CVE-2021-41591

ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure

published October 4, 2021

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

⚠️ A little dust could lead to big losses! The ACINQ Eclair wallet before version 0.6.3 has a vulnerability that exposes dust HTLCs — tiny funds that, if not managed properly, could be at risk. 💸 Think of it like a crumpled dollar bill hidden in your couch cushions. It’s not a large amount, but if someone knows it’s there, they might try to pry that couch apart to get to it! If an attacker exploits this vulnerability, it could result in the loss of small amounts of funds stored in dust HTLCs. While it might seem minor, repeated attacks could add up, leading to significant financial setbacks.

Put simply

Think of it like a crumpled dollar bill hidden in your couch cushions. It’s not a large amount, but if someone knows it’s there, they might try to pry that couch apart to get to it! This vulnerability allows the exposure of dust HTLCs due to improper handling, which could be leveraged by an attacker to access funds that were intended to be secure.

What to do

If an attacker exploits this vulnerability, it could result in the loss of small amounts of funds stored in dust HTLCs. While it might seem minor, repeated attacks could add up, leading to significant financial setbacks. Upgrade ACINQ Eclair to version 0.6.3 or later immediately to mitigate this risk. Be sure to review your wallet's settings and fund management practices to enhance security. You can tackle this! With a quick upgrade, you’ll keep those funds safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01705 · 77.1th percentile
Published
2021-10-04T16:47Z
EPSS history
Timeline
  • 04 OCT 16:47Z
    ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure
    cvelistv5