Matt Morehouse [ARCHIVE] on Nostr: 📅 Original date posted:2023-08-23 🗒️ Summary of this message: Last year, a ...
📅 Original date posted:2023-08-23
🗒️ Summary of this message: Last year, a DoS attack was discovered that could affect all node implementations. Updates have been released to protect against it. Update your software to avoid risk.
📝 Original message:
Hi list,
Last year a DoS vector was discovered to affect all node
implementations, where an attacker could open large numbers of fake
channels to the victim and never publish them on-chain, causing the
victim to consume excessive resources.
Defenses against the DoS have been shipped in the following releases:
- CLN 23.02 [1]
- eclair 0.9.0 [2]
- LDK 0.0.114 [3]
- LND 0.16.0 [4]
If you are running node software older than this, your funds may be at
risk! Update to at least the above versions to help protect your
node.
More details about the DoS vector are available at
https://morehouse.github.io/lightning/fake-channel-dos.
- Matt
[1] https://github.com/ElementsProject/lightning/releases/tag/v23.02
[2] https://github.com/ACINQ/eclair/releases/tag/v0.9.0
[3] https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.0.114
[4] https://github.com/lightningnetwork/lnd/releases/tag/v0.16.0-beta
🗒️ Summary of this message: Last year, a DoS attack was discovered that could affect all node implementations. Updates have been released to protect against it. Update your software to avoid risk.
📝 Original message:
Hi list,
Last year a DoS vector was discovered to affect all node
implementations, where an attacker could open large numbers of fake
channels to the victim and never publish them on-chain, causing the
victim to consume excessive resources.
Defenses against the DoS have been shipped in the following releases:
- CLN 23.02 [1]
- eclair 0.9.0 [2]
- LDK 0.0.114 [3]
- LND 0.16.0 [4]
If you are running node software older than this, your funds may be at
risk! Update to at least the above versions to help protect your
node.
More details about the DoS vector are available at
https://morehouse.github.io/lightning/fake-channel-dos.
- Matt
[1] https://github.com/ElementsProject/lightning/releases/tag/v23.02
[2] https://github.com/ACINQ/eclair/releases/tag/v0.9.0
[3] https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.0.114
[4] https://github.com/lightningnetwork/lnd/releases/tag/v0.16.0-beta