Bitcoin Lightning developers sound alarm over security flaws as second patch lands in five days

Bitcoin Lightning developer ACINQ urged node operators to upgrade Eclair after patching security flaws that malicious peers could exploit. The company released Eclair version 0.14.5 on Oct. 20, its second security-focused update in five days, warning that some of the newly addressed vulnerabilities could be exploited by hostile nodes. The software powers Bitcoin Lightning nodes that maintain payment channels and route transactions across the network. The developers credited security researchers Nuhiat-Arefin and mptfire with responsibly disclosing problems addressed in the update.