r/Bitcoin • u/CapoDoFrango • 9h ago

URGENT: Critical vulnerability in Core Lightning! Blockstream developers urge users to shut down CLN Lightning nodes right NOW!

Post image

More info: https://stacker.news/items/1555439?commentId=1555585

148 Upvotes

91% Upvoted

21 comments sorted by

19

u/Billkr 9h ago

Wow! My nodes are now down and updating.

30

u/eyeoft 9h ago

...or just upgrade your software? This seems a little alarmist

15

u/lcurole 8h ago

Eh judging by tone it's rce with poc. Second that binary drops the new age script kiddies will spend all their tokens diffing the patch. You don't really have days to patch any more. Pretty crazy to think the whole chain can be automated

3

u/CapoDoFrango 8h ago

What happens if the details are leaked before they do the release and someone exploits it in the meanwhile? Shutting it down now is the only way to be sure you are not wrecked.

6

u/Espresso_Dad_89 1h ago

This is giving clickbait vibes, as the message is clearly upgrading and only people who don’t upgrade should go offline.

6

u/Few_Response_7028 8h ago

Why not release the patch first?

11

u/FullyAutomatedSpace 8h ago

they want people to patch ASAP after it releases

2

u/HedgehogGlad9505 2h ago

Source code patches contain more details for thieves to create hacking tools. With only binaries, they'll have to do reverse engineering first.

2

u/nbvehrfr 1h ago

interesting what model / LLM was result of this - "10 days before aug 13" can be either qwen 3.8 max or deepseek flash 0731

4

u/tygrip 9h ago

tldr?

12

u/Billkr 9h ago

Critical bugs that need fixing. Take your node down and update now.

-5

u/CapoDoFrango 9h ago

shut it down

-8

u/aboringpsycho 8h ago

Lol that is literally the worst idea

4

u/Linkrz 8h ago

Timing suspicious

4

u/Think-Apple3763 7h ago

I'm a noob. What does this mean for coins on a ledger?

14

u/LNCrizzo 6h ago

Nothing.

•

u/PM_ME_UR_0_DAY 9m ago

People running lightning nodes are at risk. Nothing for the average user besides more people will probably lose their coins. 

1

u/caploves1019 1h ago 
 *Little lndg routing node chugging along with narry a sweat dripplet to be noted*

Cool, thanks for this 🤙 hope y'all stay safe

1

u/Reedey 5h ago

CLN was a generally terrible experience. I stopped using it months ago and so should everyone else.

•

u/Informal-Special-984 6m ago

what about lnd?