AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 21 Bitcoin

lightningd: save funding PSBT to database if we're to withhold it.

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
lightningd: save funding PSBT to database if we're to withhold it.

Normally we don't care, but if we're withholding it, keep it around
so we can sign & broadcast later.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds plumbing to remember whether a new Lightning channel's funding transaction is being deliberately withheld from broadcast, and to store the unsigned funding PSBT in the database so it can be signed and broadcast later. The actual feature is not yet enabled for users (a comment says 'FIXME: Set by option' and the flag is hard-coded to false). It is a preparatory/refactoring change, not a fix for an active security bug.

Recommended action

No immediate action required. Treat as normal feature development. If deploying from this commit, note that the withholding feature is not yet user-configurable and the funding PSBT storage path should be reviewed once the option is implemented and exposed.

Security signals we found

01

New database column and persistence path for funding PSBT tied to a withholding flag

02

Hard-coded false value with FIXME suggests feature is incomplete and not exposed

03

No input validation or access-control changes visible in the diff

04

No mention of vulnerability, CVE, or security issue in commit message

Risk score

Why this scored 21/100

Our methodology →
Potential impact 3/30
Exploitability 2/25
Stealth signal 2/15
Affected reach 4/15
Confidence 7/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.