🚨 LND versions 0.17.5 and below have a critical bug allowing fund theft if an attacker forces a node restart. Update to LND 0.18.0 or later to secure funds.
Research and writeup by Matt Morehouse
https://morehouse.github.io/lightning/lnd-excessive-failback-exploit/
ARVIN /
npub18p…70x7y
2025-03-04 16:21:06
Author Public Key
npub18p66zmyh3q2rgejqencuz6dduuggdn7arg4eqn6x44jerxyy2mys670x7yPublished at
2025-03-04 16:21:06Event JSON
{
"id": "067704907f7c68c1816294832f521849a5914240fa5ec2d4b2df24b43fdfb843",
"pubkey": "3875a16c978814346640ccf1c169ade71086cfdd1a2b904f46ad6591988456c9",
"created_at": 1741105266,
"kind": 1,
"tags": [
[
"r",
"wss://aegis.utxo.one/"
],
[
"r",
"wss://eden.nostr.land/"
],
[
"r",
"wss://nos.lol/"
],
[
"r",
"wss://offchain.pub/"
],
[
"r",
"wss://relay.damus.io/"
],
[
"r",
"wss://relay.nostr.band/"
],
[
"r",
"wss://relay.snort.social/"
],
[
"r",
"wss://welcome.nostr.wine/"
]
],
"content": "🚨 LND versions 0.17.5 and below have a critical bug allowing fund theft if an attacker forces a node restart. Update to LND 0.18.0 or later to secure funds.\n\nResearch and writeup by Matt Morehouse\n\nhttps://morehouse.github.io/lightning/lnd-excessive-failback-exploit/",
"sig": "c6ff154503135d45d8d7e3df76e59288e43769c2a749b9eed7bfa9f0e47da7da6fbb5bf2058ffff3bfc520f413d5f837cea998f085f2c976e7b10f53152d8dcc"
}