Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Core Lightning developers warn: Disable experimental features to prevent financial loss
Core Lightning developers have issued a warning requiring any user running experimental features in their software to disable them immediately, otherwise they may face the risk of financial loss while the team investigates recently discovered security vulnerabilities.
This is the second warning issued in two weeks. Previously, the Core Lightning team released a patch in late August that fixed a series of vulnerabilities that could affect merchants, payment providers and individual operators using the Core Lightning (CLN) software package to operate nodes on the Bitcoin Lightning Network.
Current security announcements do not apply to the Bitcoin main network.
New risk alert for Core Lightning node operators
On September 15, Core Lightning issued a new risk alert urging operators to immediately disable all experimental features it enables.
Core Lightning did not specify the specific purpose of this experimental feature or how it might be utilized. However, since these nodes hold BTC within the payment channel and route funds between users, the risk of losing funds is real.
Prior to the previous September warning, Core Lightning was struggling to recover from a bumpy mid-August period when a large number of AI-generated CVE (Common Vulnerability Disclosure) reports caused trouble. The guidelines at the time were to require nodes to restart and add the "--offline" flag, thereby cutting off the Peering Connection, allowing the software to monitor the blockchain without processing any payment routing.
截至 8 月 28 日，CLN 团队告知节点运营商，升级至版本 26.06.7 即可修复当月出现的相关问题。
该修复方案的技术细节已于 9 月 11 日发布在 GitHub 上，此时距为期两周的 embargo（保密期）结束仅剩片刻。在此期间，攻击者本可以尝试逆向工程这些补丁。
AI 工具成为开源比特币生态的新隐患
另一个闪电网络实现方案——闪电开发套件（Lightning Development Kit, LDK），也在 8 月遭遇了自身的安全紧急事件，这进一步强化了一种日益明显的趋势：AI 工具正被用于扫描开源比特币代码中的安全缺陷。
LDK 的维护者表示，目前尚未观察到任何资金损失或被利用的应用程序。
