AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 42 Bitcoin

Merge PR 'Drop stale splice signature on disconnect' (#4954)

Public commit record

What the developer wrote

Authored by Matt Corallo

86/100 · Strong
Merge PR 'Drop stale splice signature on disconnect' (#4954)

from drop-stale-splice-sig-on-disconnect into main

Reviewed-on: https://git.rust-bitcoin.org/lightningdevkit/rust-lightning/pulls/4954
Reviewed-by: Matt Corallo <matt@noreply.git.rust-bitcoin.org>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference✓ Names security-relevant behavior explicitly
The short version

What changed, and why it matters

This change fixes a Lightning channel splicing bug: when two peers temporarily disconnect during a splice, any half-finished signature the other side already sent is now discarded. Before the fix, that stale signature could be reused after reconnecting, which might let a peer apply an old splice state or confuse the channel re-establishment logic. The patch is small and adds a test showing the signature is dropped and no monitor update occurs at that point.

Recommended action

Treat as a low-to-moderate correctness/security fix. Users running nodes that support splicing should upgrade to a release containing this commit. No immediate emergency response is indicated, but operators should monitor for any splice-related channel force-closes or inconsistencies.

Security signals we found

01

State-invalidation bug in multi-step protocol (splice negotiation)

02

Stale cryptographic signature not cleared on disconnect

03

Potential reuse of old commitment state after reconnect

04

Test added to verify signature is dropped and no premature monitor update occurs

Risk score

Why this scored 42/100

Our methodology →
Potential impact 12/30
Exploitability 8/25
Stealth signal 6/15
Affected reach 7/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.