Eclair addresses bugs that risk Lightning Network thefts

ACINQ shipped two Eclair releases in five days to close holes that could let attackers move funds or disrupt payments ACINQ, the team behind the Eclair Lightning node software, has spent the past week patching security holes. Developers say bugs in Eclair v0.14.4 could allow peers to steal funds or disrupt payments. The company has responded with two releases in five days. For node operators, the message is simple: upgrade now. The first release, Eclair v0.14.4, landed on October 15, 2026. Its headline fix targets a cross-origin request forgery vulnerability in the node’s API. Web browsers often remember login credentials so users don’t have to keep retyping them. In Eclair’s case, the API relied on HTTP Basic authentication, and those credentials could sit cached in a browser.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Briefing.