71% of Bitcoin Lightning Nodes Remain Vulnerable Despite Year-Old Security Fixes

• •71% of flagged Bitcoin Lightning nodes remain on vulnerable software lines.
• •Only 10% of affected nodes upgraded despite year-old fixes being available.
• •Software distribution channels significantly impact upgrade rates.

A study revealed that 71% of Bitcoin Lightning nodes flagged for vulnerabilities in an August 2026 disclosure were still running affected software as of October 2026. The vulnerabilities had fixes available for over a year, yet only 10% of the flagged nodes upgraded during this period. The study analyzed 550 public LND nodes and found that the upgrade behavior was influenced more by software releases from platforms like Umbrel than by security disclosures. The delays in applying security patches raise concerns about the effectiveness of public warnings in prompting operators to secure their nodes. The findings indicate that many operators are slow to adopt security improvements, with a median delay of 88 days for nodes to migrate to newer software versions. The lack of urgency in upgrading poses a significant risk to Bitcoin's payment infrastructure.