Loading...
Bitcoin News reports that Eclair Lightning node users should upgrade to v0.14.5. ACINQ released v0.14.4 on October 15th to fix a vulnerability allowing malicious websites to trigger operations using API credentials, and v0.14.5 on October 20th to fix a node peering layer vulnerability. The developers stated that the vulnerability involves the risk of channel partners stealing funds or interfering with payments. No financial losses have been reported so far. After the update, the browser dashboard will no longer be able to communicate directly with the node API.