The vulnerability has been patched. LDK released a security update, and versions 0.2.7 and 0.1.13 fix a flaw that could let malicious nodes steal funds. The most serious issue involved reconnecting Lightning channels. Bitcoin $BTC is currently at 83427.07 USDT, up 0.44% over 24 hours, and the price has barely reacted. A malicious node could falsely claim it hadn’t received a previously confirmed channel update. Vulnerable software might fail to record the related transaction correctly and sign a conflicting commitment transaction. Even after forwarding the payment, the attacker could still reclaim the bitcoin. The disclosure says that, based on the information reviewed so far, no losses related to these specific vulnerabilities have been confirmed. If I were running a node, I’d check the version first and wouldn’t keep an old build running.
#安全事件 #闪电网络