AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 26 Bitcoin

lnrpc: add XFindBaseLocalChanAlias rpc

Public commit record

What the developer wrote

Authored by George Tsagkarelis

58/100 · Thin
lnrpc: add XFindBaseLocalChanAlias rpc

Add the new RPC method that looks up the base scid for a given alias.
Given the previous stepping stones this commit is fairly simple, we just
call into the alias manager and return the lookup result.
✓ Descriptive subject✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds a new read-only experimental RPC called XFindBaseLocalChanAlias to LND's router service. It lets an authorized caller ask the node: 'Given a short channel alias, what is the underlying real (base) channel ID?' The change only exposes a lookup and does not, by itself, modify any channel state or balances. It is a feature addition rather than a fix for a known vulnerability.

Recommended action

Treat as a routine feature commit, not an emergency security patch. Reviewers should confirm that the new RPC inherits the same macaroon/permission gating as other experimental router RPCs, and that AliasMgr.FindBaseSCID does not leak mappings for aliases the caller should not see. No immediate action is required solely on the basis of this diff.

Security signals we found

01

New experimental RPC exposes alias-to-base-SCID mapping

02

Read-only lookup; no state mutation in the server handler

03

Relies on existing AliasMgr.FindBaseSCID; behavior depends on prior alias-registration logic not shown

04

No explicit input sanitization beyond protobuf parsing in the diff

05

No vendor security disclosure or CVE references present in commit or supplied materials

Risk score

Why this scored 26/100

Our methodology →
Potential impact 2/30
Exploitability 3/25
Stealth signal 4/15
Affected reach 5/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.