**🔓 Bitcoin hacks – Sunday, 4 October 2026**
**Core Lightning patches actively exploited bugs**
Core Lightning shipped version 26.06.8 on October 3, fixing three vulnerabilities present in 26.06.7 and earlier: a sender-node crash, a memory-exhaustion flaw in its REST interface, and a channel-closing bug that could trigger a penalty mechanism costing users funds. Developers warned attackers are actively targeting unpatched nodes.
https://crowdfundinsider.com/2026/10/315000-open-source-bitcoin-lightning-implementation-core-lightning-warns-that-attackers-are-targeting-unpatched-nodes
**Previously:**
**🔓 Bitcoin hacks – Saturday, 3 October 2026**
**NEAR Intents hacker returns $3.8M**
The attacker who exploited NEAR Intents' Omni deposit system on October 1 returned the full $3.8 million after a 48-hour deadline. NEAR said the breach was isolated to USDT on BSC and traced to infrastructure tied to its HOT Bridge treasury, caught by its SHIELD monitoring layer.
https://coincentral.com/near-intents-hacker-returns-3-8-million-after-48-hour-deadline
**Bitget CEO: little recovery expected**
Bitget CEO Gracy Chen told CNBC on October 2 she is "not expecting to recover a lot" of the $388 million stolen, with only $1.1 million frozen so far. She said the exchange rebuilt its protection fund above $300 million from its own capital rather than passing losses to users.
https://www.cnbc.com/2026/10/02/bitget-crypto-stolen-hack-recovery.html
**Previously:**
View quoted note →
View quoted note →