Core Lightning is warning Bitcoin Lightning node operators not to simply shut down after AI-assisted reports uncovered real vulnerabilities. If patching isn’t possible right away, the safer move is to use --offline mode so the node can still watch the blockchain and protect channel funds.
Read Full Article
A coalition of 40+ crypto firms and security groups is urging frontier AI labs to give trusted defenders earlier access to top-tier models, arguing Bitcoin and crypto security teams need the same firepower attackers may already be using. The push comes as AI-assisted audits and real-world flaws like BTCPay Server’s show the stakes are anything but theoretical.
Read Full Article
AI-assisted scans are surfacing thousands of potential bugs across Bitcoin-related open-source projects, and some are already turning into real fixes. BTCPay Server has patched a critical flaw, proving the noise is real — but so is the security upside.
Read Full Article
BTCPay Server rushed out an emergency patch after a critical auth flaw could let attackers bypass two-factor protections and potentially steal merchant funds. Bitcoin itself wasn’t compromised — but for self-hosted payment stacks, this was a nasty reminder that the weak link is often the plumbing.
Read Full Article
BTCPay Server has patched an exploited vulnerability affecting LND users in version 2.4.2, with on-chain wallets untouched. The fix is live, but affected operators should update fast, review access, and rotate credentials before their node becomes someone else’s payday.
Read Full Article
BTCPay Server has warned that a critical vulnerability is being actively exploited and could drain funds, urging operators to update to v2.4.2 immediately — or shut their server down if they can’t patch yet.
Read Full Article