Ifnyou are running a fedimint lightning gateway you should make sure you are up to date!
We found a bug in our legacy Lightning integration and are contacting public gateway operators.
User funds, federations, and ecash are not affected.
Gateways using LDK Node or our newer LNv2 protocol are also not affected. We still recommend staying up to date.
If we haven’t reached out, please update to v0.12.1 ASAP, or shut down your Lightning gateway in the meantime if that’s not feasible.
Users of federations without an active Lightning gateway will still be able to make ecash and on-chain transactions.
The bug results from an interaction between misunderstood HTLC interception behavior and our LN-ecash swap validation logic that evaded previous scans.
We continue to do our own AI-accelerated security research and appreciate external research findings at security@fedimint.org
How do you practically use Fedi if there is no Lightning gateway?
Wasn't their model that the mint was a sort of community bank for a rural village in Africa or something? So maybe in that model, you are sensing ecash within the mint for many of your day to day purchases. Unfortunately, that's a pipe dream.
More issues!
https://twiiit.com/fedimint/status/2098803741298200618