HTLC output aggregation as a mitigation for tx recycling, jamming, and on-chain efficiency (covenants)

The recent discussions around transaction recycling in HTLC (Hashed Time-Locked Contracts) have highlighted the need for more efficient blockchain mechanisms, especially in the context of anchor channel types where adding inputs to transactions without violating signatures is possible. Unlike legacy channel types where fees had to be taken directly from HTLC outputs and agreed upon by channel counterparties during signing, newer methods allow for more flexible and efficient fee management but introduce vulnerabilities like transaction recycling.

A promising solution to address these issues is HTLC output aggregation. This approach entails collapsing all HTLC outputs on a commitment transaction into a single output. This aggregation not only simplifies the transaction structure but also enhances chain efficiency by allowing the spender to claim only the portion of the output they're entitled to, which can then be allocated to fees or other outputs as determined by the covenant governing the transaction. The implementation of such an aggregated output requires the use of a covenant and could potentially limit the number of active HTLCs to prevent the commitment transaction from becoming overly large, thus mitigating channel jamming attacks facilitated by small capital injections.

The introduction of covenants that restrict the number of inputs or manage how outputs are spent can make transactions self-sustaining. In this model, the spender of an aggregated HTLC output can autonomously manage their portion without external input, significantly reducing the complexity and cost associated with managing multiple HTLCs. Notably, implementing such solutions might necessitate innovations like Eltoo to prevent undesirable fee siphoning scenarios.

Moreover, the aggregated output model transforms the dynamics of slot jamming. Traditional concerns about the number of active HTLCs inflating the size of a commitment transaction and thereby facilitating cheap jamming attacks are alleviated. While this doesn't entirely eliminate the problem—since the process of claiming HTLCs on-chain still incurs costs due to chain fees—it does fundamentally change the economics by decoupling the number of HTLCs from the transaction size, focusing instead on the size of witness data required at claim time.

On the downside, realizing these benefits hinges on the development of new covenant primitives at the Layer 1 (L1) level, which may be a complex and time-consuming endeavor. Current proposals like OP_CHECKCONTRACTVERIFY offer intriguing possibilities for creating efficient and secure scripts for handling HTLCs, but more research and development are necessary to bring these ideas to fruition.

In summary, while the concept of HTLC output aggregation presents a robust framework for enhancing transaction efficiency and security in blockchain protocols, it requires significant advancements in covenant technology and blockchain script capabilities. Such innovations could greatly reduce the impact of transaction recycling and slot jamming, paving the way for more scalable and robust blockchain networks.