Eclair update adds Lightning security protections

ACINQ released Eclair 0.14.3 with security improvements for its Lightning Network implementation. The release addresses issues identified largely through Project Loupe and is intended to limit the effects of malicious peers. Existing channels can remain open during the upgrade, and the version remains compatible with other Lightning implementations.

One addition sets a maximum funding fee rate for opening or splicing channels. The default is 50 satoshis per byte, providing a ceiling when fee estimates would otherwise produce unexpectedly expensive transactions. Operators can change the setting to suit their requirements.

The ceiling introduces an operational trade-off during congestion: a funding transaction may take longer to confirm when market fees exceed the limit. Replacement transactions can raise fees where appropriate. The update also adds password authentication support for Tor connections in private network configurations.