34 matches found
detection-tool-cve-2019-13000
Detection tool for CVE 2019-13000 A tool that detect if your node has been victim of the invalid funding tx attack. Usage java -jar checkfunding.jar --db eclair.sqlite Help $ java -jar checkfunding.jar --help checkfunding 1.0 Usage: checkfunding options --db path to eclair.sqlite --conf path to...
ln-upgrade-dynamics
Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023–2026 Saurabh Kumar, Bitcoin Data Labs Code, aggregate data and LaTeX source for the paper. arXiv categories: cs.CR, cross-list cs.NI. Data cutoff: 2026-10-13. Summary Lightning gossip carries no software version, so...
Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023-2026
Every implementation of Bitcoin's Lightning payment network disclosed security vulnerabilities in 2026, and every advisory told operators to upgrade. Whether they do has never been measured, because Lightning gossip carries no software version. Matching the feature bits a node announces against t...
PYSEC-2026-1580 LNbits improperly handles potential network and payment failures when using Eclair backend
Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...
CVE-2021-41591
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure...
EUVD-2019-4574
Malware in sbrugna...
EUVD-2021-28605
Malicious code in bioql PyPI...
GHSA-3J4H-H3FP-VWWW LNbits improperly handles potential network and payment failures when using Eclair backend
Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...
LNbits improperly handles potential network and payment failures when using Eclair backend
Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...
CVE-2024-34694 LNbits improperly handles potential network and payment failures when using Eclair backend
LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total loss of funds for the node backend. Th...
CVE-2024-34694
LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total loss of funds for the node backend. Th...
CVE-2024-34694 LNbits improperly handles potential network and payment failures when using Eclair backend
LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total loss of funds for the node backend. Th...
CVE-2024-34694 LNbits improperly handles potential network and payment failures when using Eclair backend
LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total loss of funds for the node backend. Th...
CVE-2024-34694
LNbits vulnerable when using an Eclair backend: if a payment invoice fails to settle within the internal ~30s timeout, the system may treat it as failed even while the payment is in flight, potentially allowing total loss of funds at the node backend. This is documented across multiple sources (N...
CVE-2024-34694: Improper Check for Unusual or Exceptional Conditions
LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total loss of funds for the node backend. Th...
LNbits Security Vulnerabilities
LNbits is a Python server open-sourced by LNbits. A security vulnerability exists in versions of LNbits prior to 0.12.6 that stems from the fact that if a payment invoice in Eclair is not cleared within an internal timeout period, it will be treated as a payment failure, even if the payment is...
CVE-2021-41591
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure...
CVE-2021-41591
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure...
