Lightning tightens invoice rules after reported attack made Bitcoin withdrawals look unpaid

BOLT11 now requires one payment hash and one payment secret, while operators must check how their software records withdrawals.