Bitcoin Lightning nodes told to wait for patch after AI found bugs

Bitcoin’s Core Lightning project informed node operators on Wednesday that the vulnerabilities highlighted in AI-generated security reports are genuine. It advised them to install a patch that would come soon.

Technical details are kept under wraps for at least two weeks.

The –offline flag keeps a node watching for force-closes

According to the team’s posts on X, the right move is to wait for the release, check its signatures, and install it “promptly rather than eventually.”

Operators who aren’t able to upgrade are encouraged to keep their nodes running with the `–offline` flag instead of shutting them down.

The offline flag precludes peer connections, so nothing is routed into, out of, or through the node. The software will continue to run and observe the blockchain.

A Lightning node must watch out for counterparties that are trying to force-close a channel. A switched off node cannot respond, which is why the project called shutting down the worse choice.

Core Lightning has been intentionally vague about specifics.

… Continue reading the full article at the original source below.