AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 28 Bitcoin

lightningd: add withhold option to fundchannel_complete.

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
lightningd: add withhold option to fundchannel_complete.

This is just a polite way of telling us that if we close, don't bother broadcasting
since we didn't broadcast the funding tx.

Changelog-Added: JSON-RPC: `fundchannel_complete` new parameter `withhold` (default false).
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds a new optional 'withhold' flag to the fundchannel_complete command in Core Lightning. When set, it tells the node that the funding transaction has not been broadcast yet, so if the channel is closed before broadcasting, the node can skip trying to broadcast a closing transaction. It is a user-facing workflow convenience, not a fix for a known security flaw.

Recommended action

Review the full implementation in opening_control.c to confirm that withheld channels are correctly tracked and that close paths cannot be tricked into treating an unbroadcast funding transaction as confirmed. Treat this as a normal feature review unless additional evidence of a vulnerability emerges.

Security signals we found

01

New optional RPC parameter changes channel funding state semantics

02

Flag affects whether funding transaction is considered broadcast

03

No explicit security relevance stated by vendor

04

Implementation details in opening_control.c not visible in diff

Risk score

Why this scored 28/100

Our methodology →
Potential impact 5/30
Exploitability 5/25
Stealth signal 5/15
Affected reach 5/15
Confidence 5/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.