AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 30 Bitcoin

spender: look for unsigned PSBT on awaiting channels on startup, and re-send.

Public commit record

What the developer wrote

Authored by Rusty Russell

85/100 · Strong
spender: look for unsigned PSBT on awaiting channels on startup, and re-send.

This covers the other corner case, where we crash before actually
signing and sending the PSBT. We can spot this because the channel is
in AWAITING_LOCKIN and we have a PSBT, but it's not signed yet.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
The short version

What changed, and why it matters

This commit fixes a crash-recovery bug in Core Lightning's channel-opening plugin. If the node crashed after receiving a funding PSBT but before signing and broadcasting it, the channel could get stuck in an 'awaiting lock-in' state. On startup, the plugin now scans for such stuck channels, signs the PSBT, and re-sends it so the opening process can continue. The change is defensive and improves reliability rather than introducing a security vulnerability.

Recommended action

No immediate security action required; this is a reliability fix. Operators should upgrade to avoid stuck channel openings after crashes. Reviewers may want to confirm that automatic re-signing cannot race with concurrent manual operations or a partially signed PSBT.

Security signals we found

01

Crash-recovery gap could leave channels stuck in AWAITING_LOCKIN

02

Unsigned PSBT now signed and broadcast automatically on startup

03

Asynchronous signpsbt/sendpsbt to avoid blocking init on expected failures

04

Test previously expected to fail (xfail) now passes

Risk score

Why this scored 30/100

Our methodology →
Potential impact 8/30
Exploitability 2/25
Stealth signal 3/15
Affected reach 5/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.