pull down to refresh

Is there a known solution that removes this attack vector then?

IIRC BOLT12 gets rid of this since invoices are directly requested.

PTLCs also fix this.

reply