nodes

The Core Lightning team, which develops the open-source Bitcoin Lightning Network node software, has issued an urgent alert stating that reports indicate attackers are targeting nodes that have not installed patches, urging operators still running old versions to upgrade immediately. The team stated: "Emergency security update: If you are using version 26.06.7 or earlier, please upgrade to the latest release as soon as possible."Prior to this, Core Lightning began investigating a potential issue that could affect its experimental features and, in turn, impact user funds on September 16, and approximately six days later, version 26.06.8 was released. This update not only fixed several defects but also provided patches for security vulnerabilities reported responsibly by multiple parties, thanking the Bitcoin Red Team and 12 other individuals and organizations in the release notes, while also acknowledging anonymous reporters.According to the changelog, this round of fixes covers a bug that could cause sender nodes to crash, requests that could exhaust REST interface memory, and a vulnerability that could result in user funds facing confiscation losses when closing payment channels. To provide operators with ample upgrade windows and prevent attackers from taking advantage of reverse engineering and exploitation, this version intentionally obscured some testing content. Additionally, in August of this year, the project initiated a collaborative fixing process after reviewing a large number of AI-generated general vulnerability disclosure reports, and two days later released version 26.06.7 to close confirmed vulnerabilities.

MetaMask has released a follow-up statement regarding the previously disclosed infrastructure security incidents, stating that the team is continuously conducting investigations and addressing the issues.MetaMask stated that to ensure user safety, it has collaborated with relevant partners to take preventive measures and is currently withdrawing the affected validator nodes from its non-custodial staking business. According to the investigation results so far, there is no indication that MetaMask wallets or customer funds have been affected.This morning, part of the infrastructure of MetaMask's non-custodial staking business encountered a security incident. As a precaution, the validators operating on Lido have begun to withdraw.

The research director of Galaxy posted on the X platform stating that even with a high probability of witch nodes, the peak proportion of BIP-110 nodes is only about 20% of the entire network.He mentioned that it is quite ridiculous to see Mechanic and others so shocked by the failure of BIP-110; even accounting for this approximately 20%, its hash power proportion is still far from sufficient, the scale of hash power is very small, and the node proportion is only about one-fifth, still a long way from the target.

F2Pool co-founder Wang Chun stated that they currently do not support the BIP-54 proposal, but if the proposal is strictly advanced according to BIP-9 (Bitcoin Improvement Proposal activation mechanism) and reaches the required absolute majority signal threshold, their team will update the mining pool nodes. Chun indicated that they will not participate in the signal voting for BIP-54 until the formal activation conditions are met.BIP-54 is one of the protocol upgrade proposals recently discussed in the Bitcoin community, involving adjustments to Bitcoin's consensus rules. Wang Chun's statement reflects that some miners remain cautious about the proposal and prefer to promote the upgrade through the standardized BIP-9 process and community consensus.

In a leaked internal conversation from the DeepSeek investor conference, DeepSeek founder Liang Wenfeng elaborated on his core views regarding the development of the domestic AI computing power industry and ecosystem. He stated that the current domestic AI chip replacement is facing a historic opportunity, with no compatibility barriers in hardware and ecosystem, and that NVIDIA cannot block the replacement process. The only current issue is insufficient production capacity, and it is expected that within a year, the market's perception of domestic chips as "unusable and poor-performing" can be reversed.He pointed out that NVIDIA's CUDA ecosystem moat is rapidly collapsing, and multiple industry transformations combined with export controls have opened a development window for domestic AI chips. He revealed that DeepSeek has partnered with Huawei to obtain 16,000 950 cards to run the ecosystem, and Huawei's 950 super nodes can completely replace NVIDIA's GB200 and GB300 in terms of performance and price, showing an optimistic attitude towards the development of the domestic computing power industry.

Libbitcoin developer @evoskuil stated that the latest version of Libbitcoin Server can complete the initial block download of a Bitcoin full node in 55 minutes and perform full verification. This speed improvement comes from a new GPU-based signature verification system that runs in parallel with conventional script verification, rather than as a separate step.The software does not pause execution to verify each ECDSA and Schnorr signature; instead, it captures signature checks, batches them, and processes them via GPU while the remaining verification continues. @evoskuil indicated that this method achieves about a 99.5% signature capture rate without blocking verification, thus eliminating the need for a second verification. If a batch signature check fails, the software traces it back to the corresponding block and marks that block as invalid. He also mentioned that this design can batch process an almost arbitrary number of signatures, keeping the GPU ahead of the remaining verification process and significantly shortening the full node synchronization time.

The latest research from the Cambridge Centre for Alternative Finance shows that approximately 31% of Ethereum node activity is located in the United States, with about 39% distributed in the EU region excluding the UK, indicating that the geographical distribution of Ethereum nodes is still relatively concentrated in Western countries. The research leader, Alexander Neumuller, stated that the current node distribution is not concentrated in a single country but primarily relies on a few cloud service providers, including Hetzner, Amazon AWS, and OVH.It is noteworthy that the Ethereum network does not require half of the validators to fail for issues to arise; when more than one-third of validators go offline simultaneously, the network may be unable to complete the finalization of block checkpoints. Neumuller pointed out that nodes and validators do not have a one-to-one correspondence; a single node may run multiple validators, making it currently impossible to accurately assess the actual impact of a specific node or service provider failure on the validation network. Additionally, the research reassessed the energy consumption situation after Ethereum's Merge. The data shows that Ethereum's current annual energy consumption is approximately 7.9 GWh, equivalent to about 1 megawatt of continuous power, which is only about 0.02% of the pre-Merge level, with energy consumption decreasing by approximately 99.98%. Currently, the proportion of sustainable energy used by the Ethereum network exceeds 56%, higher than the global average. The research also pointed out that the concentration of client software is another potential risk; if a dominant client has a vulnerability, it could affect a large number of network participants. The report was published by the Cambridge Centre for Alternative Finance, with support from the Ethereum Foundation.

According to CoinDesk, the Ethereum Foundation recently disclosed that its security team used AI agents to test the software running on Ethereum validator nodes and successfully discovered a remotely triggerable vulnerability that could cause node crashes. However, researchers emphasized that human review remains a key step in distinguishing real vulnerabilities from false positives among the large number of security reports generated by AI.It is reported that the discovered vulnerability exists in the Ethereum network message propagation protocol gossipsub, where an attacker can remotely trigger the node software to enter an abnormal computation state, causing the program to crash and shut down, making the validator node go offline until the operator manually restarts it. This vulnerability has been fixed and registered under the identifier "CVE-2026-34219."Nikos Baxevanis, a member of the Ethereum Foundation's protocol security team, stated that what was truly surprising about this incident was not the AI's ability to discover vulnerabilities, but rather the amount of time the team spent discerning which vulnerabilities were real and which were merely seemingly credible "illusions."

According to The Block, the latest report "Merged Ethereum" released by the Cambridge Centre for Alternative Finance (CCAF) shows that approximately 31% of Ethereum node activity is located in the United States, and 39% is distributed across the European Union (excluding the UK), presenting an overall Western centralization pattern.The report points out that there are potential centralization risks in the Ethereum network—nodes are highly concentrated among three major hosting service providers: Hetzner, AWS, and OVH. If more than one-third of the validators go offline simultaneously, the network checkpoints will stop finalizing.In addition, the report recalculated Ethereum's energy consumption, estimating that the annual electricity usage after the merge is about 7.9 gigawatt-hours, a decrease of approximately 99.98% compared to before the merge, with sustainable energy accounting for over 56%. The cost needed to offset its annual carbon emissions is only about $33,500 to $73,800.

Michael Saylor posted on the X platform, stating that the future of Bitcoin is shaped by the dynamic consensus among nodes, miners, and holders. Among these, the influence of nodes is reflected in transaction validation rights, miners are represented by computing power, and holders are represented by economic weight. Only when validation, security, and capital align can protocol changes be approved.He further pointed out that while the forces of brands, laws, politics, technology, institutions, culture, and the physical realm may influence discussions related to Bitcoin, they cannot directly determine the outcome of consensus. Their role is mainly reflected in persuading, coordinating, constraining, or mobilizing nodes, miners, and holders.

According to Protos, Bitcoin Core developers recently disclosed a high-risk vulnerability numbered CVE-2024-52911, which affects versions 0.14.1 to 28.4, allowing miners to remotely crash other users' nodes and execute code by mining specially crafted blocks.The vulnerability was discovered and responsibly disclosed by developer Cory Fields in November 2024. The fix was merged in December of that year and released with version v29 in April 2025. The last vulnerable 28.x version series was discontinued on April 19, 2026.However, since upgrading Bitcoin full nodes is voluntary, it is estimated that about 43% of nodes are still running the vulnerable old version software, facing potential risks. Fortunately, the cost of implementing such an attack is extremely high—miners would need to allocate significant computational power to mine invalid blocks that do not yield block rewards—so it is likely that it has never been exploited in practice.

