AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 32 Bitcoin

lightningd: consider old scids when looking up channels (for routing).

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
lightningd: consider old scids when looking up channels (for routing).

Changelog-Fixed: Protocol: we now allow routing through old short-channel-ids once a splice is done (previously we would refuse, leading to a 6 block gap in service).
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit fixes a routing bug in Core Lightning related to channel splicing. After a channel is spliced (a procedure that changes its identifying short-channel-id), the software previously refused to route payments using the old identifier for about six blocks, causing a temporary service gap. The fix makes the node also look up channels by their old identifiers, restoring routing continuity. There is no direct evidence this is a security vulnerability; it appears to be a protocol/routing reliability fix.

Recommended action

Treat as a normal reliability/protocol bug fix. Review whether the old_scids array is properly bounded and whether duplicate/old scids could introduce any ambiguity in routing decisions, but no immediate security response is indicated by the commit materials.

Security signals we found

01

Fixes a routing continuity failure after channel splicing

02

Changes lookup logic to include historical short-channel-ids

03

No input validation, memory safety, or cryptographic changes visible

04

No mention of security impact, CVE, or researcher attribution in commit

Risk score

Why this scored 32/100

Our methodology →
Potential impact 8/30
Exploitability 3/25
Stealth signal 4/15
Affected reach 6/15
Confidence 7/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.