https://feed.craftedsignal.io/tags/payment-channel/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 31 Mar 2026 15:21:06 +0000https://feed.craftedsignal.io/briefs/2026-07-mppx-vuln/Tue, 31 Mar 2026 15:21:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-07-mppx-vuln/A vulnerability exists in mppx TypeScript interface before version 0.4.11, allowing attackers to close or grief channels for free by submitting close vouchers equal to the settled amount due to incorrect validation.The mppx library is a TypeScript interface designed for machine payments protocols. A vulnerability, identified as CVE-2026-34209, exists in versions prior to 0.4.11. Specifically, the tempo/session cooperative close handler incorrectly validates close voucher amounts. Instead of using a less than or equal to (<=) comparison, it uses a less than (<) comparison when checking against the on-chain settled amount. This flaw allows a malicious actor to submit a close voucher with an amount…

]]>mediumadvisoryvulnerabilitypayment-channeltypescript