Bugs
Bugs we’ve found. Security findings also get a full write-up under
advisories.
28 bugs · 12 fixed ·
4 implementations
Core Lightning
13 · 5 fixed
| Bug | Impact | Status | Reported | Credit | Links |
|---|
openingd aborts on funding_created with a zero funding_txid | crash | reported | | Nishant Bansal | issue |
accept_channel sets channel_reserve_satoshis below our own dust_limit_satoshis | crash | reported | | Matt Morehouse | issue |
Failure to reject tx_add_output amounts above the total bitcoin supply | crash | reported | | Erick Cestari | issue |
Failure to reject open_channel where the funder cannot pay the commitment fee | spec | reported | | Matt Morehouse | issue |
channeld leaves tx_sigs_allowed uninitialized on startup | uninit | fixed | | Erick Cestari | fix |
dualopend leaves state->reconnected uninitialized on startup | uninit | fixed | | Erick Cestari | fix |
| Failure to reject absurdly high channel reserves | spec | reported | | Nishant Bansal | issue |
Failure to reject option_scid_alias on an announced channel | spec | reported | | Nishant Bansal | issue |
Failure to reject dust_limit_satoshis below 354 sat | spec | reported | | Matt Morehouse | issue |
Zombie connection after lightningd ignores connectd_peer_spoke | liveness | reported | | Matt Morehouse | issue |
marginal_feerate() overflows instead of saturating | ub | fixed | | Matt Morehouse | fix |
Duplicate funding outpoint creates channels with the same channel_id | spec | fixed | | Nishant Bansal | issue/fix |
openingd crashes on assertion when funding_satoshis exceeds the wally maximum | crash | fixed | | Nishant Bansal | issue/fix |
LDK
2 · 1 fixed
| Bug | Impact | Status | Reported | Credit | Links |
|---|
| Failure to reject absurdly high channel reserves | spec | reported | | Matt Morehouse | issue |
to_self_delay size omitted from DelayedPaymentOutput weight calculation | debug-assert | fixed | | Matt Morehouse | fix |
Eclair
6 · 4 fixed
| Bug | Impact | Status | Reported | Credit | Links |
|---|
Failure to reject open_channel where the funder cannot pay the commitment fee | spec | reported | | Matt Morehouse | issue |
Failure to reject option_scid_alias on an announced channel | spec | reported | | Nishant Bansal | issue |
Failure to reject funding_satoshis > MAX_MONEY | spec | fixed | | Matt Morehouse | issue/fix |
Failure to validate channel_reserve_satoshis against dust_limit_satoshis | spec | fixed | | Matt Morehouse | issue/fix |
| Incorrect signature verification edge cases | spec | fixed | | Matt Morehouse | issue/fix |
| Malformed messages silently dropped instead of closing the connection | spec | fixed | | Matt Morehouse | issue/fix |
BOLT spec
1 · 0 fixed
| Bug | Impact | Status | Reported | Credit | Links |
|---|
| Incorrect HTLC deductions in Appendix C/F test vectors | spec | reported | | Nishant Bansal | issue |