From TokenPost · · 40s
LDK Fixes Bitcoin Channel Vulnerability
Lightning Development Kit patches security flaw that could have stolen Bitcoin from user channels.
In brief
Lightning Development Kit patches security flaw that could have stolen Bitcoin from user channels. Lightning Development Kit fixed a vulnerability that allowed malicious nodes to steal Bitcoin during channel reconnections. Originally reported by TokenPost.
Lightning Development Kit
The Lightning Development Kit fixed a vulnerability that could have allowed malicious nodes to steal Bitcoin during Lightning channel reconnections.
Vulnerability Details
Vulnerable LDK software could sign a conflicting commitment transaction without recording the earlier transaction.
Fixed Versions
LDK versions 0.2.7 and 0.1.13 include fixes for the vulnerability with no confirmed losses reported.
What it means
Lightning Development Kit fixed a vulnerability that allowed malicious nodes to steal Bitcoin during channel reconnections.