The Zcash Foundation officially announced the release of Zebra version 4.4.0. This update fixes multiple consensus-level critical security vulnerabilities and strongly recommends that all node operators upgrade immediately. This includes a denial-of-service vulnerability that can cause new blocks to stop being discovered permanently, consensus divergences caused by errors in block signature operation (sigops) counting, anomalies in the processing of transparent transaction signature hashes, and risks of memory allocation amplification attacks.The Zcash Foundation stated that some of these vulnerabilities could cause Zebra nodes to accept blocks that are rejected by zcashd, leading to chain forks. If not updated in a timely manner, nodes may face risks such as interruption in block discovery, consensus forks, and resource consumption amplification, and there are currently no alternative mitigation solutions.

According to Decrypt, Admiral Samuel Paparo, the commander of the U.S. Pacific Command, stated during a hearing before the U.S. House Armed Services Committee that the U.S. government is currently running a Bitcoin node for cybersecurity-related testing, but is not engaged in mining.Paparo indicated that the U.S. military's interest in Bitcoin primarily focuses on its value as a computer science tool, including cryptography, blockchain, and reusable proof-of-work mechanisms, with the aim of using the Bitcoin protocol to strengthen cybersecurity and enhance military capabilities, which is still in the experimental stage. He also mentioned that maintaining the global dominance of the U.S. dollar aligns with U.S. military interests and gave a positive evaluation of the stablecoin legalization bill, the GENIUS Act, signed by Trump last summer, believing that the bill helps to solidify the global position of the dollar.

According to official news from the Polygon Foundation, the Giugliano hard fork upgrade will take place around 22:00 on April 8 at block height 85,268,500 on the Polygon mainnet.This upgrade will bring the following improvements: allowing producers to announce blocks earlier for faster finality; directly adding fee parameters to the block header; introducing new RPC interfaces to support fee data.The official reminds all node operators that they must upgrade Bor to version v2.7.0 or upgrade Erigon to version v3.5.0 to ensure normal operation.

According to official news, BlackRock's first ETF offering staking rewards, the iShares Staked Ethereum Trust ETF (ETHB), has been listed for trading on Nasdaq, with Figment selected to provide validation node infrastructure for ETHB, supporting transaction validation and Ethereum network security.Industry insiders point out that the launch of ETHB benefits from regulatory clarity driven by long-term policy initiatives, allowing Ethereum staking to be participated in by a broader range of investors. The amount staked has reached a historic high, enhancing not only network security and risk resistance but also providing a solid foundation for on-chain economic activities and development.

The DFINITY Foundation stated on platform X, "The economic model of the Internet Computer is changing: the old model rewarded node providers simply for running nodes. The new model allocates 80% of cloud engine revenue to nodes that provide computational support, with 20% used to burn ICP.Currently, the Node Provider Association has begun preparations to promote cloud engine services to businesses across Europe."

The shipping giant FedEx announced its joining of the Hedera Network's governance body, the Hedera Council, where it will operate network nodes and participate in on-chain governance.

Data shows that the number of validator nodes on the Solana network has significantly decreased from a peak of 2,560 in March 2023 to the current 795, a drop of 68%, raising concerns in the market about the network's level of decentralization.Industry insiders point out that, in addition to clearing "zombie nodes," a more core reason is the continuous rise in operating costs + zero-fee competition among large nodes, which is systematically squeezing out small and medium-sized validators. An independent validator node operator stated that many small nodes are not bearish on Solana, but rather that the economic model has become unsustainable: "Without economic viability, decentralization becomes a charitable act." Meanwhile, Solana's Nakamoto Coefficient has dropped from 31 to 20 during the same period, a decline of about 35%, indicating that the control of staked SOL is concentrating in the hands of a few large nodes, reducing the network's level of decentralization.From a cost perspective: to maintain operation (excluding hardware and servers), a node needs at least $49,000 worth of SOL in the first year; approximately 401 SOL is required annually to pay for voting fees; and daily voting transaction costs can reach up to 1.1 SOL/day. The trend signals are clear: Solana is gradually evolving from a "broad participation node structure" to a structure dominated by large institutional nodes, which may have a profound impact on the network's security structure and governance patterns in the long term.