Observed arrival · 2026-09-13
Matt Morehouse's Lightning Vulnerability Files
A personal research site documenting concrete attacks and disclosures affecting Bitcoin Lightning software.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
Field notes
The central disclosure examines how LND batches HTLC-Timeout inputs, reacts to double spends, and manages fee bumping during force closes. Its example routes roughly 40 HTLCs through a victim with an 80-block deadline, then uses repeated replacements to consume the available confirmation window. The homepage also links related material on an Infinite Inbox DoS and an excessive failback exploit, with LND 0.19.0 repeatedly identified as the relevant fixed release.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
◉HumanPersonal, local, civic, or handmade
One card from the complete issue