Historical LND vulnerability disclosed
A previously fixed vulnerability affecting older Lightning Network Daemon versions is publicly disclosed.
On June 21, 2024, Historical LND vulnerability disclosed. A previously fixed vulnerability affecting older Lightning Network Daemon versions is publicly disclosed.
Old LND versions could allocate excessive memory in response to specially constructed onion packets, potentially crashing nodes. Because Lightning nodes may need to broadcast time-sensitive transactions, availability failures can create financial risk.
The event preserves a concrete part of Bitcoin's security history and the operational assumptions users, wallet developers, exchanges or node operators had to manage at the time.