The Bitcoin Beacon
The base layer was never at risk. The danger sat in the experimental settings some operators had switched on.
Core Lightning, one of the main software packages for running a node on Bitcoin's Lightning Network, told operators on Monday to disable any experimental features immediately and wait for a patch while it investigates a flaw that can put user funds at risk.
The warning named three high-risk options by name: dual-funding, splicing and peer-storage, each switched on with an --experimental flag.
The trigger was concrete. Earlier that week, operators reported funds stolen while using the dual-funding feature — even on the latest release — which lets both sides of a payment channel contribute money when it is opened.
Core Lightning has not yet published a technical advisory naming the exact failure, which is itself telling: it is asking operators to turn the features off first and understand the mechanism later.
This is the project's second alert in a matter of weeks, following a late-August patch for a separate wave of bugs affecting businesses and payment providers running the software. At least one wallet, D'CENT, urged its users to move funds out as a precaution.
The reassurance is structural: none of this touches Bitcoin's base layer or the coins of anyone who left experimental flags off. Lightning is where payments get fast, and the experimental edge is where they get fragile.
Why it matters: the safe move on Lightning is the boring one — run the stable defaults, leave the experimental switches off, and let new features prove themselves before trusting them with money.
The Sept 15 advisory, the three named experimental flags (dual-fund, splicing, peer-storage), the dual-funding theft reports, the “no technical advisory yet” status and the D’CENT warning are per Cryptopolitan, Crypto Daily, Phemex and Crypto Adventure. Bitcoin’s base layer is unaffected. Informational only — not financial advice.
Free. Five minutes. No hype.
Subscribe free