Lightning tightens invoice rules after reported attack made Bitcoin withdrawals look unpaid
· lightning · Sentiment: bullish
Lightning Labs has updated its invoice validation rules in LND following reports of an attack where malicious actors could make successful Bitcoin withdrawals appear unpaid or pending to merchants and exchanges. The vulnerability allowed crafted invoices to manipulate payment status visibility without affecting the actual Bitcoin transfer. The tightened rules aim to prevent such discrepancies and restore confidence in Lightning Network invoice reliability for withdrawals and payments. This development highlights ongoing security refinements needed for Lightning's adoption in high-value Bitcoin use cases.