take servers offline while investigators prepare a postmortem.