Odaily Planet Daily reports that Bitcoin News posted on X that users running Eclair Lightning nodes should upgrade to v0.14.5. ACINQ released two versions within five days: v0.14.4, issued on October 15, patched a vulnerability where malicious websites exploited browser cache to steal API login credentials and trigger payments and channel operations; v0.14.5, released on October 20, fixed a peer layer vulnerability that developers said could allow channel counterparts to steal funds or disrupt payments. No fund losses have been reported so far. After the update, the browser dashboard will no longer be able to communicate directly with the node API.
Eclair Lightning Nodes Urged to Upgrade to v0.14.5 to Fix Security Vulnerabilities
KuCoinFlashShare
Summary
Eclair Lightning nodes require a blockchain upgrade to v0.14.5 to address security vulnerabilities. ACINQ released v0.14.4 on October 15 to prevent malicious websites from using browser cache APIs to trigger payments. A new network upgrade on October 20 fixed a peer-layer flaw that could allow partners to steal funds or block payments. No losses have been reported. After the upgrade, browser dashboards will no longer connect directly to the node API.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.