Eclair Releases Patch for Issues Exploitable by Malicious Nodes

Photo: TokenPost
ACINQ released Eclair v0.14.5 on Oct. 20, a security patch for issues that malicious nodes could exploit, five days after the Bitcoin Lightning software’s previous release. ACINQ describes the update as a security-hardening patch and recommends that operators upgrade. It remains compatible with earlier Eclair versions; operators can stop the software, apply the update and restart without closing existing payment channels. The release notice credits Nuhiat-Arefin and mptfire for responsible disclosures. An earlier release, v0.14.4, addressed a separate browser-facing risk in Eclair’s API.
Source: TokenPost







