Every Zipp story tagged #Eclair, newest first.
Node operators are urged to upgrade, but ACINQ has not specified affected versions or disclosed confirmed attacks, leaving exposure difficult to assess.
The patch closes a credential-abuse path without disrupting curl or eclair-cli, but operators still need loopback binding and strong API access controls.
Two October merges close fee-drain paths in dual funding, splicing and Eclair-signer mode, but the fixes sit above the packaged v0.14.3 release, so node operators must verify their build.
Saved channel records can survive a restart, leaving affected operators with a recovery problem even after the attack stops.
The Sept. 14 patch closes three peer-triggered attack paths, including one that could turn a node's entire local channel balance into miner fees.
CryptoSlate