Eclair addresses bugs that risk Lightning Network thefts
BTC when published $83,330Now $80,568 ▼ −3.31% since it was published
ACINQ shipped two Eclair releases in five days to close holes that could let attackers move funds or disrupt payments ACINQ, the team behind the Eclair Lightning node software, has spent the past week patching security holes. Developers say bugs in Eclair v0.14.4 could allow peers to steal funds or disrupt payments. The company has responded with two releases in five days. For node operators, the message is simple: upgrade now. The first release, Eclair v0.14.4, landed on October 15, 2026. Its headline fix targets a cross-origin request forgery vulnerability in the node’s API. Web browsers often remember login credentials so users don’t have to keep retyping them. In Eclair’s case, the API relied on HTTP Basic authentication, and those credentials could sit cached in a browser.
First reported by Crypto Briefing. This page is a short excerpt; the full text is theirs.
