detection-tool-cve-2019-13000

CVE 2019-13000 탐지 도구 자신의 노드가 유효하지 않은 펀딩 트랜잭션 공격의 피해자인지 탐지하는 도구입니다. 사용법 java -jar checkfunding.jar --db eclair.sqlite 도움말 $ java -jar checkfunding.jar --help checkfunding 1.0 Usage: checkfunding options --db path to eclair.sqlite --conf path to eclair.conf --help prints this usage text This utilit...

chanleakcheck

chanleakcheck 이 도구는 최근에 완전히 공개된 CVE-2019-12999의 표적이 되었는지 lnd 노드를 확인하는 도구입니다. 이 도구는 노드가 무효 채널을 수락했는지 확인하고, 손실된 코인이 있다면 총 손실량을 정량화하려고 시도합니다. 이 도구는 lnd 전용입니다. 다만 eclair와 c-lightning도 각각 탐지 도구를 제공합니다: eclair의 도구 c-lightning의 도구 설치 다음 명령으로 도구를 빌드할 수 있습니다: go build -mod=vendor -v 노드 점검 도구가 설치되면 다음 명령으로...

PT-2026-89872

@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...

PT-2026-89871

@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...

LNTest: A Testbed for Evaluating Bitcoin Lightning Network-Based Botnets

Bitcoin's Lightning Network LN can be exploited as a covert, low-cost command-and-control C&C channel for botnets, as demonstrated by the LNBot and D-LNBot designs. However, both remain proof-of-concept prototypes evaluated only through simulation, leaving key questions about real-world topology...

EUVD-2020-19425

Malware in sbrugna...

EUVD-2021-0992

Malware in sbrugna...

EUVD-2024-2003

Malicious code in bioql PyPI...

EUVD-2022-7361

Malicious code in bioql PyPI...

PT-2025-25363 · Undefined · Undefined

CVE-2025-27586 Full Disclosure FBRE Attacks against a LN node by theariard in bitcoin 1,079 sats and 1 comment so far https://t.co/dKiwDLupZJ...

Model Checking the Security of the Lightning Network

Payment channel networks are an approach to improve the scalability of blockchain-based cryptocurrencies. The Lightning Network is a payment channel network built for Bitcoin that is already used in practice. Because the Lightning Network is used for transfer of financial value, its security in t...

CVE-2022-39389

Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...

GO-2022-0807 Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd

Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd...

GO-2024-2943 Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service in github.com/lightningnetwork/lnd

Lightning Network Daemon LND's onion processing logic leads to a denial of service in github.com/lightningnetwork/lnd...

CVE-2024-38359

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359 Lightning Network Daemon Onion Bomb

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359 Lightning Network Daemon Onion Bomb

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359

The CVE-2024-38359 vulnerability affects the Lightning Network Daemon (lnd) in its onion processing logic, causing a Denial-of-Service due to excessive memory allocation. It has been patched in lnd v0.17.0; upgrading to a version greater than 0.17.0 mitigates the issue. As a partial mitigation, u...

CVE-2024-38359 Lightning Network Daemon Onion Bomb

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

Lightning Network Daemon (LND)'s onion processing logic leads to a denial of service

Impact A parsing vulnerability in lnd's onion processing logic led to a DoS vector due to excessive memory allocation. Patches The issue was patched in lnd v0.17.0. Users should update to a version = v0.17.0 to be protected. References Detailed blog post:...