Lightning Apps Using Unpatched LDK Risk Bitcoin Theft From Reconnect Vulnerability
Key Highlights: Lightning Development Kit (LDK) has addressed critical vulnerabilities in its software, resolving a reconnect bug that exposed forwarding nodes to fund losses and fixing a payment discrepancy issue affecting LSPS2 just-in-time channels. Pull Request 5057 rectifies a channel monitor tracking failure during reconnects by permitting retransmissions strictly while peer acknowledgments are pending and ...