A newly disclosed unfunded-channel flaw in Eclair, a Bitcoin Lightning implementation, could repeatedly crash reachable nodes without requiring an attacker to spend BTC on-chain. The vulnerability affected versions v0.14.0 and earlier because inconsistent checks of temporary and final channel identifiers allowed a peer to accumulate saved channel requests without broadcasting a funding transaction. This bypassed the intended limit on pending channels and imposed memory and database costs, although the attack still required computing resources and network traffic. In researcher Erick Cestari's regtest proof of concept, a 4 GB Java virtual machine heap was exhausted after about 47 minutes 43 seconds, following the accumulation of 217,623 channel-database rows. Restarting did not resolve the persistent-crash issue because the records remained on disk and were reloaded during startup. The findings were fixed before disclosure in v0.14.1, released in July, with ACINQ merging PR #3324 on July 17 and shipping the patch on July 29. A separate channel-opening race, disclosed by Matt Morehouse / lnfuzz as LNF-2026-0003, could leave orphaned channel processes consuming memory or CPU but allowed recovery on disconnect or restart in the tested case. ACINQ recommends v0.14.3, released Sept. 14, because it addresses separate vulnerabilities that could enable malicious nodes to exploit fund-loss issues. The July fix should therefore not be treated as the current complete security recommendation, and preventing new unfunded-channel floods remains distinct from recovering an already overloaded database.