Core Lightning urged operators running version 26.06.7 or earlier to upgrade after receiving reports that attackers are targeting unpatched Lightning nodes, potentially putting balances in payment channels at risk. Version 26.06.8, released Sept. 22, addressed multiple security issues, though the project has not identified the flaw attackers are targeting or confirmed successful thefts. The warning follows a period of accelerated vulnerability reporting, including an August release whose source code was temporarily withheld to give operators time to patch. Separately, MetaMask began exiting Ethereum validators it operates through Lido after a Sept. 30 security incident affecting part of its infrastructure. MetaMask said no customer wallets or funds were affected, while Lido said stETH holders need take no action but could face lost rewards and downtime penalties during the exits. Bitcoin continued producing blocks, and both incidents were reported as separate from their respective underlying networks.