Core Lightning Tells Node Operators to Go Offline

gm, Defiers!

These are the biggest stories in DeFi and crypto:

• Core Lightning tells node operators to shut down, with no patch published
• Unstoppable skips the ICANN round and refunds web3 domains
• 39 state banking groups form BankChain Alliance for a 2027 launch
• Revolut starts its EURR rollout with €374 outstanding
• Aave opens iOS early access and keeps Android and web waitlisted

Core Lightning's maintainers told node operators on Wednesday to take their nodes offline unless they upgrade to a release that has not been published. The binaries were not out as of Wednesday afternoon, and what they fix sits under a two-week embargo.

The guidance circulated in the project's Discord and reached the network through third parties. Mark Erhardt, a Bitcoin Core contributor at Localhost Research, confirmed with a maintainer that it was real. Cashu developer Calle then amplified it with sharper framing than the original text carries, calling it a critical vulnerability and telling users to shut down right now. The Core Lightning message does not use the word critical, describe a single vulnerability, or say to shut down immediately.

Core Lightning runs a share of a network carrying about 3,750 BTC across 33,101 channels. The newest tagged release is v26.06.6 from July 22, and the project's security advisories page lists none. This is the fourth Bitcoin infrastructure alarm in four weeks, after the Coldcard firmware bug, the Boltz shutdown and the BTCPay Server flaw.

Read more below!

SECURITY

Core Lightning Tells Node Operators To Go Offline

Core Lightning's maintainers told node operators to shut down unless they upgrade to a release that has not shipped. The message went out through the project's Discord and was reproduced on stacker.news on Wednesday. "The details of the release will remain under embargo for two weeks," it said, adding that the team will not support previous releases, including 26.04. Neither the binaries nor an advisory had appeared by Wednesday afternoon, and the newest tagged release is v26.06.6 from July 22. Core Lightning first described the pressure on Aug. 13, saying it had received "a number of AI-generated CVE reports from multiple sources over the past 10 days" and expected a point release within days. Thirteen days later the plan is embargoed binaries. Blockstream, which maintains the implementation, has posted nothing about it; its feed on Wednesday carried a post-quantum research report and a bitcoin-buying clip from Adam Back. Bitcoin traded at $78,490 on Wednesday afternoon, showing no reaction.

Core Lightning Tells Node Operators To Go Offline, With No Patch PublishedThe CLN team said operators who don't upgrade should run their nodes --offline, but the fixed binaries aren't out yet and the details of what they fix are under a two-week embargo.thedefiant.io

Why this matters: Operators are being asked to trust a fix they cannot download and cannot read. The one action available to them takes their channels off the network.

NFTS & WEB3

Unstoppable Skips ICANN Round, Refunds Web3 Domains

Unstoppable Domains did not file applications for its web3 top-level domains in ICANN's 2026 round and is refunding customers who bought names under them, founder Matthew Gould said Wednesday. In February the company said it would apply for all six Unstoppable Originals — .ZIL, .Crypto, .Wallet, .NFT, .Bitcoin and .DAO. "The cost of taking web3 domains through icann in both compliance and application and bidding is higher than what we believe we'd recover in sales," Gould wrote. ICANN's window closed Aug. 12 with more than 1,600 primary applications. Gould said customers were told by email and published no list of affected extensions and no refund terms. Holders are contesting the scope, several saying they held names for years on the strength of the ICANN promise. Unstoppable stays in the business as a service provider; Gould said on Aug. 18 he was working with Telegram on its .gram string. ENS tokenholders approved a mandate to pursue .ens at ICANN on Aug. 11.

Why this matters: The company sold .crypto and .wallet on the promise they would one day resolve in ordinary browsers. That promise is now a refund.

TRADFI

39 State Banking Groups Form BankChain Alliance

Thirty-nine US state bankers associations formed BankChain Alliance, an industry-owned effort to build a shared network for tokenized deposits, stablecoins and automated settlement, targeting a 2027 launch. It has not selected a technology partner. The member associations represent 3,283 banks with $21.8 trillion in assets on March 31 FDIC call-report data, though the alliance's own website cautions that the associations are the participants and their member banks have not individually joined. Kathy Kraninger of the Florida Bankers Association chairs the board. Public materials name no committed capital, no member contributions and no pricing; the group has completed the first phase of its RFP and wants an ownership stake in whichever provider it picks. BankChain enters a field that already holds The Clearing House's tokenized-deposit project, unveiled in June and owned by 25 of the largest US institutions, whose existing networks clear more than $2 trillion a day.

Why this matters: Association-level sponsorship is not a bank commitment. BankChain has to convert 3,283 member banks into signatures and pick a vendor before 2027 means anything.

TRADFI

Revolut Starts EURR Rollout With Bridge as Issuer

Revolut began rolling out EURR, its first euro-backed stablecoin, to selected customers in Denmark, Poland and Portugal, with Bridge Building S.A. as legal issuer and redemption counterparty. Revolut supplies the brand and the customer channel; Bridge, which Revolut describes as a Stripe company, carries issuance and redemption. EURR is an e-money token under MiCA, and Luxembourg's CSSF lists Bridge as an active electronic money institution authorized on June 29. Bridge reported 374 EURR in circulation and €374 in reserves as of Aug. 25, all held as cash deposits at credit institutions. Circle reported €394.5 million of EURC outstanding a day earlier. Bridge identifies Ethereum and Polygon as EURR chains, against seven for EURC. Revolut says more markets follow later this year and that stablecoins tied to other currencies are in development.

Why this matters: Revolut has more than 75 million customers and €374 of its euro stablecoin outstanding. The distribution is the asset here; the float is a rounding error.

DEFI

Aave Opens iOS Early Access

Aave began onboarding early users to its iOS app on Wednesday, moving its consumer savings product into early access while Android and web users stay on a waitlist that stood at about 50,000 in July. Founder Stani Kulechov said Ghost Passes let users invite friends to skip the queue. The app connects bank accounts and debit cards, and its stablecoin wallet supports deposits and withdrawals on Arbitrum; deposits are supplied to lending pools where borrower interest flows back to depositors. Aave describes the app as self-custodial — the embedded wallet generates and stores private keys locally, and Aave Labs never takes possession of assets or keys — while smart accounts hide wallet setup and gas from the user. Card fees, asset swaps and foreign exchange are slated to phase in during 2026. The product extends Aave Labs' retail push after its October 2025 acquisition of Stable Finance.

Why this matters: Aave is putting a fintech front end on its own lending pools, and access is still gated by a waitlist that stood at 50,000 in July.

Trending on The Defiant

Cosmos Labs Urges EVM Chains To Halt As Shared Bug Drains Three Networks · BLOCKCHAINS

Coinbase Launches Tokenized Stocks On Base · DEFI

Pendle Oracle Move Liquidates $36 Million · DEFI

LayerZero Unveils ATLAS Exchange Engine · BLOCKCHAINS

Term Finance Permanently Shuts Meta Vaults After Exploit · HACKS