Home›Crypto›Market Structure›Core Lightning fixed a flaw that could bypass revoked…

Core Lightning fixed a flaw that could bypass revoked channel penalties

Bitcoin Optech said the issue was addressed in Core Lightning v26.06.7, but older builds and some early Docker images still needed upgrade checks.

Reported · Written up by our desk · Market Structure

Core Lightning, a Lightning Network node implementation, fixed a channel close flaw in v26.06.7 that could allow a peer to broadcast an old revoked channel state without triggering the cheating penalty, Bitcoin Optech explained in an update dated Sept. 25, according to CryptoSlate.

Lightning peers typically replace earlier channel commitments as balances change, and if a revoked commitment is broadcast the counterparty should be able to claim the penalty. Before the fix, Core Lightning could instead treat the funding spend as a cooperative close when its outputs matched shutdown scripts already on record.

CryptoSlate reports that the bypass could be triggered when a peer had not specified an upfront shutdown script when the channel opened, then later named the output script of its revoked commitment in a shutdown message, letting it abandon the cooperative close and broadcast the old commitment.

The patch work included checks that recognize a commitment by looking at parts of the transaction, including locktime and sequence encoding, maintainers said in their patch notes and regression test materials, and CryptoSlate noted that older builds and some early Docker images still require an upgrade check.

Latest closeBitcoin $83,404.84 ▼1.2%

More like this

Sources