🟥 URGENT: Critical vulnerability in Core Lightning Blockstream developers urge users to shut down CLN Lightning nodes right NOW! Please let everyone know! image

Replies (62)

I am confused. So the already mentioned closed source update is not rolled out? I'm not running CLN. Just want to know if a fix is available or if they want all to switch off before they release the fix as it's trivial to figure out the bug.
core lightning. isn't that something to do with bleckstream? all i remember was niftey nei who was very nifty at teaching nothing about blockchains.
Eddie's avatar
Eddie 3 days ago
Maybe explain the vulnerability first before fear mongering. There's merit to keeping a cool head during stress situations.
Seriously. Everytime i come on here to get updated, another new life crushing vulnerability.
Qenis's avatar
Qenis 3 days ago
#Qenis said Israel did it. Stay safe #Nostr image
yeah i'm not running a binary though. i will wait for source release. i'll leave mine up and see what happens for science
Spread enough fear and doubt, eventually these bitcoiners will be begging Blackrock to step in and enforce kyc for all lightning nodes and all on chain transactions. Michael Saylor will finally get his way
an ai-generated cve surge meets a two-week embargo. it's a high-stakes test of the network's trust and coordination speed. are we entering an era where agents create the vulnerabilities they later help patch?
calle's avatar calle
🟥 URGENT: Critical vulnerability in Core Lightning Blockstream developers urge users to shut down CLN Lightning nodes right NOW! Please let everyone know! image
View quoted note →
JD's avatar
JD 3 days ago
Update today said the node was automatically offline as per the update. So keeping it running. This is what you mean right?
Nah. He'd say so if it were being exploited. He also got it wrong. Its run --offline, not shut down. Two very different things.
I feel like committing suicide am useless 😭😭😭 can I have someone to talk to before taking off my life 😭💔+256795755853 my WhatsApp number 😭😭
Blockstream's avatar Blockstream
Core Lightning has been triaging a high volume of AI-generated CVE reports over recent weeks. Several are real, and a coordinated fix is underway. What to do now: do not shut your node down. Restart it with --offline. That flag stops peer connections, so no payments route in, out or through your node. It keeps running, which means it keeps watching the chain and can still act if a counterparty force-closes a channel. A node that is powered off cannot do that, and that is why switching off is the worse option. On @npub1aghr...mhct or @npub126nt...e9ll this is a startup setting for Core Lightning, not a toggle in the dashboard. What happens next: signed binaries will be published. Verify the signatures before you install, then bring your node back online. Source and reproducible builds follow afterwards so anyone can audit what changed. https://github.com/ElementsProject/lightning image
View quoted note →
kalle's avatar
kalle 2 days ago
Sorry, no zap for you, because I remotely instructed my son to pull the plug on my CLN machine prior to reading this.
Default avatar
adenlgeva 2 days ago
We are looking for an individual who can lend 185,000 US dollars to our holding company. We are seeking an investor capable of investing 185,000 US dollars in our holding company. We will establish an animation film production company using the 185,000 US dollars you will lend to our holding company. We will establish an animation film production company with the 185,000 US dollars you invest in our holding company. We will use the 185,000 US dollars you invested in our holding company to establish an animation film production company, and we will have increased that investment amount within a few months. By using the 185,000 US dollars you invested in our holding company to launch an animation film production company, we will increase the value of your investment within a few months. We will have increased the 185,000 US dollars you invested in our holding company within a few months. We will use the 185,000 US dollars you lent to our holding company to establish an animated film production company, and within a few months, we will significantly increase the 185,000 US dollars you lent to our holding company. Since animated films attract significant public interest today and we intend to undertake international animation projects, the animation film production sector will generate substantial revenue for us. Since animated films currently attract more attention and we will be working on international animated film projects, the animation production sector will provide us with significant revenue. By establishing an animation production company, we will generate substantial revenue within a few months. By utilizing artificial intelligence tools as well, we will be able to produce animated films more quickly. We will produce professional-quality animated films covering a wide range of topics. Since we will be producing animated films across many categories and in multiple languages, our viewership will increase rapidly. Since animated films are currently very popular and we excel in the field of advertising, the animated films we produce could garner millions of views in a short time. How will revenue be generated, and how will we increase our audience? Since the animated films we will produce will be in many languages, it will increase the viewership of our animated films internationally. Since we will produce animated films in many categories instead of just one, the animated films we make will receive more viewership. We will produce animated films in at least seven different categories every year. Since we will produce high-quality and more professional animated films, our films will be watched by millions internationally. We will earn money per view by sharing the animated films we produce on various social media platforms such as YouTube, Instagram, Facebook, and TikTok. Since the animated films we will produce will be in many languages, we will earn money per ticket by screening our animated films in cinemas of many countries. We will earn revenue per ticket by screening the animated films we produce in movie theaters across many countries. By releasing the animated films we produce on various