AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 18 Bitcoin

Add `maxCltvExpiryDelta` parameter to `findRoute*` APIs (#3234)

Public commit record

What the developer wrote

Authored by Bastien Teinturier

81/100 · Strong
Add `maxCltvExpiryDelta` parameter to `findRoute*` APIs (#3234)

We add a parameter to `findroute` API variants to limit the total CLTV
expiry delta of the route(s) returned.

Fixes #2617
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit adds a new optional setting called maxCltvExpiryDelta to Eclair's route-finding APIs. It lets users tell the Lightning node not to return payment routes whose total time-lock delay exceeds a chosen limit. The change is a feature addition, not a fix for an active vulnerability, and it does not alter default behavior when the new parameter is omitted.

Recommended action

No immediate security action required. Treat as a routine feature release. Operators who expose the findRoute* APIs may document the new optional parameter for users who want tighter control over route CLTV deltas.

Security signals we found

01

New optional route boundary parameter (maxCltvExpiryDelta) added to findRoute* APIs

02

Parameter is threaded into existing routeParams.boundaries.maxCltv, preserving default behavior when omitted

03

No default value change; no modification of internal payment path-finding defaults

04

Release notes describe the change as an API change, not a security fix

Risk score

Why this scored 18/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 2/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.