星球日报|Oct 12, 2026 11:31
[Security Vulnerability That Could Lead to Fund Theft Fixed, LDK Involves Lightning Channel Reconnection]
Odaily Planet Daily reports, according to Bitcoin News monitoring, the Lightning Development Kit (LDK) has released a security update to fix a vulnerability that could allow malicious nodes to steal funds. The most severe vulnerability involves Lightning channel reconnection. According to Bitcoin Optech, malicious nodes could falsely claim they did not receive previously confirmed channel updates. LDK software with the vulnerability might then sign conflicting commitment transactions without properly recording the relevant transactions, enabling attackers to regain Bitcoin after forwarding payments. Versions LDK 0.2.7 and 0.1.13 have fixed this vulnerability. Based on reviewed disclosure information, no confirmed losses caused by these specific vulnerabilities have been identified so far.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink