Thread - Nostr Hypermedia

LN+ _@lightningnetwork.plus 2 years ago

How Does a Lightning Replacement Cycling Attack Work - Illustrated Primer

No Bullshit Bitcoin

How Does a Lightning Replacement Cycling Attack Work - Illustrated Primer

"A proper fix probably requires more fundamental changes."

Replies (18)

LN+ _@lightningnetwork.plus 2 years ago

Apparently we may have a good solution to the Lightning Replacement Cycling Attack:

Re: [bitcoin-dev] [Lightning-dev] Full Disclosure: CVE-2023-40231 / CVE-2023-40232 / CVE-2023-40233 / CVE-2023-40234 "All your mempool are belong to us" - Matt Morehouse

3 replies ↓

0xbitcoiner 0xbitcoiner@stacker.news 2 years ago

Uff 😓 👍 "This attack isn't easy. Pulling it off involves: - opening two channels with the victim. - routing a payment through them. - successfully replacement-cycling the victim's htlc-timeouts for Δ blocks. - without the victim discovering the htlc-preimage transaction. Despite that, the attack is also hard to solve completely, explained @mononaut in a thread. @niftynei also held X Spaces explaining the vulnerability."

nobody 2 years ago

I'm not LN advanced, but imma repost it's important. Can't have bugs brooo

1 replies ↓

Lockesmith lockesmith@coldforge.xyz 2 years ago

My understanding of it is that the bug isn't that of lightning, but a "feature" of the layer 1 and any layer 2 will be susceptible to it.

2 replies ↓

nobody 2 years ago

Ohhhhh I do get that gist. Thanks for that helps me rewire for later fanhood 🤙

nobody 2 years ago

Any YouTube videos I like audio 😅

1 replies ↓

Lockesmith lockesmith@coldforge.xyz 2 years ago

Idk about YouTube, but I'll go back and see if I can figure out which podcast I listened to that talked about it. I feel like it was rabbit hole recap #275 but I'm not at all certain.

3 replies ↓

nobody 2 years ago

Cool thanks 👍

nobody 2 years ago

Nice. Redoing my shelf so needed a mini push. Clean need more