Core Lightning developers released version 26.06.10 to fix several vulnerabilities, with no losses linked to these flaws reported so far. One flaw could turn a participant’s balance into transaction fees during a forced channel closure, while another could allow an intermediary node to forward a payment without receiving the corresponding funds. In parallel, LNbits asked operators to shut down their servers after a wave of attacks during which 0.023 BTC were stolen from BitTipBot operator’s installation. The atomic swaps platform Boltz also suspended its operations following several attacks, and its founders said artificial intelligence had enabled vulnerabilities to be found and exploited more quickly, although its involvement in the LNbits attack has not been proven.
Source: Read the original article
