# Core Lightning patches a channel-draining flaw as OpenSSH fixes an Alpine Linux login bypass and Initia restarts after a $2.7 million mint exploit

Lightning node operators on older builds risk losing channel funds, Alpine servers that allow password logins could be entered without the correct password, and Initia resumed block production on November 2 without a rollback.

- Published: 2026-11-06T09:52:06.667Z
- Canonical: https://polylog.news/crypto/2026-11-06/core-lightning-patches-a-channel-draining-flaw-as-openssh-fi
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [CryptoSlate](https://cryptoslate.com/unpatched-bitcoin-lightning-nodes-face-channel-draining-bug/), [crypto.news](https://crypto.news/binance-cz-warns-critical-openssh-alpine-linux-flaw/), [Rekt News](https://www.rekt.news/)

Core Lightning. Maintainers of Core Lightning, a widely used Lightning Network node implementation, released version 26.06.10 with added channel checks and fixes for remote-command handling, CryptoSlate reported. They also told operators to…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-11-06/core-lightning-patches-a-channel-draining-flaw-as-openssh-fi (subscription information: https://polylog.news/pricing).