AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 32 Bitcoin

Emit SpliceFailed upon disconnect while quiescent

Public commit record

What the developer wrote

Authored by Jeffrey Czyz

68/100 · Adequate
Emit SpliceFailed upon disconnect while quiescent

Since quiescence is terminated upon disconnection, any outstanding
splice negotiation should result in emitting a SpliceFailed event as
long as we haven't reached FundingNegotiation::AwaitingSignatures. This
may occur if we explicitly disconnect the peer (e.g., when failing to
process splice_ack) or if the connection is lost.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This change fixes a bookkeeping bug in the Lightning Dev Kit's splicing feature. When a peer disconnects while a splice is being negotiated (but before signatures are exchanged), the software now emits a SpliceFailed event so the user's wallet knows the splice attempt is dead and can unlock any reserved funds. Previously, the internal splice state was reset on disconnect but no event was emitted, which could leave a wallet waiting indefinitely for a splice that would never complete.

Recommended action

Treat as a normal bug-fix patch. Reviewers should verify that SpliceFailed is emitted exactly once per abandoned splice and that no double-event occurs on both sides of a disconnect. No immediate security response is indicated.

Security signals we found

01

Missing event emission on disconnect could cause wallet-level fund-locking / UX failure

02

State cleanup without notification is a consistency bug in protocol state machine

03

Patch adds explicit SpliceFailed event for abandoned splice negotiation

04

No cryptographic, memory-safety, or remote-exploitable primitive is changed

Risk score

Why this scored 32/100

Our methodology →
Potential impact 8/30
Exploitability 3/25
Stealth signal 4/15
Affected reach 6/15
Confidence 7/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.