The Lightning Development Kit (LDK) includes a privacy fix preventing a documented probe from linking an unannounced channel to the Bitcoin output funding it. Before the fix, an attacker could guess a channel’s real identifier from the location of its funding output, then confirm the link by connecting to both endpoints and constructing an onion-message path through them. The leak therefore associated a Bitcoin funding output with the Lightning nodes using it. LDK now refuses to resolve the real identifier of an unannounced channel during message forwarding while preserving the use of permitted aliases. Whether this protection is included in the wallet versions actually distributed remains unconfirmed.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
