AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 21 Bitcoin

lightningd: remove blinding field from onion_message_recv hook.

Public commit record

What the developer wrote

Authored by Rusty Russell

73/100 · Adequate
lightningd: remove blinding field from onion_message_recv hook.

Changelog-Removed: Plugins: `onion_message_recv` hook `blinding` field (use `first_path_key` as per modern BOLT 4 naming).
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit removes an old, duplicate field name from a plugin hook used when receiving onion-routed messages. The field 'blinding' is being dropped in favor of the newer name 'first_path_key'. It is a planned API cleanup, not a security fix, and does not change how messages are processed or validated.

Recommended action

No security action required. Plugin authors relying on the deprecated 'blinding' field should migrate to 'first_path_key' before upgrading to a release that includes this commit.

Security signals we found

01

No security-relevant logic changed

02

No cryptographic operations modified

03

No input parsing or validation altered

04

No memory safety fixes present

05

API deprecation cleanup only

Risk score

Why this scored 21/100

Our methodology →
Potential impact 2/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 5/15
Confidence 9/10
Evidence quality 5/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.