Bitcoin Lightning’s year-old security fixes still missing from 71% of flagged nodes
Summary
A study found that 71% of 550 public Bitcoin Lightning nodes flagged in an August security disclosure were still on affected LND software lines by October, while about 10% had upgraded. Patches had been available for over a year before the warning. Upgrade waves closely followed Umbrel software releases, but those arrived 19–41 days after LND releases, suggesting distribution channels may slow adoption. Across nine disclosures, researchers detected no clear upgrade surge after public warnings. Affected software represented 14.9% of live LND nodes but 6.4% of channel capacity. The analysis used public network snapshots and advertised software features, so it could not establish exact patch versions or confirm exploitability.
