Security· ★★★· bearish·

Bitcoin Lightning flaw in Eclair could send a node's entire balance to miners

  • Eclair 0.14.3, released Sept. 14, patches three peer-triggered vulnerabilities
  • A closing-fee attack could erase a node's local channel balance
  • The patch rejects closing-fee proposals above an operator's configured maximum
  • A default 50 satoshis-per-vByte cap now limits channel-opening and splice fees
Why it matters: Lightning node operators should upgrade immediately: the flaw allowed fund loss without key compromise.
Source: CryptoSlate