Hi list,

Last year a DoS vector was discovered to affect all node
implementations, where an attacker could open large numbers of fake
channels to the victim and never publish them on-chain, causing the
victim to consume excessive resources.

Defenses against the DoS have been shipped in the following releases:
- CLN 23.02 [1]
- eclair 0.9.0 [2]
- LDK 0.0.114 [3]
- LND 0.16.0 [4]

If you are running node software older than this, your funds may be at
risk!  Update to at least the above versions to help protect your
node.

More details about the DoS vector are available at
https://morehouse.github.io/lightning/fake-channel-dos.

- Matt

[1] https://github.com/ElementsProject/lightning/releases/tag/v23.02
[2] https://github.com/ACINQ/eclair/releases/tag/v0.9.0
[3] https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.0.114
[4] https://github.com/lightningnetwork/lnd/releases/tag/v0.16.0-beta
_______________________________________________
Lightning-dev mailing list
Lightning-dev@lists.linuxfoundation.org
https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev

Reply via email to