Critical Bitcoin Lightning bugs exposed nodes to fund theft and restart failure

MonitoringCryptoSecurity incidentFirst tracked 2026-09-13Last changed 2026-09-13

Current outcome

LDK v0.2.6 fixes critical bugs that could divert node funds via malicious splice peers and prevent saved channel state from loading after a rejected bogus payment.

Progress timeline

1 material updates

#0109.13
Initial2026-09-13 15:55 · publication time
Critical Bitcoin Lightning bugs exposed nodes to fund theft and restart failure
LDK v0.2.6 fixes critical bugs that could divert node funds via malicious splice peers and prevent saved channel state from loading after a rejected bogus payment.
Source evidence: CryptoSlate

All events · Back to the feed