AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 18 Bitcoin

swapserver: add commands for stats

Public commit record

What the developer wrote

Authored by f321x

68/100 · Adequate
swapserver: add commands for stats

Adds two command to the swapserver plugin to retrieve some stats so swap
providers can see more easily what is going on on their swapserver.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds two read-only statistics commands to Electrum's swapserver plugin, allowing swap providers to view their swap history and summary. It does not change how swaps are executed, does not move funds, and does not introduce obvious security bugs. The main consideration is that these commands expose swap-related financial data through existing command interfaces, but they appear to use the same access controls as other wallet-lightning ('wl') commands.

Recommended action

No immediate security action required. Treat as a normal feature addition. If reviewing further, verify that the 'wl' command category enforces appropriate wallet access controls and that the missing wallet argument in get_summary's call to get_history is intentional or fixed before release.

Security signals we found

01

New read-only plugin commands added to swapserver plugin

02

Commands use existing @plugin_command('wl', ...) registration, inheriting existing authorization model

03

No input parsing from untrusted network sources

04

No state mutation, fund movement, or cryptographic changes

05

Potential functional issue: get_summary calls get_history(self) without forwarding wallet argument

Risk score

Why this scored 18/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 2/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.