Security· ★★★· neutral·

Eclair merges fixes for Lightning flaws that could burn Bitcoin in fees

  • —PR #3388 caps the fee rate a peer can impose on an Eclair node during dual funding and splicing
  • —PR #3390 verifies the actual fee of bitcoind-built transactions in signer mode and rejects invalid change outputs
  • —Fixes merged into master on Oct. 2 and Oct. 5; September's v0.14.3 release does not include them
  • —Both changes were flagged in Bitcoin Optech's Oct. 9 newsletter
Why it matters: Node operators should confirm their build includes the October patches, since the flaws could burn a node's funds as miner fees.
#BTC
Source: CryptoSlate
More on this
Security · Sep 21
Bitcoin Lightning flaw in Eclair could send a node's entire balance to miners
 Security · Oct 2
Unpatched Eclair Lightning nodes crash on every restart, researcher warns
 Security · yesterday
LDK patches Lightning flaw that let peers steal forwarded Bitcoin via reconnect lie