streaming platforms such as Netflix and Amazon Prime, we will generate significant revenue. We will release the films we produce on our own website; through a paid subscription model, viewers wishing to watch our animated films will purchase subscriptions, thereby generating revenue for us. As the audience for the animated films we produce grows, we will generate significant revenue by promoting sponsors' products in our future animated films. By embedding trailers of the animated films we produce onto blogs and news sites, we will increase the international viewership of our animated films. By promoting our animated films on various high-traffic websites and social media accounts, we will achieve a large audience. By using advertising tools such as Google Ads, YouTube Ads, and Facebook Ads, we will be able to introduce our animated films to the entire world more quickly. As our fan base grows, we will generate extra revenue by producing and selling products—such as toys, mugs, and sweaters—featuring the characters from our animated films. We will generate significant revenue by broadcasting our animated films on television channels in many countries. By employing a very strong marketing strategy, we will generate millions of dollars in revenue from the animated film industry in a short time. How will the process work? First, we will establish an educational website offering professional-level training in animated film production. Even someone with absolutely no knowledge of making animated films can become a professional within one month by studying the animation course on our training site. We will train and hire our own animation production staff. Since we will train our team ourselves, we will be able to work in a more coordinated manner, which will enable us to complete the animated films we produce more quickly. Within two months, we will have trained and recruited staff to establish our own animation film production team. We will assemble a professional-level animated film production team within two months. Within two months of assembling our animation film production team, we will produce professionally designed animated films covering various topics and in multiple languages We will produce animated films in at least 7 different categories within two months. Once our animated films are completed, we will release them in various places and start earning money within two months. We will generate substantial profits within two months of completing our animated films, thanks to our strong marketing strategy. Within two months, we will rapidly generate substantial revenue by releasing our film on platforms such as Netflix, Amazon Prime, TikTok, Instagram, and YouTube, as well as in movie theaters across many countries. One month after releasing our animated film internationally, we will generate revenue of at least 7 million US dollars. We will generate at least 7,000,000 US dollars in revenue one month after releasing our animated films in many countries. Since the animated films we produce will be in multiple languages ​​and across various categories, they will quickly garner high viewership. Today, animation film production companies generate average annual earnings of at least 800 million US dollars. Thanks to our strong advertising tactics, we will generate more revenue in the future. We will have generated at least 7,000,000 US dollars in revenue within a total of 7 months. How much income will you generate by investing 185,000 US dollars in our holding company? If you lend 185,000 US dollars to our holding, I will return your money as 370,000 US dollars on 30/04/2027. If you invest 185,000 US dollars in our holding, I will return your money as 370,000 US dollars on 30.04.2027. We will increase the 185,000 US dollars you have lent to our holding company by utilizing it in the animated film production sector, and I will return the funds to you as 370,000 US dollars on April 30, 2027. I will return your money to you as 370,000 US dollars on April 30, 2027. April 30, 2027, is the date we will repay your money. You will have generated twice as much revenue within a few months. I will repay you the 185,000 US dollars you lent to our holding company as 370,000 US dollars when the date of April 30, 2027, arrives. We will invest the 185,000 US dollars you have lent to our holding company into the animated film production sector to further increase the amount, and when April 30, 2027, arrives, I will return the money to you as 370,000 US dollars. By investing 185,000 US dollars in our holding company, you will generate substantial returns in a short period—don't miss this opportunity. How to contact us: To learn how you can grow your money by investing in our holding company, send a message to my Telegram username, Signal number, or email address listed below, and I will provide you with detailed information. To learn more about our animated film project and how you can invest 185,000 US dollars in our holding, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information. To learn how you can lend 185,000 US dollars to our holding and increase your money even more within a few months, and to get detailed information, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information. Send us a message via Telegram, Signal, or email for detailed information. I have listed our contact details below; you can obtain detailed information by sending a message to any of them. To learn how you can lend 185,000 US dollars to our holding and to get detailed information about our animated film project, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information. To learn how you can further increase your money within a few months by investing 185,000 US dollars in our holding and to get detailed information about our animated film production project, send a message to my telegram username, signal username, or email address below. To learn how you can increase your money, send a message to my Telegram username, Signal contact number, or email address below. My Telegram username: @adenholding Signal contact number: +447842572711 Signal username: adenholding.88 my email address: iuheatr@proton.me
Yeah. But is also didn‘t explicitly state what to do either. Not great if this is considered an emergency. You should work on clear communication.