Bitcoin Lightning Library LDK Merges Privacy Patch to Stop Private Channel Probing

Bitcoin Lightning Development Kit (LDK) has merged a privacy patch that prevents attackers from linking unannounced private channels to their on-chain Bitcoin funding outputs. The vulnerability allowed an attacker connected to both ends of a private channel to probe guessed real short-channel IDs (SCIDs) using onion messages, effectively deanonymizing participants. Following an initial LDK version 0.2.7 release on October 1, the code fix merged on October 25 at 20:25 UTC and was highlighted by Bitcoin Optech on October 30. The update rejects real SCIDs during onion-message forwarding while keeping authorized outbound aliases operational.