LND: Replacement Stalling Attack
Discussion of weaknesses in LND's sweeper system that can be exploited to steal funds.
Tagged "security"
13 posts
LND: Infinite Inbox DoS
Discussion of an LND DoS vulnerability from large incoming message queues.
LND: Excessive Failback Exploit #2
Discussion of a variant of the previously-disclosed excessive failback exploit in LND.
Eclair: Preimage Extraction Exploit
Discussion of a bug in Eclair's preimage handling that can be exploited to steal funds
LND: gossip_timestamp_filter DoS
Discussion of a DoS vulnerability in LND's gossiper.
LND's Deadline-Aware Budget Sweeper
Discussion about the benefits of LND's new approach to fee bumping commitment and HTLC transactions.
LND: Excessive Failback Exploit
Discussion of a bug in LND's on-chain handling that can be exploited to steal funds
LDK: Duplicate HTLC Force Close Griefing
Discussion of a bug in LDK that can be exploited to force close channels
LDK: Invalid Claims Liquidity Griefing
Discussion of a bug in LDK that can be exploited to lock up funds
DoS: LND Onion Bomb
Discussion of an OOM bug in LND that can be exploited for DoS
DoS: Channel Open Race in CLN
Discussion of a race condition in CLN that can be exploited for DoS
Invoice Parsing Bugs in CLN
Discussion of several invoice parsing bugs discovered in CLN
DoS: Fake Lightning Channels
Technical analysis of the fake channel DoS vector in the Lightning Network