Cryptocurrency

Lightning Network releases emergency update after critical bug on LND nodes

5 2 minutes read
Lightning Network releases emergency update after critical bug on LND nodes
[ad_1]

An emergency update was released to all of Lightning Network’s LND node operators on Nov. 1, after a critical bug caused LND nodes to fall out of sync chain. This was the second critical bug experienced by the network in less than a month. 

According to Lightning Labs, developer of the Bitcoin Lightning Network, some LND nodes stopped syncing due to an issue with the btcd wire parsing library. The hot fix (v.015.4) was released nearly three hours after the break. The release stated:

“This is an emergency hot fix release to fix a bug that can cause lnd nodes to be unable to parse certain transactions that have a very large number of witness inputs.”

As per the issue on GitHub, non-updated nodes will be vulnerable to malicious channel closings once channel timelocks expire in two weeks. The bug impacted only LND nodes, making the current chain state outdated, although payments transactions were still available. Some versions of electrs were also impacted, according to another issue on GitHub.

The bug was triggered by a developer dubbed Burak on Twitter, with a message in the transaction saying: “you’ll run cln. and you’ll be happy.”

Burak was also responsible for triggering a similar bug on Oct. 9, when they created a 998-of-999 multisig transaction that was rejected by btcd and LND nodes, leading to the rejection of the whole block and all blocks following the transaction. On the same day, Lightning Labs released a patch to fix the issue.

Related: What is the Lightning Network in Bitcoin, and how does it work?

On Twitter, users suggested that it was time for an LND bug bounty program:

Hacker Anthony Towns also claimed to have disclosed the vulnerability to LND developers two weeks ago, noting, “The btcd repo doesn’t seem to have a reporting policy for security bugs, so not sure if anyone else working on btcd found out about it.”

The Lightning Network is a second layer added to Bitcoin’s (BTC) blockchain that allows off-chain transactions, i.e. transactions between parties not on the blockchain network.