🚨 LND exploit in the wild 🚨 \ stacker news ~lightning

pull down to refresh

469 sats \ 12 comments \ @supratic 19 Feb lightning

If you are running LND older than 0.18.5 and/or LITD older than 0.14. upgrade immediately. Apparently exploits have been used to completely drain Lightning affected nodes.

Lightning Labs has not issued an official warning or clarification yet. We're waiting for one.

⚠️ Update Lightning Node to the latest version available to ensure compatibility when running the Lightning Node app (LND) connected to your Bitcoin Node app.

0.18.5 release updates the underlying Lightning Network Daemon (LND) to v0.18.5-beta, which includes the features required for building custom channels, alongside important bug fixes, stability enhancements, and performance improvements. Notable highlights include an optimization for payment requests (invoices) that removes unnecessary size expansion, critical bug fixes for AMP invoices and erroneous invoice state transitions, and improvements for fee bump transactions.

Full release notes can be found at https://github.com/lightningnetwork/lnd/releases

Bitcoin Core has also been updated to v28.1. See the full Bitcoin Core release notes at https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-28.1.md

source: nostr

view all related items

42 sats \ 2 replies \ @k00b 19 Feb

False alarm:

Based on the information we've been provided with so far, it appears that this was an instance of the user's machine being compromised, leading to lncli commands directly executed on the root user (all channels abandoned)

This does not appear to be an lnd specific issue

0 sats \ 0 replies \ @supratic OP 20 Feb

great to hear and thanks for the update

0 sats \ 0 replies \ @nitter 19 Feb bot

https://xcancel.com/roasbeef/status/1892278724986339547

1 sat \ 5 replies \ @DarthCoin 19 Feb

LL pushing hard for crap Tether on LN attract "thieves".

This affect only users that use lightning Terminal 14.1-alpha

This version of Lightning Terminal (LiT) ships the first update to the non-experimental version of Taproot Asset Channels

1 sat \ 4 replies \ @supratic OP 19 Feb

Taproot Asset Channels

Are these what others call "stable channels" or is totally different thing?

21 sats \ 3 replies \ @DarthCoin 19 Feb

No stablechannels are totaly different thing and is a moronic shit. TapAss chans are coming only with LiT 14 and are for pushing Tether on LN and other assets. But if you do not use LiT, just LND you are not affected.

Stable channels is a stupid way to fool gulible users that their channels will always have the same "value" in fiat, by hedging the sats against fiat price. The operator is literally gambling. Stupid gambling.

0 sats \ 2 replies \ @supratic OP 19 Feb

For a second I thought stable channels where using tether for gambling. Thanks for explaining

0 sats \ 1 reply \ @DarthCoin 19 Feb

Very good that you post the PSA. This morning I was about to do the same but saw you already did it. Well done.

0 sats \ 0 replies \ @supratic OP 19 Feb

stronger together 💪

reply on another page

0 sats \ 0 replies \ @DarthCoin 19 Feb

Burak right now...