Bitcoin Lightning software Eclair patches critical vulnerabilities

ACINQ released Eclair 0.14.3 on Sept. 14 to address three vulnerabilities in its Lightning Network software that could lead to fund loss or locking. The flaws involve cooperative channel closures, unfinished splicing, and on-the-fly funding. One vulnerability allowed malicious peers to propose excessive closing fees, potentially draining a node's balance to miners. The update prevents such fee proposals and improves state management for channel operations. Operators are strongly advised to upgrade.