Security· ★★★· bearish·

Unpatched Eclair Lightning nodes crash on every restart, researcher warns

  • —Reachable Eclair nodes on v0.14.0 and earlier are affected; fix shipped in v0.14.1 on July 29
  • —In testing, a node exhausted a 4 GB heap in 47 minutes 43 seconds with 217,623 database rows
  • —The attack requires no on-chain BTC spend, only compute and network traffic
  • —ACINQ recommends v0.14.3, released Sept. 14, for separate vulnerabilities
Why it matters: Eclair node operators should upgrade promptly: a restart does not clear the underlying load and the crash can repeat.
#BTC
Source: CryptoSlate
More on this
Security · Sep 21
Bitcoin Lightning flaw in Eclair could send a node's entire balance to miners
 Security · yesterday
Core Lightning warns attackers are targeting unpatched Bitcoin nodes
 Security · Sep 14
Bots attack exposed BTCPay Server Lightning nodes