AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 30 Bitcoin

docs: add payment migration release note

Public commit record

What the developer wrote

Authored by ziggie

80/100 · Strong
docs: add payment migration release note

Document the handling of historical total-only blinded route data and the
new SendToRouteV2 validation that prevents creating such records.
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit only adds a release note describing a previously fixed bug in LND's payment migration. The actual code change happened in an earlier pull request. The bug involved old payment routes that stored a 'blinded total amount' without the matching encrypted recipient data, which could cause database migration failures. The note also warns that SendToRouteV2 now rejects newly submitted routes with the same invalid combination, and that replaying an affected old route from ListPayments or TrackPayment will also be rejected. It is a documentation-only change, so it does not by itself introduce or fix a vulnerability, but it signals that a prior fix addressed a reliability issue that could disrupt node operation during upgrades.

Recommended action

Treat this commit as informational. Review PR #10982 and the associated code changes to confirm the migration normalization and SendToRouteV2 validation are complete and correctly handle all historical route variants. If running an LND node, ensure the release containing PR #10982 is applied before upgrading past the affected schema version.

Security signals we found

01

Release note references a 'payment migration failure' caused by malformed historical route data

02

Invalid field combination (blinded total without encrypted recipient data) is now rejected by SendToRouteV2

03

Potential availability/reliability impact during node upgrade/migration

04

No code change in this commit; signals a prior fix rather than implementing one

Risk score

Why this scored 30/100

Our methodology →
Potential impact 8/30
Exploitability 3/25
Stealth signal 4/15
Affected reach 6/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.