diff --git a/CHANGELOG.md b/CHANGELOG.md
index 74aee4fc79..13e3d55cef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,7 +1,8 @@
-# 0.7.0-rc.71 (Synonym Fork)
+# 0.7.0-rc.72 (Synonym Fork)
 
 ## Bug Fixes
 
+- Bump `lightning`, `lightning-liquidity` and `lightning-transaction-sync` to 0.2.7, which fixes a counterparty-exploitable funds-theft vulnerability (lightningdevkit/rust-lightning#5057) and an Electrum sync denial of service (lightningdevkit/rust-lightning#4867).
 - Prevent native SIGABRT crashes when stopping and rebuilding the node by making runtime teardown deterministic.
 - Keep exported payment and liquidity handles from calling into a shutting-down runtime, refuse restart while detached work is still live, and stop Electrum confirm gating from blocking or panicking shutdown.
 - Add keep consumer rules for JNA types UniFFI needs under R8.
diff --git a/Cargo.lock b/Cargo.lock
index 2fb83850cd..48d815616c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1901,7 +1901,7 @@ dependencies = [
 
 [[package]]
 name = "ldk-node"
-version = "0.7.0-rc.71"
+version = "0.7.0-rc.72"
 dependencies = [
  "base64 0.22.1",
  "bdk-wallet-aggregate",
@@ -1921,16 +1921,16 @@ dependencies = [
  "esplora-client 0.12.3",
  "ldk-node 0.6.2",
  "libc",
- "lightning 0.2.5",
+ "lightning 0.2.7",
  "lightning-background-processor 0.2.3",
  "lightning-block-sync 0.2.0",
  "lightning-invoice 0.34.1",
- "lightning-liquidity 0.2.3",
+ "lightning-liquidity 0.2.7",
  "lightning-macros 0.2.1",
  "lightning-net-tokio 0.2.0",
  "lightning-persister 0.2.3",
  "lightning-rapid-gossip-sync 0.2.3",
- "lightning-transaction-sync 0.2.1",
+ "lightning-transaction-sync 0.2.7",
  "lightning-types 0.3.5",
  "lnd_grpc_rust",
  "log",
@@ -1992,9 +1992,9 @@ dependencies = [
 
 [[package]]
 name = "lightning"
-version = "0.2.5"
+version = "0.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ab16d2a714c0b26d7230bd388ac383a30fce231c8927c62752afc0471a36dc6"
+checksum = "982ffb82e8362ea95e03a5de8a6004bceb7a577fc1f07d5b02cfc3fc7c930a90"
 dependencies = [
  "bech32",
  "bitcoin",
@@ -2030,8 +2030,8 @@ dependencies = [
  "bitcoin",
  "bitcoin-io",
  "bitcoin_hashes",
- "lightning 0.2.5",
- "lightning-liquidity 0.2.3",
+ "lightning 0.2.7",
+ "lightning-liquidity 0.2.7",
  "lightning-rapid-gossip-sync 0.2.3",
  "possiblyrandom",
 ]
@@ -2057,7 +2057,7 @@ checksum = "ee5069846b07a62aaecdaf25233e067bc69f245b7c8fd00cc9c217053221f875"
 dependencies = [
  "bitcoin",
  "chunked_transfer",
- "lightning 0.2.5",
+ "lightning 0.2.7",
  "serde_json",
  "tokio",
 ]
@@ -2103,13 +2103,13 @@ dependencies = [
 
 [[package]]
 name = "lightning-liquidity"
-version = "0.2.3"
+version = "0.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42278510c9f71f32c6e292085747d1f9649f8a88a8d9dc32c0440da3c1356345"
+checksum = "75947be75873138097adb72c080a853ad576a295ac63f73d8fbeb07543c136b1"
 dependencies = [
  "bitcoin",
  "chrono",
- "lightning 0.2.5",
+ "lightning 0.2.7",
  "lightning-invoice 0.34.1",
  "lightning-macros 0.2.1",
  "lightning-types 0.3.5",
@@ -2157,7 +2157,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8055737e3d2d06240a3fdf10e26b2716110fcea90011a0839e8e82fc6e58ff5e"
 dependencies = [
  "bitcoin",
- "lightning 0.2.5",
+ "lightning 0.2.7",
  "tokio",
 ]
 
@@ -2179,7 +2179,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4c374a770c3654b00fe3b57e30e79416fb30d773b4fefeea231171d3a82dfa1b"
 dependencies = [
  "bitcoin",
- "lightning 0.2.5",
+ "lightning 0.2.7",
  "tokio",
  "windows-sys 0.48.0",
 ]
@@ -2205,7 +2205,7 @@ dependencies = [
  "bitcoin",
  "bitcoin-io",
  "bitcoin_hashes",
- "lightning 0.2.5",
+ "lightning 0.2.7",
 ]
 
