The Lightning Network is vulnerable to a "Flood & Loot" attack that could drain wallets of their Bitcoin, say researchers.