AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 18 Bitcoin

lightningd: add listchainmoves and listchannelmoves commands.

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
lightningd: add listchainmoves and listchannelmoves commands.

This is where all the previous work pays off: we can access the coinmoves
in the db.

Changelog-Added: JSON-RPC: `listchainmoves` and `listchannelmoves` commands to access the audit log of coin movements.
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds two new read-only JSON-RPC commands, listchainmoves and listchannelmoves, that let users query an audit log of on-chain and channel coin movements stored in the node's database. It is a feature addition, not a security fix, and does not change how funds are handled or how the node protects itself.

Recommended action

No security action required. Operators may review access controls on the RPC interface because the new commands expose detailed historical financial data (amounts, txids, payment hashes, peer IDs).

Security signals we found

01

New read-only RPC commands exposing previously internal audit data

02

Commands categorized as 'readonly' in the JSON-RPC schema

03

No changes to transaction construction, signing, network protocol, or authentication

04

No input from the request is used in SQL beyond pagination parameters (start/limit)

05

No security-relevant changelog or advisory language in commit message

Risk score

Why this scored 18/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 5/15
Confidence 9/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.