71% of exposed Lightning LND nodes still lack year-old security fixes
A new preprint estimates most flagged LND nodes were still running affected releases in mid-October, long after patches shipped.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- An October 21 preprint covers a cohort of exposed LND nodes on the Bitcoin Lightning Network.
- About 71% of that cohort was still on affected release lines at the October 13 cutoff.
- The security fixes in question are roughly a year old.
- Only the headline figure is confirmed here; details of the flaws and the sample size aren't.
Seventy-one percent. That's how much of a flagged group of Lightning nodes hasn't installed fixes that are about a year old. A preprint dated October 21 puts that share of an exposed LND cohort on affected release lines as of its October 13 cutoff.
What the study says
LND is one of the most widely used Lightning node implementations. The preprint took a group of LND nodes it identified as exposed, then checked which software versions they were running. Seven in ten were still on release lines that carry the vulnerabilities.
That's the core finding. What we don't have: the specific flaws, the size of the cohort, or how the researchers picked the nodes. So treat the 71% as an estimate from a preprint. It's not a peer-reviewed count of the whole network.
Why it matters
Lightning is a network of independently run nodes. Nobody pushes updates to them. Operators upgrade themselves, or they don't. A year is a long time to sit on known fixes.
Run a node? Check your LND version against the project's release notes and upgrade. Only use Lightning through a wallet or service? Ask your provider which software it runs and how fast it patches. Funds in open channels are what's at stake.
The open question is why so many operators lag. Neglect? Abandoned hobby nodes? Upgrades that hurt too much? The answer decides whether a nudge fixes this or whether it takes better tooling.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Alex Rivera
Alex covers crypto markets and trading, testing every platform hands-on before writing about it.
