Your signal. Your price.
Core Lightning PRs 9104 and 9292 implement experimental Simple Close Option, a cooperative close protocol where peers independently broadcast signed closing transactions.
PR 9292 fixes an edge case where Core Lightning could accept then reject an uneconomical OP_RETURN output, preventing a forced close.
Core Lightning v26.06 deprecates the Pay plugin in favor of XPay, which uses the AskRené plugin and minimum cost flow algorithms for improved multipath payment routing, and adds a payer proof implementation for Bolt 12 offers.
A Core Lightning denial-of-service vulnerability allowed remote attackers to crash nodes by sending an all-zero TXID during channel opening. The bug was fixed in version 26.0.4.
Chand discovered a remote denial-of-service vulnerability in Core Lightning by fuzzing the open channel flow during a Summer of Bitcoin internship.
The Core Lightning bug was triggered by a malicious peer sending a funding_created message with a zeroed funding transaction ID. This crashed the hardware security module daemon, forcing the whole node offline.
The Core Lightning vulnerability was fixed in version 26.04 after disclosure to CLN security in July 2024 and patching in August 2024. All node operators are advised to upgrade.
Chand criticizes Core Lightning's slow fix deployment pace as a sign Lightning security is undervalued, arguing the ecosystem should invest more in fuzzing like Bitcoin Core does.
Core Lightning 26.06 RC1 introduces experimental Bolt 12 payer proof support, allowing a payer to cryptographically prove they authorized a specific payment for disputes or audits while preserving privacy by omitting select invoice fields.
Core Lightning is deprecating legacy payment RPCs like 'pay' in favor of the newer 'xpay' family, which is multipath-native and uses rene-pay routing. The deprecation starts in v26.06, with removal scheduled for v27.03.
Horton asserts the 1996 Clean Break doctrine, written by Wormser and Perle for Netanyahu, advocated abandoning Palestinian peace talks and instead dominating neighboring states.