Great question. Also, what’s the actual exploit? There’s no mention of the exploit patch in the release notes of 0.18.5 either.
Discussion
Sorry. “A critical bug related to erroneous invoice state transitions.”
The only think I’ve heard on message boards is “you can't be affected by this bug unless you receive LN payments in a manner where doublechecking their settlement is impractical (ie if you run LN pos at bar etc)”
So from what i understand is that payments could be sent to a node, but never settle; i suppose.