Nostr Web Client

🚨 LND exploit in the wild 🚨

If you are running LND older than 0.18.5 and/or LITD older than 0.14.1, upgrade immediately. Apparently, affected Lightning nodes can be completely drained by attackers.

Lightning Labs has not issued a clarification yet.

Reply to this note

Please Login to reply.

Discussion

🟠 isolabellart 10mo ago

LDK it's ok?

calle 10mo ago

LDK is a library, so it should be ok.

Schroedinger 10mo ago

I guess they were to busy bringing shitcoins to lightning (taproot assets) instead of improving security or searching for potential bugs

nostr:nevent1qqswuulknfqrymjat768sgttmf6auxum8cyc9ehsse30xeep6hxxuxqppemhxue69uhkummn9ekx7mp0qgs9pk20ctv9srrg9vr354p03v0rrgsqkpggh2u45va77zz4mu5p6ccrqsqqqqqpfcx46j

Oren ☂️ 10mo ago

I tested that my upgraded LND works by zapping this post 😆

calle 10mo ago

😎👍

Oren ☂️ 10mo ago

Any estimation for how much money was stolen?

calle 10mo ago

Haven't heard anything

Eluc 10mo ago

Thanks, I did update my Umbrel.

Felipe Martins 10mo ago

LND version 0.18.5 is currently not available in the Umbrel App Store, do you use a different store or did you upgrade using the terminal?

Eluc 10mo ago

On mine it is, version 0.18.5-beta, same as on the GitHub, on the app store, all standard repo as far as I know.

Check with Umbrel support if you don't see the update.

Felipe Martins 10mo ago

I was able to get the update notifications once I rebooted Umbrel, thank you for replying so quickly!

Devin 10mo ago

nostr:npub126ntw5mnermmj0znhjhgdk8lh2af72sm8qfzq48umdlnhaj9kuns3le9ll

Jer 10mo ago

I think the app devs are responsible for their own updates on Start9 aren’t they?

Devin 10mo ago

It's in the Start9 repository, so I think they handle it updates. I believe they generally delay them on purpose in case there are unidentified issues with fresh updates.

Devin 10mo ago

Registry, not repository. I'm dumb sometimes. But the update is out now.

Digital Panhandler 10mo ago

Update complete. Thanks.

Filou 10mo ago

The bug was in litd, you will not be affected if you are not running litd. And afaik there are no confirmed reports of the bug actually being exploited successfully.

This is semi-fud circulating without being verified!

TLDR upgrade Lightning Terminal to 0.14.1 if you run it.

Filou 10mo ago

Update: https://x.com/roasbeef/status/1892273538104430952

Erik 10mo ago

Bitcoin ossification bad

Lostdog 10mo ago

Ffs 0.18.5 is still in beta 😖

We're still in the reckless phase apparently 🙁

Filou 10mo ago

Clarification from Lightning Labs on X:

https://x.com/roasbeef/status/1892273538104430952