AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

graph/db: add version parameter to IsZombieEdge

Public commit record

What the developer wrote

Authored by Elle Mouton

78/100 · Adequate
graph/db: add version parameter to IsZombieEdge

Make IsZombieEdge version-aware and add corresponding method to
VersionedGraph. Convert TestEdgeInsertionDeletion to versioned test
using the createEdge helper for both v1 and v2 channel testing.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
The short version

What changed, and why it matters

This commit extends the channel graph database so that zombie-edge lookups know which gossip protocol version (v1 or v2) they are dealing with. Previously the code only checked v1 zombie records; now it can check the matching version. It is a correctness/refactoring change rather than a fix for an active vulnerability, but it removes a version-confusion bug class that could cause routing or channel-state mistakes in a multi-version Lightning network.

Recommended action

No immediate action required. Treat as routine correctness improvement. If deploying, verify that any callers of IsZombieEdge outside this repo supply a valid GossipVersion, since the signature changed.

Security signals we found

01

version-aware query prevents cross-version zombie state confusion

02

hard-coded GossipVersion1 replaced with parameterized version

03

unsupported gossip versions now return explicit errors instead of silently using v1 data

04

test coverage expanded to both v1 and v2 channel edges

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 3/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.