The developers of Bitcoin payments software Core Lightning warned node operators in an X post on Wednesday that several vulnerabilities flagged in a wave of AI-generated security reports are real and that developers are coordinating a fix.
The project told operators to install and verify the forthcoming update promptly—or run their nodes offline if they cannot upgrade instead of shutting them down and leaving their payment channels unmonitored.
“That flag stops peer connections, so no payments route in, out or through your node,” Core Lightning wrote. “It keeps running, which means it keeps watching the chain and can still act if a counterparty force-closes a channel. A node that is powered off cannot do that, and that is why switching off is the worse option.”
Core Lightning develops software used to send and route Bitcoin payments over the Lightning Network, which acts as a second-layer network and speeds up transactions. Its team said it has spent several weeks reviewing a high volume of AI-generated CVE reports, or submissions describing possible software vulnerabilities.
The project has not revealed how many flaws it confirmed, what an attacker could do with them, or whether anyone has exploited them. It said details will remain private for at least two weeks while developers prepare fixes and operators update their nodes.
“When the release lands, verify the signatures and install it, and do that promptly rather than eventually,” Core Lightning said in a follow-up post.
In a separate post on the Core Lightning Discord Server, Core Lightning said its “small team and outside contributors” spent 10 days reviewing AI-generated vulnerability reports from multiple sources and developing fixes. The project initially planned to publish a point release within days but later opted to distribute signed, reproducible binaries while keeping the details under embargo for two weeks, during which it strongly urged operators to upgrade.
Why Core Lightning advised against shutting down
Core Lightning told operators who do not upgrade promptly to restart their nodes with --offline, which blocks payments and connections to other Lightning nodes while the software continues monitoring Bitcoin. The project said it will no longer support earlier versions, including 26.04, while version 26.09 remains scheduled for late September.
Monitoring is necessary because Lightning channels handle payments outside the Bitcoin blockchain, then settle on Bitcoin when they close. Keeping the node’s background software running allows it to respond if the other participant forces a channel to close.
“That is why we suggest it over a shutdown: a live daemon still follows the chain and can respond if a counterparty force-closes, a stopped one cannot,” Core Lightning wrote on X.
The AI Hunt for Bitcoin Software Flaws
The warning follows other cases in which Bitcoin companies and developers said AI found security flaws across the ecosystem.
In July, hardware wallet maker Coinkite said it believed an attacker used AI to inspect old software code and find a weakness in Coldcard wallet seed generation. A wallet seed is the secret information controlling its funds. The flaw was linked to millions of dollars in stolen Bitcoin. Earlier this month, Bitcoin swap provider Boltz suspended its service, saying apparent attackers were finding weaknesses faster than its developers could fix them.
According to the Bitcoin Red Team, a volunteer group of cybersecurity and blockchain experts, AI-assisted review so far has produced 4,962 possible findings across 390 Bitcoin projects. It initially rated 85 as critical and 635 as highly severe, while acknowledging that some could be false alarms.
Pseudonymous Bitcoin developer and Bitcoin Red Team member Calle said the group was trying to find weaknesses before attackers did.
“At this point, it is a question about time,” Calle told Decrypt. “The reason why the Bitcoin Red Team exists right now is because we need to get ahead of the attackers as fast as possible.”
Calle, who helps maintain the Cashu digital cash protocol, said AI has made it easier for people without security training to exploit software flaws.
“Simple exploits can now be completed end to end by someone who doesn’t know how to do it without AI,” he said.
