Core Lightning released version 26.06.10, patching flaws that could allow a malicious peer to consume a node's channel balance as fees during a forced channel close. The vulnerability puts funds at risk for operators running affected versions.
Maintainers are withholding security tests from the public release to give node operators time to upgrade before exploit details become available. Operators are urged to update promptly to mitigate potential losses.
Core Lightning Patches Critical Flaw Allowing Peers to Drain Channel Balances on Forced Closes
Disclaimer: The content provided on Phemex News is for informational purposes only. We do not guarantee the quality, accuracy, or completeness of the information sourced from third-party articles. The content on this page does not constitute financial or investment advice. We strongly encourage you to conduct you own research and consult with a qualified financial advisor before making any investment decisions.
