Core Lightning has told node operators to immediately disable any experimental features enabled in its software while developers investigate a newly identified issue that could put funds at risk.
The warning was issued on September 15 and applies to Core Lightning software used to run nodes on Bitcoin’s Lightning Network. The advisory does not affect Bitcoin’s main network.
Second warning in a matter of weeks
The mid-September alert is the second security-related warning involving Core Lightning in a short span. Weeks earlier, in late August, the project released a patch for a different set of bugs.
That earlier round of fixes was described as potentially relevant to a wide range of users, including businesses, payment providers, and individual operators relying on Core Lightning software packages to run Lightning Network nodes.
Immediate step for operators
In the latest notice, Core Lightning developers said operators running experimental features should turn them off right away. The team has not yet publicly detailed the underlying issue and is still investigating it.
Because the problem is still being assessed, the project framed the risk in precautionary terms: operators who keep those experimental features enabled could lose funds.
Scope limited to Lightning software
The advisory concerns Core Lightning, one of the software implementations used on Bitcoin’s Lightning Network. It does not apply to Bitcoin’s base layer or indicate a problem with the main Bitcoin network itself.
That distinction matters because the warning is tied to optional experimental functions inside specific node software, rather than to the broader operation of Bitcoin.
Broader security pressure on Lightning projects
The new Core Lightning alert comes amid a period of heightened security attention for Lightning-related software. In August, the Lightning Development Kit, a separate Lightning Network implementation, also faced a security emergency.
The source article said this reflects a growing pattern in which AI tools are being used to scan open-source Bitcoin code for vulnerabilities. While the current Core Lightning issue remains under investigation, the immediate confirmed step from developers is clear: node operators using experimental features are being asked to disable them until more information is available.
Source: Cryptopolitan