ACINQ Enhances Eclair Software to Secure Lightning Network Amid Vulnerability Concerns

ACINQ Releases Eclair Version 0.14.6

ACINQ, a developer working on the Bitcoin Lightning Network, recently announced the release of Eclair version 0.14.6, part of a crucial update that addresses significant security vulnerabilities within the Lightning payment system. The software update, issued on October 27, emphasizes the importance of upgrading for node operators, as the uncovered issues could potentially be exploited by malicious participants within the network.

Key Vulnerabilities Addressed

The focus of the update is on a vulnerability related to how funding changes are managed in Lightning channels prior to the confirmation of Bitcoin transactions. The Lightning Network allows for Bitcoin transfers to occur through intermediary payment channels, bypassing the need to log every transaction on the blockchain, thereby enhancing transaction speed and reducing costs. One method for managing liquidity in these channels is called "splicing", which allows operators to add or withdraw funds. However, ACINQ warns that permitting unconfirmed funding from other nodes for these splices can open doors for deceptive practices.

A compromised node could execute double-spending of such unverified transactions after they complete a splice operation, leading to the invalidation of the funding structure that underpins the channel.

If the channel subsequently settles on the Bitcoin blockchain under these conditions, payments that were supposed to be secured by hash time-locked contracts (HTLCs) could fall into jeopardy due to the issues with the underlying funding transaction.

Security Enhancements

Although these vulnerabilities have been identified, ACINQ stated that there have been no confirmed instances of theft or exploitation arising from them yet. Nevertheless, the update introduces stricter requirements for accepting peer funds, mandating that any contributions to splices come from inputs that have been confirmed on the blockchain. This safeguard is designed to minimize the risk of future exploitations and is enabled by default in the new version.

Additionally, the update decouples this new funding requirement from earlier dual-funding protections, which now specifically apply to the creation of new channels. The software's response to the situation where a channel closure occurs while there are still unconfirmed funding transactions has also been refined. Eclair will now choose a commitment transaction that is recognized by its Bitcoin Core backend, reverting to the latest confirmed funding state if necessary, thus preventing misuse during settlement.

Transaction Handling Improvements

ACINQ’s improvements also encompass handling transactions that miners might finalize after Eclair has stopped tracking them. Previously, this could lead to funds being misallocated or left unclaimed, as the software might mistakenly associate these transactions with the opposing party. The updated mechanism helps recover any corresponding outputs, providing a safety net for what might otherwise be lost funds.

Recommendations for Users

For added security, ACINQ discourages the use of its optional zero-fee commitment feature with untrusted peers, which by default remains disabled. The release credits security researcher Erick Cestari for responsibly bringing these vulnerabilities to light. All operators utilizing older versions of Eclair are encouraged to upgrade their systems to ensure the safeguarding measures are in place, with a seamless upgrade process that allows for active payment channels to remain operational during the transition.