AI Found the Lightning Bugs
Coverage of Core Lightning's emergency advisory widened: the multiple critical vulnerabilities were reportedly surfaced by AI-assisted code review, with maintainers sifting a flood of AI-generated bug reports and running what outlets described as a roughly 14-day emergency response before patched releases shipped Aug 26. Operators are urged to upgrade — a stopped node cannot respond to force-closes — with going offline the fallback for unpatched nodes. No losses were confirmed, per the project.
Lightning Bugs: the audit clock just sped up
The scary part isn't the flaws. It's who found them — and how cheaply.
Core Lightning, the software that routes fast, cheap bitcoin payments off the main chain, spent roughly two weeks in emergency mode sifting a flood of bug reports written by AI. Enough were real to force every node operator to patch or shut down.
Read that carefully: this time, the flood arrived as reports, and the volunteers patched everything before anyone lost a coin. The same tools pointed at the same old code by someone less friendly ends differently — and last month's wallet drains show what differently looks like.
Every "audited" badge in crypto is a snapshot against the tools of its day. AI just made those tools cheap, tireless, and available to both sides.
So the question isn't whether these bugs got patched. It's whether volunteer teams can keep winning a race where the other side never sleeps — and never runs out of interns.
3 sources
- Core Lightning Tells Node Operators to Upgrade or Go Offline Over AI-Reported Bugs · blockchainreporter.net · T2
- Onslaught of AI-found bugs forces Bitcoin’s Core Lightning into a secret 14-day emergency lockdown · cryptoslate.com · T2
- AI Finds Critical Flaw in Bitcoin Lightning, Devs Issue Emergency Warning · decrypt.co · T1