AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

multi: add new config option `upfront-shutdown-address`

Public commit record

What the developer wrote

Authored by Nishant Bansal

73/100 · Adequate
multi: add new config option `upfront-shutdown-address`

Introduced a new config value `upfront-shutdown-address`
in the `lnd.conf` file. This ensures that channel close
funds are transferred to the specified shutdown address.
The value applies to both the funder and the fundee but
can be overridden by the value specified during
`openchannel` or by the `channel acceptor`.

NOTE: If this field is set when opening a channel with a
peer that does not advertise support for upfront shutdown
feature, the channel open will fail.

Signed-off-by: Nishant Bansal <nishant.bansal.282003@gmail.com>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds a new optional configuration setting, upfront-shutdown-address, to the Lightning Network Daemon (LND). When set, it tells LND to send cooperative channel-closing funds to a specific address by default. It only takes effect if the other peer also supports the upfront shutdown feature; otherwise channel opens fail. The change is a feature addition, not a fix for an active vulnerability, and it does not appear to introduce a security flaw on its own.

Recommended action

No immediate security action required. Operators who enable upfront-shutdown-address should verify the address is valid and under their control, and be aware that channel opens to non-supporting peers will fail. Reviewers may want to confirm that ParseUpfrontShutdownAddress rejects invalid or non-standard scripts and that the global default cannot accidentally override an explicit per-channel address.

Security signals we found

01

New configuration option for cooperative close payout address

02

Default shutdown script only applied when peer advertises upfront-shutdown feature support

03

Per-channel and channel-acceptor values override the global default

04

Address parsing uses existing chancloser.ParseUpfrontShutdownAddress routine

05

No change to cryptographic, network, or access-control logic

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 3/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.