AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 30 Bitcoin

lightningd: honor `payment-fronting-node` when making bolt11 invoices.

Public commit record

What the developer wrote

Authored by Rusty Russell

65/100 · Adequate
lightningd: honor `payment-fronting-node` when making bolt11 invoices.

We use all the fronting nodes when creating invoices.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
The short version

What changed, and why it matters

This commit fixes a bug where Core Lightning's `payment-fronting-node` configuration option was ignored when creating BOLT11 invoices. The option lets a node designate one or more 'fronting' nodes that should always appear as the first hop in invoice route hints, even if those channels would normally be skipped as private, offline, or low-capacity. The change makes invoice generation honor that setting so the intended routing path is advertised.

Recommended action

Review whether bypassing offline and zero-capacity checks for fronting nodes is intentional and safe; ensure documentation for `payment-fronting-node` warns that it can expose channel information and route payments through channels that would otherwise be omitted. No immediate security patch appears required, but operators should understand the privacy/routing implications.

Security signals we found

01

Behavioral change in route-hint selection that could expose otherwise private/offline channels when `payment-fronting-node` is set

02

Bypass of offline-channel and zero-capacity filters for configured fronting nodes

03

Addition of regression test for the fronting-node invoice behavior

Risk score

Why this scored 30/100

Our methodology →
Potential impact 5/30
Exploitability 5/25
Stealth signal 5/15
Affected reach 5/15
Confidence 7/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.