Bitcoin Lightning fix blocks a probe linking private channels to onchain funding
Summary
LDK fixed a privacy flaw in Lightning onion-message forwarding that could let an attacker connect an unannounced channel to its Bitcoin funding output. By probing both endpoints with a guessed short-channel ID, an attacker could confirm the link. LDK now rejects real IDs for unannounced channels while allowing valid aliases. Whether wallet users have received the fix depends on their providers and remains unverified.