 [[package]]
@@ -2224,15 +2224,15 @@ dependencies = [
 
 [[package]]
 name = "lightning-transaction-sync"
-version = "0.2.1"
+version = "0.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7260095a79a44b09ebd97e77855ec8b7996ab939223369f66244974a374bd2c"
+checksum = "dbcb06ccc3abb415465c396448562a811e4405ea3da893c52ccda31d3ed853ad"
 dependencies = [
  "bitcoin",
  "electrum-client 0.24.1",
  "esplora-client 0.12.3",
  "futures",
- "lightning 0.2.5",
+ "lightning 0.2.7",
  "lightning-macros 0.2.1",
 ]
 
diff --git a/Cargo.toml b/Cargo.toml
index 8f9adea3ae..d7e1110d7f 100755
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -4,7 +4,7 @@ exclude = ["bindings/uniffi-bindgen"]
 
 [package]
 name = "ldk-node"
-version = "0.7.0-rc.71"
+version = "0.7.0-rc.72"
 authors = ["Elias Rohrer <dev@tnull.de>"]
 homepage = "https://lightningdevkit.org/"
 license = "MIT OR Apache-2.0"
@@ -33,7 +33,7 @@ panic = 'abort'     # Abort on panic
 default = []
 
 [dependencies]
-lightning = { version = "0.2.0", features = ["std"] }
+lightning = { version = "0.2.7", features = ["std"] }
 lightning-types = { version = "0.3.0" }
 lightning-invoice = { version = "0.34.0", features = ["std"] }
 lightning-net-tokio = { version = "0.2.0" }
@@ -41,8 +41,8 @@ lightning-persister = { version = "0.2.0", features = ["tokio"] }
 lightning-background-processor = { version = "0.2.0" }
 lightning-rapid-gossip-sync = { version = "0.2.0" }
 lightning-block-sync = { version = "0.2.0", features = ["rest-client", "rpc-client", "tokio"] }
-lightning-transaction-sync = { version = "0.2.0", features = ["esplora-async-https", "time", "electrum-rustls-ring"] }
-lightning-liquidity = { version = "0.2.0", features = ["std"] }
+lightning-transaction-sync = { version = "0.2.7", features = ["esplora-async-https", "time", "electrum-rustls-ring"] }
+lightning-liquidity = { version = "0.2.7", features = ["std"] }
 lightning-macros = { version = "0.2.0" }
 
 bdk_chain = { version = "0.23.0", default-features = false, features = ["std"] }
diff --git a/Package.swift b/Package.swift
index 89a3bc9f55..7c10229cee 100644
--- a/Package.swift
+++ b/Package.swift
@@ -3,8 +3,8 @@
 
 import PackageDescription
 
-let tag = "v0.7.0-rc.71"
-let checksum = "56bdacc3388c997a55af9da94758e1332ad4296fcf5369c2dc9184ec9d355258"
+let tag = "v0.7.0-rc.72"
+let checksum = "c9e939298419e21198a30fba3ff0d2dff73854a2cf44808d33c1090d29d54a1c"
 let url = "https://github.com/synonymdev/ldk-node/releases/download/\(tag)/LDKNodeFFI.xcframework.zip"
 
 let package = Package(
diff --git a/bindings/kotlin/ldk-node-android/gradle.properties b/bindings/kotlin/ldk-node-android/gradle.properties
index 9042acb948..d0992a54ab 100644
--- a/bindings/kotlin/ldk-node-android/gradle.properties
+++ b/bindings/kotlin/ldk-node-android/gradle.properties
@@ -3,4 +3,4 @@ android.useAndroidX=true
 android.enableJetifier=true
 kotlin.code.style=official
 group=com.synonym
-version=0.7.0-rc.71
+version=0.7.0-rc.72
diff --git a/bindings/kotlin/ldk-node-jvm/gradle.properties b/bindings/kotlin/ldk-node-jvm/gradle.properties
index 2783d3fc69..ed80433ce3 100644
--- a/bindings/kotlin/ldk-node-jvm/gradle.properties
+++ b/bindings/kotlin/ldk-node-jvm/gradle.properties
@@ -1,4 +1,4 @@
 org.gradle.jvmargs=-Xmx1536m
 kotlin.code.style=official
 group=com.synonym
-version=0.7.0-rc.71
+version=0.7.0-rc.72
diff --git a/bindings/python/pyproject.toml b/bindings/python/pyproject.toml
index 131a4b7841..1af046abbf 100644
--- a/bindings/python/pyproject.toml
+++ b/bindings/python/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "ldk_node"
-version = "0.7.0-rc.71"
+version = "0.7.0-rc.72"
 authors = [
   { name="Elias Rohrer", email="dev@tnull.de" },
 ]