Eclair Patches Lightning Bugs Allowing Peers to Steal Funds

Two security releases in five days points to a concentrated stretch of vulnerability discovery in Eclair's Lightning implementation, and the fund-theft vector is the serious kind: it turns a channel counterparty into a potential attacker rather than an abstract remote risk. The operational detail matters as much as the flaw — a stop-and-restart upgrade preserves channels, lowering the cost of patching for node operators who might otherwise delay. The open question is whether this cadence reflects focused auditing that will taper off, or a broader pattern across Lightning implementations that users of other nodes have reason to track.