Btcpay Server

Core Lightning developers have urged Bitcoin Lightning node operators to take protective steps after AI-generated vulnerability reports uncovered genuine flaws. Operators unable to upgrade immediately have been told to restart with --offline rather than shut machines down, preserving blockchain monitoring for channel funds.

Coinkite has released new Coldcard firmware after a randomness flaw enabled attackers to steal more than $114 million in bitcoin. The company says AI-assisted review found additional issues, but users with affected seeds still need to create new wallets and migrate funds.

More than three dozen bitcoin and crypto companies are pressing major AI labs to provide early access to powerful models for open-source security work. The firms argue that safety filters and closed trusted-partner programs are slowing defenders while attackers face fewer limits.

A critical BTCPay Server vulnerability exposed LND credential files, allowing attackers to control affected Lightning nodes and move funds. BTCPay has urged operators using LND to update to version 2.4.2 immediately or take servers offline while investigators prepare a postmortem.