AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 27 Bitcoin

qt: expose swaps to address as Submarine Payments

Public commit record

What the developer wrote

Authored by f321x

68/100 · Adequate
qt: expose swaps to address as Submarine Payments

Exposes reverse submarine swaps to an external/specific address in the
TxEditor gui as "Submarine Payments". The user can enter a onchain
address in the Send Tab and then pay it from the lightning balance in
the send tab by enabling the Submarine Payments option in the TxEditor
dialog menu and switching to the Submarine Payment tab in the Tab bar.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds a new optional feature in Electrum's desktop (Qt) GUI called 'Submarine Payments'. It lets users pay a regular on-chain Bitcoin address directly from their Lightning balance by doing a reverse submarine swap through a third-party swap provider. The change is a feature addition, not a fix for a known vulnerability. It exposes existing swap logic in the transaction editor and adds UI controls, configuration, and cleanup handling. There is no direct evidence in the commit or supplied references that this resolves a security bug or introduces a new attack.

Recommended action

Treat this as a normal feature review. Verify that the new async cleanup paths cannot be bypassed, that the submarine swap amount/fee calculations cannot be manipulated by a malicious swap provider, and that enabling the feature does not weaken existing transaction preview/broadcast checks. No emergency action is indicated by the diff alone.

Security signals we found

01

New opt-in feature integrating third-party swap providers (Nostr/HTTP) into the send workflow

02

Adds cleanup of async swap transport on dialog close/accept/reject to avoid leaked connections

03

NostrTransport.stop now clears is_connected, which may improve state consistency

04

Submarine swap claim transaction no longer claims to be uncorrelated to wallet UTXOs; comment updated

05

Feature is disabled by default and requires user to enable it in preferences

Risk score

Why this scored 27/100

Our methodology →
Potential impact 5/30
Exploitability 5/25
Stealth signal 3/15
Affected reach 5/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.