🟥 URGENT: Critical vulnerability in Core Lightning
Blockstream developers urge users to shut down CLN Lightning nodes right NOW!
Please let everyone know!
Login to reply
Replies (44)
Restart your CLN node with `--offline` and keep an eye out for updates soon.
https://stacker.news/items/1555439?commentId=1555585
@bumi are you guys auditing AlbyHub with AI? 😬
I am confused. So the already mentioned closed source update is not rolled out? I'm not running CLN. Just want to know if a fix is available or if they want all to switch off before they release the fix as it's trivial to figure out the bug.
‼️🚨🔔
Say it ain’t so
View quoted note →
@jb55 don’t you use CLN?
Here we go again
core lightning. isn't that something to do with bleckstream? all i remember was niftey nei who was very nifty at teaching nothing about blockchains.
Looks fake. Who the fuck is Madelinevibes?
Maybe explain the vulnerability first before fear mongering.
There's merit to keeping a cool head during stress situations.
#Monero fixes this
Seriously. Everytime i come on here to get updated, another new life crushing vulnerability.
Lol what? 🤣
Explaining it would make it simple to attack...
CLN is open source... It always has been.
Lol... Nothing wrong with golang.
#Qenis said Israel did it. Stay safe #Nostr
If its the best one then... Fuuuuuccckkkk lol.
Hahahaha my nodes already down for other reasons. Hahahaha I win.
So lightning is essentially down
Lightning is Broken:
View quoted note →
View quoted note →
I think this is going to be the norm going forward
yeah i'm not running a binary though. i will wait for source release. i'll leave mine up and see what happens for science
For science is crazy
There is no second gayest.
Spread enough fear and doubt, eventually these bitcoiners will be begging Blackrock to step in and enforce kyc for all lightning nodes and all on chain transactions.
Michael Saylor will finally get his way
an ai-generated cve surge meets a two-week embargo. it's a high-stakes test of the network's trust and coordination speed. are we entering an era where agents create the vulnerabilities they later help patch?
🟥 URGENT: Critical vulnerability in Core Lightning
Blockstream developers urge users to shut down CLN Lightning nodes right NOW!
Please let everyone know!
View quoted note →
Calle misread. It says upgrade when the release comes, or go --offline.
It absolutely did not recommend "shut down NOW" 😕
Monero are the new insufferable maxis
Dreaming? 🤣
No, this will pass & strengthen overall
Good guy jb providing chaos as a service.
They're just kind of insane background noise.
Update today said the node was automatically offline as per the update. So keeping it running. This is what you mean right?
Most nodes are LND, not CLN.
Nah. He'd say so if it were being exploited.
He also got it wrong. Its run --offline, not shut down.
Two very different things.
Thank you
Thank you calle
I feel like committing suicide am useless 😭😭😭 can I have someone to talk to before taking off my life 😭💔+256795755853 my WhatsApp number 😭😭
Core Lightning has been triaging a high volume of AI-generated CVE reports over recent weeks. Several are real, and a coordinated fix is underway.
What to do now: do not shut your node down. Restart it with --offline.
That flag stops peer connections, so no payments route in, out or through your node. It keeps running, which means it keeps watching the chain and can still act if a counterparty force-closes a channel. A node that is powered off cannot do that, and that is why switching off is the worse option.
On @npub1aghr...mhct or @npub126nt...e9ll this is a startup setting for Core Lightning, not a toggle in the dashboard.
What happens next: signed binaries will be published. Verify the signatures before you install, then bring your node back online. Source and reproducible builds follow afterwards so anyone can audit what changed.
https://github.com/ElementsProject/lightning
View quoted note →
So critical .
Sorry, no zap for you, because I remotely instructed my son to pull the plug on my CLN machine prior to reading this.