Security· ★★★· neutral·

ACINQ ships second Eclair security patch in five days

  • —Eclair 0.14.5 landed Oct. 20, after 0.14.4 on Oct. 15
  • —Some flaws could be exploited by hostile Lightning peers
  • —No confirmed attacks or financial losses reported
  • —Upgrade requires no closing or reopening of channels
Why it matters: Lightning nodes route Bitcoin payments, so operators face pressure to upgrade before the full scope of the risk is known.
#BTC
Source: CryptoSlate
More on this
Security · Oct 17
Eclair patches browser attack that could send commands to Lightning nodes
 Security · yesterday
Node.js ships HIGH-severity patches as crypto platform backends remain exposed
 Security · Oct 9
Core Lightning patches critical security flaws and a Bitcoin payment bug