Lightning Network Developers Warn of Bug That Could Cause Loss of Bitcoin

Developers disclosed a security hole in various versions of bitcoin's Lightning Network software that could cause users to lose money.

Sep 10, 2019 at 9:15 p.m. UTC
Updated Sep 13, 2021 at 11:25 a.m. UTC

Developers have disclosed a security hole in various versions of bitcoin's Lightning Network software that could cause users to lose money if not updated.

The bug was first made public on Aug. 30 by bitcoin and Lighting developer Rusty Russel and confirmed Tuesday afternoon by Olaoluwa Osuntokun, CTO of startup Lightning Labs.

It's unclear how much bitcoin, if any, was lost, or how many users were affected.

Multiple Lightning node versions are vulnerable and should be updated immediately, Osuntokun warned a developer mailing list, adding:

"We've confirmed instances of the CVE being exploited in the wild."

An experimental layer-two solution, Lightning aims to allow nearly costless transactions, making bitcoin feasible for mundane transactions such as coffee purchases.

But the bug shows the technology still has problems like any code-based financial product.

“Security issues have been found in various lightning projects which could cause loss of funds,” Russel said in the original posting. “Full details will be released in 4 weeks (2019-09-27), please upgrade well before then.”

Osuntokun emphasized that lightning is still in its infancy.

“We'd also like to remind the community that we still have limits in place on the network to mitigate widespread funds loss," he wrote, "and please keep that in mind when putting funds onto the network at this early stage.”

Lightning Labs continued the warning on Twitter, reminding users that it's still possible to lose funds on the network.

Don't put more money on Lightning than you're willing to lose!

— Lightning Labs⚡️ (@lightning) September 10, 2019

Versions affected include all LND releases 0.70 and below, C-Lightning 0.70 and below, and éclair 0.3 and below.

Olaoluwa Osuntokun image via CoinDesk archive


Read more about
The Festival for the Decentralized World
Thursday - Sunday, June 9-12, 2022
Austin, Texas
Save a Seat Now

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Trending

1
CoinDesk - Unknown
How to Get Started in The Sandbox

Here's a step-by-step guide on what you need to know to explore and play in The Sandbox metaverse. This piece is part of CoinDesk's Metaverse Week.

Here's a step-by-step guide on what you need to know to explore and play in The Sandbox metaverse. This piece is part of CoinDesk's Metaverse Week.

CoinDesk - Unknown
2
CoinDesk - Unknown
Nexo

CoinDesk - Unknown
3
CoinDesk - Unknown
Martin Shkreli Is Back. He Loves Crypto

The flawed former hedge fund manager is looking to reinvent himself as a crypto entrepreneur. Buyer beware.

The flawed former hedge fund manager is looking to reinvent himself as a crypto entrepreneur. Buyer beware.

CoinDesk - Unknown
4
CoinDesk - Unknown
Using Crypto to Bring the Metaverse Into Reality

Where blockchain fits into building the next-gen internet revolution. The article is part of "Metaverse Week."

Where blockchain fits into building the next-gen internet revolution. The article is part of "Metaverse Week."

CoinDesk - Unknown