🚨 SlowMist TI Alert 🚨 A vulnerability in an experimental feature of #CoreLightning# (CLN) may put user funds at risk. Please check your node immediately! Official @Core_LN announced on September 15 that it is investigating a vulnerability in an experimental feature that may affect user funds. All nodes with experimental features enabled are strongly advised to disable them immediately and wait for a patch. 🔴 High-risk options include: --experimental-dual-fund (dual funding) --experimental-splicing (now enabled by default) --experimental-peer-storage ⚠️ The SlowMist team found that a similar issue had already been fixed in August: a remote peer could specify an arbitrary or even zero fee rate during the channel opening/funding adjustment (splice) protocol. The local node would sign and write it to the database without additional validation, potentially forcing the node to pay abnormal fees and even triggering a crash loop, leaving the node offline for an extended period and unable to respond to on-chain attacks in a timely manner. 🛡️ Node operators should: 1️⃣ Immediately run lightning-cli disableoption or remove all --experimental-* parameters when restarting; 2️⃣ Do not shut down the node completely — use --offline mode to retain on-chain monitoring capabilities and prevent counterparties from force-closing channels while the node is offline, which could result in fund losses; 3️⃣ After the official patch is released, verify the signature (GPG/SHA256) before upgrading. Do not blindly take action based solely on social media posts; 4️⃣ Beware of fake “urgent patch” links shared by impersonated official accounts. 📌 Source: