Lightning Labs discloses critical bug marking canceled invoices paid, risking free product delivery

What happened

Lightning Labs disclosed a critical bug that marked canceled invoices as paid, which could mislead merchants and risk free product delivery. The flaw affected older software. Fixes for tapd and lnd shipped in 2025.

Confirmed

Global impact / market context

If merchants trust incorrect payment signals from older software, they might release goods without receiving money, causing revenue losses. Fixes already shipped reduce risk for updated systems, but unpatched merchants remain exposed.

Analyst inference

This disclosure affects Bitcoin's Lightning Network, which means a system for fast, low-cost BTC payments. Merchants using outdated tapd or lnd software could face losses, potentially slowing business adoption of Bitcoin payments.

Analyst inference

What to watch

1. Lightning Labs disclosed the bug and shipped fixes for tapd and lnd in 2025, so merchants should verify their software versions and apply available updates. Confirmed
2. Merchants should consider upgrading to patched tapd and lnd versions promptly, which means replacing older software to prevent canceled invoices from appearing paid. Proposed
3. If unpatched merchants keep accepting Bitcoin payments, they may deliver products without payment, which could reduce revenue and discourage other businesses from using Lightning. Analyst inference

Affected assets

• BTC — Bitcoin

Evidence

• cryptoslate.com