Eight web-security certificates had keys weak enough to guess. Lightning Labs wants 

 users on binaries built with a patched Go.

Lightning Labs’ chief technology officer, Olaoluwa Osuntokun, told users

 of lnd, btcd, tapd and litd early on Thursday to update to new release binaries or rebuild their own with Go 1.27.3

. The trigger is a security failure far from bitcoin: a certificate authority

lightning

## Eight web-security certificates had keys weak enough to guess. Lightning Labs wants `lnd` users on binaries built with a patched Go.

![](https://m.stacker.news/162741)

Lightning Labs’ chief technology officer, Olaoluwa Osuntokun, told users[^1] of lnd, btcd, tapd and litd early on Thursday to update to new release binaries or rebuild their own with Go 1.27.3[^2]. The trigger is a security failure far from bitcoin: a certificate authority[^3] whose keys could be guessed.

[^1]: https://x.com/roasbeef/status/2113102398327529628
[^2]: https://threatlandscape.io/blog/go-hard-blocks-emudhra-intermediate-ca-keys-cve-2026-111943
[^3]: https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/

Eight web-security certificates had keys weak enough to guess. Lightning Labs wants lnd users on binaries built with a patched Go.

Eight web-security certificates had keys weak enough to guess. Lightning Labs wants `lnd` users on binaries built with a patched Go.