From mattmorehouse at gmail.com  Wed Aug 23 18:54:20 2023
From: mattmorehouse at gmail.com (Matt Morehouse)
Date: Wed, 23 Aug 2023 18:54:20 +0000
Subject: [Lightning-dev] Disclosure: Fake channel DoS vector
Message-ID: <CAGyamEWcsjYsbZfQoXqf8A7zWdfF97H-gMvKqFhos9VZkDdWOg@mail.gmail.com>

Hi list,

Last year a DoS vector was discovered to affect all node
implementations, where an attacker could open large numbers of fake
channels to the victim and never publish them on-chain, causing the
victim to consume excessive resources.

Defenses against the DoS have been shipped in the following releases:
- CLN 23.02 [1]
- eclair 0.9.0 [2]
- LDK 0.0.114 [3]
- LND 0.16.0 [4]

If you are running node software older than this, your funds may be at
risk!  Update to at least the above versions to help protect your
node.

More details about the DoS vector are available at
https://morehouse.github.io/lightning/fake-channel-dos.

- Matt

[1] https://github.com/ElementsProject/lightning/releases/tag/v23.02
[2] https://github.com/ACINQ/eclair/releases/tag/v0.9.0
[3] https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.0.114
[4] https://github.com/lightningnetwork/lnd/releases/tag/v0.16.0-beta