Skip to content
$BTC$84,549+2.1%$ETH$2,514+2.6%$SOL$108.54+1.8%$XRP$1.38+4.1%$TON$1.78+32.7%MCap$2.80T+2.6%BTC.D60.4%Fear&Greed63 GreedGas0.30 gwei·3 sat/vBNews mood25% bullish
Basis Desk

New: Basis Desk Verify for Chrome & Firefox — fact-check crypto news on any page, free.Get the extension →

Security & Hacks · 1 min read

Eclair Releases Second Security Patch in Five Days to Prevent Channel Theft

Node operators can apply the update without closing existing Lightning channels, though restarting the software is required.

Editorial oversight: Julian Mercer, Chief Editor
Neutral
$BTC $84,549 +2.1%

At a glance Announced

What happened
Eclair issued its second security update in five days to address vulnerabilities that could allow peers to steal funds.
Why it matters
The update prevents potential channel drains without forcing node operators to close their existing payment channels.
Who is affected
Lightning Network node operators running the Eclair implementation.
What's next
Operators must stop and restart Eclair instances to activate the fix.
Primary source
thedefiant.io: Eclair Patches Lightning Bugs That Could Let Peers Steal Funds

Key points

  • Eclair rolled out its second security release within five days to fix peer theft vulnerabilities. 1
  • The patch allows node operators to protect funds without closing payment channels. 1
  • Node operators must stop and restart Eclair to apply the security update. 1

Developers behind the Bitcoin Lightning implementation Eclair have rolled out an emergency security patch to fix vulnerabilities that could allow connected channel peers to steal funds 1. The release marks the protocol client's second critical security update issued within a five-day span 1.

The software fix allows node operators to deploy the patch without being forced to close their active payment channels 1. However, operators must stop and restart the Eclair application for the updated protections to take effect 1. The update addresses specific attack vectors where malicious counterparties could leverage peer-level software flaws to drain funds across open channel balances 1.

Security maintainers emphasized that node operators should upgrade promptly to mitigate potential exploit risks while maintaining channel uptime 1. The protocol safeguards follow broader industry vigilance regarding Bitcoin self-custody and infrastructure integrity, coming amid heightened focus on ecosystem software flaws like the Coldcard Firmware Vulnerability that impacted hardware wallets.

At the time of writing, $BTC was trading at $84,518. Network node runners running unpatched instances of Eclair remain vulnerable to channel theft until they complete the required stop-and-restart upgrade process 1.

Sources

  1. [1] Eclair Patches Lightning Bugs That Could Let Peers Steal Funds — thedefiant.io, October 21, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote
Share X Telegram Bluesky Markdown

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.