---
title: "Eclair Releases Second Security Patch in Five Days to Prevent Channel Theft"
description: "Node operators can apply the update without closing existing Lightning channels, though restarting the software is required."
url: https://basisdesk.news/news/eclair-patches-lightning-bugs-peer-theft
published: 2026-10-21T17:05:40.364Z
modified: 2026-10-21T17:05:40.364Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: neutral
tickers: [BTC]
tags: [Eclair, Lightning Network, Bitcoin, Security Patches, Node Operators]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# Eclair Releases Second Security Patch in Five Days to Prevent Channel Theft

Node operators can apply the update without closing existing Lightning channels, though restarting the software is required.

## At a glance

- **What happened:** Eclair issued its second security update in five days to address vulnerabilities that could allow peers to steal funds.
- **Why it matters:** The update prevents potential channel drains without forcing node operators to close their existing payment channels.
- **Who is affected:** Lightning Network node operators running the Eclair implementation.
- **What's next:** Operators must stop and restart Eclair instances to activate the fix.
- **Status:** announced
- **Primary source:** [Eclair Patches Lightning Bugs That Could Let Peers Steal Funds](https://thedefiant.io/news/security/eclair-patches-lightning-bugs-that-could-let-peers-steal-funds) — thedefiant.io

## Key points

- Eclair rolled out its second security release within five days to fix peer theft vulnerabilities. [1]
- The patch allows node operators to protect funds without closing payment channels. [1]
- Node operators must stop and restart Eclair to apply the security update. [1]

## Editorial remark

- **Context:** The update follows another security release deployed just days earlier to protect Lightning Network channel balances. [1]
- **Impact:** Eclair node operators must stop and restart their software to prevent connected peers from potentially draining funds. [1]
- **Watch:** Adoption rates of the patch across active Eclair routing nodes and network capacity stability. [1]

Developers behind the Bitcoin Lightning implementation Eclair have rolled out an emergency security patch to fix vulnerabilities that could allow connected channel peers to steal funds [1]. The release marks the protocol client's second critical security update issued within a five-day span [1].

The software fix allows node operators to deploy the patch without being forced to close their active payment channels [1]. However, operators must stop and restart the Eclair application for the updated protections to take effect [1]. The update addresses specific attack vectors where malicious counterparties could leverage peer-level software flaws to drain funds across open channel balances [1].

Security maintainers emphasized that node operators should upgrade promptly to mitigate potential exploit risks while maintaining channel uptime [1]. The protocol safeguards follow broader industry vigilance regarding Bitcoin self-custody and infrastructure integrity, coming amid heightened focus on ecosystem software flaws like the [Coldcard Firmware Vulnerability](https://basisdesk.news/news/coldcard-firmware-exploit-116m-bitcoin-theft) that impacted hardware wallets.

At the time of writing, $BTC was trading at $84,518. Network node runners running unpatched instances of Eclair remain vulnerable to channel theft until they complete the required stop-and-restart upgrade process [1].

## Sources

1. [Eclair Patches Lightning Bugs That Could Let Peers Steal Funds](https://thedefiant.io/news/security/eclair-patches-lightning-bugs-that-could-let-peers-steal-funds) — thedefiant.io, 2026-10-21

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai