Bitcoin Optech Newsletter #425

This week’s newsletter summarizes the responsible disclosure of two denial-of-service vulnerabilities affecting older versions of Eclair and describes a proposal for synchronizing wallet labels between devices through an untrusted store. Also included are our regular sections summarizing proposals and discussion about changing Bitcoin’s consensus rules, announcing new releases and release candidates, and describing notable changes to popular Bitcoin infrastructure software. News ● Disclosure of two DoS vulnerabilities in Eclair: Matt Morehouse posted to Delving Bitcoin the responsible disclosure of two denial-of-service (DoS) vulnerabilities affecting Eclair v0.13.1 and earlier. Both were fixed in Eclair v0.14.0, released in May, and users still running an older version should upgrade. Each attack requires only a completed BOLT8 handshake, not a channel. The first vulnerability is in feature bit parsing.

Published by Bitcoin Optech. This page is a short excerpt; the full text is theirs.