TBNBitcoinCrypto
Bitcoin Optech Newsletter #427 Recap Podcast
Publication: Bitcoin Optech
Author: Bitcoin Optech
Source published: 20/10/2026, 00:00:00 UTC
Briefing created: 15/11/2026, 10:26:32 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 01/11/2026, 11:07:24 UTC.
Briefings
Bitcoin Optech Podcast #427 Recap highlights two critical DoS vulnerabilities in Eclair v0.14.1 released in July 2026. Matt Morehouse discovered a race condition allowing memory leaks up to 1 MB/second via open_channel rate limiting. A second vulnerability was found using AI scanning, also related to pending channel handling. Both bugs were patched in Eclair 0.14.1, with the first bug affecting older versions. The podcast features Murch Erhardt, Gustavo Flores Echaiz, Mike Schmidt, and guests Erick Cestari and Adam Gibson.
Key points
- Eclair v0.14.1 fixed two DoS vulnerabilities in July 2026, with the first bug affecting older versions and the second also related to pending channel handling.
- Matt Morehouse identified a race condition in open_channel rate limiting that could leak up to 1 MB of memory per second until node crashes.
Context
Bitcoin Optech Podcast #427 Recap discusses critical security vulnerabilities in Eclair, a Bitcoin Lightning node client. The findings were published in October 2026, with the first vulnerability disclosed in July 2026. The podcast features security researcher Erick Cestari and privacy researcher Adam Gibson alongside hosts Murch Erhardt and Mike Schmidt.
Limitations
Evidence covers only two specific DoS vulnerabilities in Eclair v0.14.1 and older versions. The first bug's memory leak rate (1 MB/second) was measured by Matt Morehouse using the smite fuzzer. The second vulnerability was discovered using AI scanning tools. No impact on other Bitcoin software or specific network conditions is documented.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 15/11/2026, 10:26:32 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeic454cw2vuelc4b2mfeikcujkxofjkzjb5lapseo56b6gfdyyuno4