Security vulnerability that could lead to fund theft fixed, LDK involves Lightning channel reconnection

Odaily News: According to Bitcoin News monitoring, the Lightning Development Kit (LDK) has released a security update fixing vulnerabilities that could allow malicious nodes to steal funds. The most severe vulnerability involves Lightning channel reconnection. According to Bitcoin Optech, malicious nodes could falsely claim they did not receive previously confirmed channel updates. The vulnerable LDK software could then sign conflicting commitment transactions without properly recording the relevant transactions, allowing attackers to reclaim Bitcoin after forwarding payments are completed. LDK versions 0.2.7 and 0.1.13 have fixed this vulnerability. As of the reviewed disclosure information, no confirmed losses caused by these specific vulnerabilities have been found.