Update
Lightning Network BOLT11 Update
BOLT11, the Lightning Network's invoice standard, now requires one payment hash and one payment secret, rejecting ambiguous fields. Developer Roasbeef reported an attack where differing parsers made completed withdrawals appear unpaid, creating an opening for further payouts. The change follows a proposal to tighten BOLT11 to reject ambiguous payment-hash and payment-secret fields.