AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

lightningd: add preimage to forward_event notification

Public commit record

What the developer wrote

Authored by Peter Neuroth

73/100 · Adequate
lightningd: add preimage to forward_event notification

Adds the preimage to the forward_event notification when status is
settled. This can be useful to gather some context when listening to
this event

Changelog-Changed: forward_event notification no has preimage set if
status is settled.

Signed-off-by: Peter Neuroth <pet.v.ne@gmail.com>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This change adds the payment preimage to a plugin notification that fires when a forwarded Lightning payment succeeds. The preimage is already known to the node at that moment, so nothing secret is being exposed that wasn't already available internally. It is a feature enhancement, not a security fix or vulnerability.

Recommended action

No security action required. Reviewers may want to confirm that plugins subscribing to `forward_event` are expected to receive preimages and that this does not conflict with any privacy model documented for plugin authors.

Security signals we found

01

No memory-safety defects visible in diff

02

No change to authentication, authorization, or cryptographic checks

03

Preimage is already possessed by the node before notification is sent

04

No vendor security framing in commit message or changelog

Risk score

Why this scored 19/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 5/15
Confidence 9/10
Evidence quality 5/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.