Posted by Antoine Riard
Jul 27, 2025/21:40 UTC
The discussion highlights the complexities and challenges in managing non-standard inputs within multi-party transaction flows, particularly in the context of collaborative transactions like those found in coinjoin or lightning dual-funding scenarios. The concern is raised about participants who deliberately contribute non-standard inputs to a transaction, knowing that the finalizing software may not check for standardness, which could lead to transaction propagation failure. This is identified as a potential Denial of Service (DoS) attack against liquidity allocation processes in systems where liquidity is scarce.
In addressing these concerns, the example of core-lightning's implementation is cited, showing how it performs script sanitization during collaborative flow construction to ensure input standardness. This process is crucial to prevent the DoS attacks described, but it also raises questions about how to effectively distinguish between trusted and non-trusted participants in a transaction without requiring manual intervention by system administrators at inconvenient times.
The conversation further explores the introduction of a new limit on inputs spending legacy scripts as a measure to mitigate such DoS risks. However, the effectiveness of this limit is debated, with examples provided to illustrate how transactions that are currently considered standard might run afoul of this new restriction, thereby becoming "pathological". The correspondence underscores the importance of multi-party transaction software adhering to new limits to avoid facilitating these types of problematic transactions, although it acknowledges that widespread deployment of new policy rules across the network typically lags behind their introduction in bitcoin core releases.
Moreover, the exchange includes a link to an email detailing the DoS threat model in a realistic manner, emphasizing the ongoing challenge of dealing with non-standard inputs and the necessity of maintaining updated and informed protocol practices to safeguard against potential attacks.
TLDR
We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.
We'd love to hear your feedback on this project?
Give Feedback