CVE-2021-41591

ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure...

CVE-2021-41593

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure...

Cross site request forgery (csrf)

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

Cross site request forgery (csrf)

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure...

Cross site request forgery (csrf)

ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure...

CVE-2021-41592

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

CVE-2021-41592

The CVE-2021-41592 vulnerability affects Blockstream c-lightning up to version 0.10.1, caused by dust HTLC exposure that can lead to loss of funds. The connected documents consistently describe the issue with this product/version but do not provide exploit details or a confirmed fix. No remediati...

CVE-2021-41593

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure...

CVE-2021-41593

CVE-2021-41593 affects Lightning Labs lnd prior to 0.13.3-beta. The issue is described as a dust HTLC exposure that can lead to loss of funds. Root cause and impact are noted in multiple connected sources; the affected component is lnd (Lightning Network daemon). Remediation is to upgrade to v0.1...

CVE-2021-41591

ACINQ Eclair before 0.6.3 is affected by a vulnerability related to dust HTLC exposure that can lead to loss of funds. Affected component: Eclair’s Lightning Network implementation (prior to version 0.6.3). Root cause: exposure of dust HTLC data allowing improper handling/funding loss (as describ...

CVE-2021-41591

ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure...

Design/Logic Flaw

Prior to 0.11.0-beta, LND Lightning Network Daemon had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the preimage. In the case of a hash-and-amount...

CVE-2020-26896

Prior to 0.11.0-beta, LND Lightning Network Daemon had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the preimage. In the case of a hash-and-amount...

PT-2020-16537 · Lightning Network Daemon · Lnd

Name of the Vulnerable Software and Affected Versions: LND versions prior to 0.10.0-beta Description: The issue allows any peer with an open channel to exploit the vulnerability, regardless of the victim's situation, such as being a routing node, payment-receiver, or payment-sender. This can lead...