Unpatched Lightning apps face a Bitcoin theft risk
Unpatched Lightning apps face a Bitcoin theft riskOctober 1 LDK fixes require application updates; a separate liquidity-service flaw also needs attention.
Bitcoin Lightning applications using unpatched LDK can lose funds when a channel peer lies after reconnecting. The fixes are available, but developers have to incorporate them into deployed apps. A library release alone does not protect software still running vulnerable code. Elsewhere, tokenized shares can preserve shareholder rights while trading outside familiar venue protections, and Unichain is preparing to hand production operations to Optimism. Broker duties and emergency withdrawal routes depend on the specific venue, customer relationship and chain contracts. Top News
Lightning apps using unpatched LDK risk Bitcoin theft from a reconnect lieThe October 1-dated LDK releases 0.2.7 and 0.1.13 fix a reconnect flaw that could make an app sign conflicting channel states, allowing a malicious peer to reclaim an incoming payment after the app paid the next recipient. Version 0.2.7 also fixes an LSPS2 liquidity-service flaw that could forward more Bitcoin than it received. Developers must deploy the patched library and account for previously queued LSPS2 payment contracts with unvalidated amounts. Tokenized stocks can carry the same rights without the same trading protectionsThe SEC’s September exemption preserves eligible shares’ rights while relaxing venue-level trading protections. Douro Labs now seeks clearer price-feed standards; FINRA-member brokers still owe applicable best-execution duties when handling customer transactions. Optimism’s Unichain deal will put more chains under one operatorUnichain plans to move production operations to Optimism on October 29, following an October 13 testnet migration. Contract-upgrade governance remains unchanged, and users’ withdrawal fallbacks differ across Optimism-managed chains. From Our Sponsor
WINNLY Makes Mobile Gaming Rewarding — Play, Compete, EarnWINNLY lets players compete in 100% skill-based mini-games, climb leaderboards, and earn coins redeemable for gift cards from Amazon, PlayStation, Netflix, and more. What We’re Watching
Elsewhere in CryptoXRP’s next Wall Street expansion comes with an unexpected complication from RippleRipple ties keep Evernorth’s XRP holdings under impairment accounting, so price recoveries cannot reverse earlier write-downs. Starknet considers leaving Ethereum for a quantum-resistant Layer 1An independent chain remains under consideration; replacing Ethereum’s settlement and security requires a separate design. Bitcoin hedge funds face a liquidation trap when their collateral is split across marketsCoordinated collateral can support larger hedges, but exchange margin calls and lender repayment obligations still apply. Some Aave loans sit near liquidation with collateral that can take hours to cash outOctober 9 risk reviews proposed higher caps despite concentrated borrowing and collateral exits that depend on buyers or redemption. Some Kraken futures limit orders can still fill after a successful cancelCovered held-limit cancellations convert placements to immediate-or-cancel; automated traders must reconcile subsequent execution reports. The Catalyst by CryptoSlateWhat’s moving crypto. Why it matters. What to watch next. CryptoSlate has covered crypto, markets, and decentralized technology since 2017. Read CryptoSlate · Tips, questions & corrections · Sponsor The Catalyst For information, not investment advice.
|
Komentar
Posting Komentar