Disclosure: Critical vulnerabilities fixed in LND 0.19.0

[instagibbs]

@morehouse

the attacker could steal essentially the entire channel balance

If the channel allows the whole balance as concurrent HTLCs? (I’m not sure if LND caps this by default)