Security· ★★★· neutral·

Lightning Labs discloses critical bug that marked canceled invoices as paid

  • —Affected: Lightning Terminal, taproot assets through v0.5.0, and lnd 0.18.4-beta to 0.18.5-beta
  • —Cause: mismatch between the invoice record and the payment outcome — HTLC canceled, invoice still settled
  • —tapd trigger fixed in v0.5.1 on Feb. 12, 2025; lnd accounting error fixed in v0.19.0-beta on May 22, 2025
  • —Sender funds were not at risk; workaround is --taproot-assets-mode=disable
Why it matters: The flaw could let merchants release goods against payments that never completed; operators should update to Terminal v0.15.0-alpha.
#BTC
Source: CryptoSlate
More on this
Markets · 14:46
Litecoin Jumps 16% to $72 on Grayscale ETF Hopes, LINK Hits 8-Month High
 Markets · 08:19
Bitcoin holds near $84,500, Ethereum steady at $2,690 as $341M is liquidated
 Markets · 07:49
Bitcoin Options Open Interest Rises 0.68% to $51.74B, Calls Dominate at 59.28%