Rust-Lightning v0.2.5, released on August 5, 2026, addresses critical security vulnerabilities and bug fixes in the Lightning Development Kit (LDK). This release resolves an on-chain funds-theft vulnerability affecting nodes forwarding HTLCs from untrusted channels and several denial of service vulnerabilities. Notable fixes include preventing confusion between HTLCs with identical payment hashes, avoiding panics from invalid onion message reply paths, and enforcing peer limits for unfunded channels. Additionally, improvements in handling oversized messages and filtering control characters enhance robustness. Thanks to Project Loupe and Kyle W. Santiago for their contributions to identifying these issues.