Ifnyou are running a fedimint lightning gateway you should make sure you are up to date!
We found a bug in our legacy Lightning integration and are contacting public gateway operators.
User funds, federations, and ecash are not affected.
Gateways using LDK Node or our newer LNv2 protocol are also not affected. We still recommend staying up to date.
If we haven’t reached out, please update to v0.12.1 ASAP, or shut down your Lightning gateway in the meantime if that’s not feasible.
Users of federations without an active Lightning gateway will still be able to make ecash and on-chain transactions.
The bug results from an interaction between misunderstood HTLC interception behavior and our LN-ecash swap validation logic that evaded previous scans.
We continue to do our own AI-accelerated security research and appreciate external research findings at security@fedimint.org
How do you practically use Fedi if there is no Lightning gateway?
Wasn't their model that the mint was a sort of community bank for a rural village in Africa or something? So maybe in that model, you are sensing ecash within the mint for many of your day to day purchases. Unfortunately, that's a pipe dream.
Its a great model because long before the rise of Narmer, the first King of Egypt back in 3100 BC, did it become clear that if anything is self sustainable and needs no inter-village commerce, it is rural villages in Africa 😂
More issues!
Everytime I log on I feel like I normie ignorance is bliss, how am I supposed to live knowing any moment one of the bitcoin apps I use could rek me
HTLC interception edge cases are brutal, good catch on the validation logic gap. Anyone running legacy gateways migrated to LNv2 yet?
https://twiiit.com/fedimint/status/2098803741298200618