{"id":13514,"date":"2026-09-21T10:58:45","date_gmt":"2026-09-21T10:58:45","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13514"},"modified":"2026-09-21T10:58:45","modified_gmt":"2026-09-21T10:58:45","slug":"a-bitcoin-lightning-flaw-could-send-a-nodes-entire-balance-straight-to-miners","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13514","title":{"rendered":"A Bitcoin Lightning flaw could send a node\u2019s entire balance straight to miners"},"content":{"rendered":"

<\/p>\n

\n

A flaw in Bitcoin Lightning software Eclair could let malicious peers wipe out a node\u2019s local channel balance through fees.<\/p>\n

ACINQ released Eclair 0.14.3 on Sept. 14 to patch three peer-triggered vulnerabilities that could cause operators to lose or lock funds during channel closures, splicing, and on-the-fly funding.<\/p>\n

The Bitcoin technology company, a contributor to Lightning Network development and maker of Eclair and Phoenix Wallet, strongly recommended operators upgrade because malicious nodes could exploit these issues.<\/p>\n

Eclair’s patched vulnerabilities<\/h2>\n

The most direct attack involved cooperative channel closures. When Eclair was responsible for the closing fee, an adversarial peer could propose a charge larger than the victim\u2019s local balance. Eclair\u2019s fallback negotiation could accept the proposal, eliminate the operator\u2019s output and effectively send the entire local balance to Bitcoin miners as transaction fees.<\/p>\n

The patch now rejects closing-fee proposals above an operator\u2019s configured maximum. Bitcoin Optech described 0.14.3 as a security release addressing vulnerabilities involving channel closing, splicing and on-the-fly funding.<\/p>\n

A second weakness could strand funds during an unfinished splice, a process that changes the transaction funding a Lightning channel without closing it. If Eclair signed first and the peer withheld its signature, the latest channel state could depend on a transaction the victim could not publish.<\/p>\n

\"Infographic\"Infographic<\/p>\n

That setup also created a path for losses on payments still in flight. An attacker could allow the incoming side of a relayed payment to expire, publish an older channel state, and use the payment secret to collect the outgoing leg. Eclair will now force-close using the newest state backed by a fully signed funding transaction.<\/p>\n