The LDK reconnect flaw could let a malicious Lightning peer steal forwarded Bitcoin. Patched releases close the path; developers must deploy the fixes.
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.
A flaw in LDK patchless versions could allow a couple of channels to deny, after reconnecting, having received an update and causing losses in forward payments. Version 0.2.7 also fixes a different problem related to LSPS2 payments. *** LDK published versions 0.2.7 and 0.1.13 to correct the reconnect vulnerability in their respective branches. The flaw could lead to signing a conflicting compromise transaction and leaving the forward node withou…