AI has uncovered multiple real vulnerabilities, and Core Lightning has issued an urgent security advisory.

The Bitcoin Core Lightning development team has issued an urgent warning, noting that multiple genuine vulnerabilities have been identified in a large number of AI-generated security bug reports, urging Lightning Network node operators to take action. Core Lightning advises node operators who cannot upgrade immediately not to shut down their devices, but instead restart the software in "--offline" mode. This mode cuts off the node’s communication with other Lightning Network nodes, suspends payment sending, receiving, and routing, while still allowing continuous monitoring of the Bitcoin blockchain to prevent risks such as payment channels being closed due to outdated states. Core Lightning stated that its development team has received a large volume of AI-generated vulnerability reports since early August, some of which have been verified as genuine. The developers have not yet disclosed specific details of the vulnerabilities, and plan to keep them confidential for two weeks after releasing a fixed version before making the information public, to allow node operators to complete upgrades. This is the second AI-related Lightning Network security emergency this month. Earlier this month, BTCPay Server suffered a vulnerability that led to the exposure of some Lightning Network node credentials and subsequent fund theft. Additionally, the Bitcoin Red Team recently used an AI model to scan 390 Bitcoin code repositories, identifying nearly 5,000 potential issues in approximately 27 hours, with 85 classified as critical vulnerabilities.