A malicious Lightning peer could have turned a node’s entire local channel balance into miner fees. Eclair 0.14.3 patches that flaw plus two others involving splicing and on-the-fly funding. ACINQ is strongly urging node operators to upgrade.