AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 32 Bitcoin

graph/db: support v2 channel proofs in AddEdgeProof

Public commit record

What the developer wrote

Authored by Elle Mouton

78/100 · Adequate
graph/db: support v2 channel proofs in AddEdgeProof

Update AddEdgeProof to handle both v1 (four separate signatures) and
v2 (single aggregated signature) channel authentication proofs using
the appropriate SQL queries.
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Names security-relevant behavior explicitly
The short version

What changed, and why it matters

This commit extends a database function in the LND Lightning node so it can store both old-style (v1) and new-style (v2) channel authentication proofs. Previously, the code only accepted v1 proofs and would reject v2 proofs with an error. The change is a feature completion / bug fix for the new gossip protocol support, not a fix for an active security vulnerability. It adds the matching SQL query and tests for both versions.

Recommended action

No immediate security action required. Treat as normal feature/bug-fix maintenance. Reviewers should verify that AddV2ChannelProof SQL query and proof.Sig() extraction are correct and that the v2 proof signature is validated elsewhere before reaching AddEdgeProof.

Security signals we found

01

Previously rejected v2 channel proofs, potentially leaving v2 channels without stored authentication proof

02

Adds version-aware SQL dispatch for channel proof storage

03

Includes new unit tests covering both v1 and v2 proof insertion paths

Risk score

Why this scored 32/100

Our methodology →
Potential impact 5/30
Exploitability 5/25
Stealth signal 5/15
Affected reach 5/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.