On September 9, the Lightning Development Kit (LDK) released v0.2.6, addressing two vulnerabilities that could lead to fund theft or prevent nodes from restarting. Under the splice flaw, a malicious peer node could allocate excessive fees to its own output address; another flaw could prevent contracts sharing the same payment hash from loading saved states after rejecting a forged payment. The patch needs to be manually integrated by adopters, and there are currently no loss reports.