Lightning Network Observer

[fillippone]

And we just discussed these as well recently. It really surprises me, these things are not blowing up faster compared to some other vulnerability topic.

Running a Lightning node has a completely different security profile than holding your stash on a cold wallet. The amount of capital is very different, and the profile of the user handling such liquidity is also very different.
Yes, of course, it’s a warning about the security of all the layers surrounding the Bitcoin protocol, where a single point of failure can be catastrophic. The two issues are at totally different levels.

[avp2306]

There has been a serious exploit found in the Core Lightning node software.

Yes. Someone created the thread already: https://bitcointalk.org/index.php?topic=5592448.0

Lucky, Core Lightning responded to the issue quickly and we will have an upcoming update soon. From the thread post, the warning being posted in Discord was posted a few days ago.

And we just discussed these as well recently. It really surprises me, these things are not blowing up faster compared to some other vulnerability topic.

Maybe because there are few people out here use the lightning network, this is the reason why it didn't get much any attention.

But also will add this case about what happen on BTCpay on which their lightning network infrastructure also got compromised. I don't know if there's someone create a thread about this, but I think worth to share similar on the issue shared by @cAPSLOCK.

https://blog.btcpayserver.org/security-advisory-btcpay-server-2-4-2/?_bhlid=76a4a1731457dd4b87c3d27cf61dbf8ea1a4b0e9

https://pro.edgex.exchange/en-US/news/article/btcpay-server-vulnerability-lightning-funds

But until now BTCpay didn't disclose how many victims got affected with this issue. This is serious matters that need to pay close attention, since it really seems that hackers are exploring many things to penetrate and steal big money from people.

[Chibit01]

I don't know how popular Alby wallet is around here, but I have seen a few people who use it in my local even as I have not myself. It's said to be a self-hosted bitcoin listening network wallet, and it was recently reported to have a flaw which could be exploited.

We have confirmed a critical vulnerability in Alby Hub v1.7.0–v1.18.5 (releases prior to August 2025) when the Hub is publicly accessible from the internet. The vulnerability could allow an attacker who could reach the Hub's management API to gain unauthorized access and send funds.
Alby Hub v1.19.0 (released Aug 29, 2025) or newer are unaffected.

As with any incident of this kind, we are deeply sorry — above all for the users affected. To our current knowledge, one user has been impacted and thankfully reported these details. We have poured all our energy and resources of the past years into this project, and an issue like this hits us hard.

What you should do:
Check your installed version. If you run an affected version, restrict public access to your Hub's management interface and update immediately to v1.24.0, the latest release.

Source: Alby official X account: https://x.com/getAlby/status/2097574956049498150

Hacknews also reported it: https://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.html?m=1

[fillippone]

I don't know how popular Alby wallet is around here, but I have seen a few people who use it in my local even as I have not myself.

I have tried in the past.
However, i don feel like I want to use a super niche solution to take care of my sats. I think using widely used and tested wallets guarantees a more sound risk profile (assessment required, as demonstrated by the COLDCARD events).

This is a graph of the yield on the 10-year U.S. bond.

This graph can also be seen as what the government will be forced to pay for just interest on its debt.

This last spike was due to Trump supposedly willing to do a helicopter money of USD 5,000 to evefry republican voter.
Not sure if this is relevant for this topic tough.

[cAPSLOCK]

This is a graph of the yield on the 10-year U.S. bond.

This graph can also be seen as what the government will be forced to pay for just interest on its debt.

This last spike was due to Trump supposedly willing to do a helicopter money of USD 5,000 to evefry republican voter.
Not sure if this is relevant for this topic tough.

Yes, I am very sorry. I thought I was posting this to the Wall Observer. I am going to delete it.  (but on that topic, I imagine Trump realizes there's almost no chance of the Republicans being able to keep Congress I will delete this post too, but I wanted you to know I accidentally posted and fixed it.