CVE-2023-40231Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard

0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-03-28); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Full discourse2 posts

Greg Chew 🇮🇪🏴󠁧󠁢󠁥󠁮󠁧󠁿🇨🇭@GregChew1427d
Disclosure
@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉
Post summary
The tweet announces a recent disclosure of four CVEs (40231‑40234) linked to replacement cycling attacks in Bitcoin and Lightning, yet offers no Proof‑of‑Concept, exploitation details, or mitigation information.
0002046
2.2K followersView on X
Greg Chew 🇮🇪🏴󠁧󠁢󠁥󠁮󠁧󠁿🇨🇭🇬🇧@GregChew14194d
Disclosure
In October 2023, Antoine Riard - one of Lightning’s own core developers - disclosed a replacement cycling attack allowing theft of funds from routing hops. CVE-2023-40231. He stepped back from Lightning development. His own assessment: the only complete fix requires base-layer protocol changes. Bitcoin’s base layer does not change. The vulnerability remains open. The man who built Lightning told you it was broken and walked away. Lightning’s advocates stopped talking about it. Yet you and others like you continue to promote it. Talk about ‘fake news’ and cult speak! Why? Don’t you care at all about what Bitcoin was about? FREEDOM!!! The restitution of your humanity, your dignity, your sovereignty.
Post summary
The tweet announces CVE-2023-40231, a Lightning protocol vulnerability called a replacement cycling attack that allows fund theft, noting it remains unfixed and no PoC or active exploitation is reported.
1000095
1.3K followersView on X

Explore more

Back to dashboard