BTCPay Server
Update to incident: Start9 demands urgent Core Lightning update on StartOS
BTCPay Server disables routes through CLN and Eclair by default
BTCPay Server reported on its official account that, following public reports of an issue, it disabled routing through the Lightning implementations Core Lightning and Eclair in the default configuration. BTCPay Server operators using these nodes to accept payments are affected.
Actions to take
Update BTCPay Server through the built-in updater in the server settings section (Maintenance → Update); details are at the link.
Source: x.com - BtcpayServer
Incident history
- 26 AugStart9 demands urgent Core Lightning update on StartOS
- 26 AugBTCPay Server disables routes through CLN and Eclair by default
- 27 AugSecurity update for the Core Lightning application on Umbrel
- 27 AugCore Lightning: update urgently once the release is out; use --offline mode until then
- 28 AugCore Lightning releases v26.06.7 with fixes for several vulnerabilities; source code under embargo
- 28 AugCore Lightning 26.06.7 fixes confirmed vulnerabilities; source code to be published later
- 29 AugBTCPay Server updates Core Lightning to v26.06.7 and keeps external CLN access disabled
- 01 SeptCore Lightning Docker images did not contain the advertised fix — StartOS switches to builds from signed tarballs
- 02 SeptCore Lightning 26.06.7 Docker image rebuilt with the full fix
- 08 SeptBTCPay Server 2.4.4: emergency update amid ongoing attacks on the project