Developer: Lightning Network flaw allows hackers to remotely steal funds through LND nodes
Developer "Calle" has warned of a vulnerability in the Lightning Network that allows hackers to remotely manipulate the payment status of Lightning invoices and steal funds by using nodes that are lower than the LND 0.18.5 or LITD 0.14.1.
Satoshi Labs co-founder Pavol Rusnak also issued a similar warning, reminding Lightning Network users to update the node software as soon as possible. LND 0.18.5 and LITD 0.14.1 versions have fixed the vulnerability, but since the LND 0.18.5 was released only last week, many nodes are still not updated and there is still a risk.