What the developer wrote
Authored by ziggie
docs: add release-notes
What changed, and why it matters
This commit only adds a line to the release notes describing a prior bug fix: HTLCs (payment contracts) with a locktime of 0 were not being swept by an older legacy sweeper component called utxonursery. The actual code fix is in a separate pull request referenced by the note. Because this commit is documentation-only, it does not itself change any program behavior, but it confirms a past bug existed that could have left some funds unrecovered.
Review PR #10273 and the actual code fix to determine whether un-swept HTLCs with locktime 0 could lead to stuck funds or channel-force-close edge cases. Treat this documentation commit as informational only; any security response should be based on the referenced code change, not this release-note entry.
Security signals we found
Release note references a bug fix in legacy sweeper (utxonursery)
Affected condition: HTLCs with locktime of 0 not swept
Potential funds-recovery / liveness issue, not a direct remote exploit
No source code changes in this commit
Evidence from the diff
The diff is a single documentation addition to docs/release-notes/release-notes-0.20.0.md. It documents PR #10273, which fixed a case in the utxonursery (legacy sweeper) where HTLCs with locktime=0 were not swept. No source code changes are present in this commit, so security assessment depends entirely on the referenced PR and the release-note description. The issue appears to be a correctness/funds-recovery bug in the legacy sweeper path rather than an active remote-exploitable vulnerability.
Changed components
docs/release-notes/release-notes-0.20.0.mdutxonursery (legacy sweeper) - referenced onlyInspect captured patch +4 / −0
diff --git a/docs/release-notes/release-notes-0.20.0.md b/docs/release-notes/release-notes-0.20.0.md
index 26e4511..e91bc16 100644
--- a/docs/release-notes/release-notes-0.20.0.md
+++ b/docs/release-notes/release-notes-0.20.0.md
@@ -46,6 +46,10 @@
sweeper where some outputs would not be resolved due to an error string
mismatch.
+- [Fixed](https://github.com/lightningnetwork/lnd/pull/10273) a case in the
+ utxonursery (the legacy sweeper) where htlcs with a locktime of 0 would not
+ be swept.
+
# New Features
* Use persisted [nodeannouncement](https://github.com/lightningnetwork/lnd/pull/8825)
Why this scored 39/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.