Developers: Lightning Network vulnerability allows hackers to remotely steal funds through LND nodes

ChainCatcher news, according to Protos, developer "Calle" warned of vulnerabilities in the Lightning Network, indicating that nodes running versions lower than LND 0.18.5 or LITD 0.14.1 have security risks. This vulnerability allows hackers to remotely manipulate the payment status of Lightning invoices, thereby stealing funds.

Pavol Rusnak, co-founder of Satoshi Labs, also issued a similar warning, urging Lightning Network users to update their node software as soon as possible. The vulnerabilities have been fixed in LND 0.18.5 and LITD 0.14.1, but since LND 0.18.5 was only released last week, many nodes have yet to update and remain at risk.