detection-tool-cve-2019-13000

CVE 2019-13000 検出ツール あなたのノードが不正なファンディングトランザクション攻撃の被害に遭ったかどうかを検出するツールです。 使用方法 java -jar checkfunding.jar --db eclair.sqlite ヘルプ $ java -jar checkfunding.jar --help checkfunding 1.0 Usage: checkfunding options --db path to eclair.sqlite --conf path to eclair.conf --help prints this usage text This...

chanleakcheck

chanleakcheck 이 도구는 최근에 완전히 공개된 CVE-2019-12999의 표적이 되었는지 lnd 노드를 확인하는 도구입니다. 이 도구는 노드가 무효 채널을 수락했는지 확인하고, 손실된 코인이 있다면 총 손실량을 정량화하려고 시도합니다. 이 도구는 lnd 전용입니다. 다만 eclair와 c-lightning도 각각 탐지 도구를 제공합니다: eclair의 도구 c-lightning의 도구 설치 다음 명령으로 도구를 빌드할 수 있습니다: go build -mod=vendor -v 노드 점검 도구가 설치되면 다음 명령으로...

PT-2026-89871

@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...

PT-2026-89872

@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have let an attacker take over a wallet and send its funds, but only where the owner had made the Hub reachable from the internet. Alby Hub is a self-hosted Lightning wallet, meaning the owner runs it on their own...

Why Bitcoin Businesses Are Moving to Dedicated VPS Infrastructure

A Bitcoin business rarely runs a simple website. Payment processors, exchanges, wallet services, blockchain analytics products and Lightning…...

LNTest: A Testbed for Evaluating Bitcoin Lightning Network-Based Botnets

Bitcoin's Lightning Network LN can be exploited as a covert, low-cost command-and-control C&C channel for botnets, as demonstrated by the LNBot and D-LNBot designs. However, both remain proof-of-concept prototypes evaluated only through simulation, leaving key questions about real-world topology...

EUVD-2020-19425

Malware in sbrugna...

EUVD-2021-0992

Malware in sbrugna...

EUVD-2024-2003

Malicious code in bioql PyPI...

EUVD-2022-7361

Malicious code in bioql PyPI...

PT-2025-25363 · Undefined · Undefined

CVE-2025-27586 Full Disclosure FBRE Attacks against a LN node by theariard in bitcoin 1,079 sats and 1 comment so far https://t.co/dKiwDLupZJ...

Model Checking the Security of the Lightning Network

Payment channel networks are an approach to improve the scalability of blockchain-based cryptocurrencies. The Lightning Network is a payment channel network built for Bitcoin that is already used in practice. Because the Lightning Network is used for transfer of financial value, its security in t...

CVE-2022-39389

Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...

PT-2024-36556

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 27.3 Description The issue allows for transaction-relay jamming via an off-chain protocol attack. This can change the outcome of an HTLC Hashed Timelock Contract because a flood of transaction traffic prevents...

GO-2022-0807 Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd

Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd...

GO-2024-2943 Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service in github.com/lightningnetwork/lnd

Lightning Network Daemon LND's onion processing logic leads to a denial of service in github.com/lightningnetwork/lnd...

CVE-2024-38359

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359 Lightning Network Daemon Onion Bomb

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359 Lightning Network Daemon Onion Bomb

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...