Full Disclosure: CVE-2023-40231 / CVE-2023-40232 / CVE-2023-40233 / CVE-2023-40234 "All your mempool are belong to us"

Posted by Peter Todd

Oct 16, 2023/19:13 UTC

The email discusses the need for a more detailed explanation of an exploit related to HTLC (Hashed Time-Lock Contract) transactions. The author suggests that in order for people to fully understand the exploit, additional information should be provided. Specifically, they highlight the situation where two different parties can spend the same HTLC txout without the first party having the right to spend it based on their knowledge of the HTLC-preimage.

The author emphasizes the importance of explaining how this scenario is possible and recommends providing a comprehensive explanation to ensure clarity on the matter. It is implied that the current level of understanding may be insufficient and that a more detailed explanation is necessary to grasp the exploit fully. However, the specific details of the exploit or any potential solutions are not mentioned in the given context.

It is worth noting that the email does not provide any links or external references related to the topic being discussed.

Link to Raw Post

Thread Summary (69 replies)

Oct 16 - Nov 17, 2023

Bitcoin Logo

TLDR

Join Our Newsletter

We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.

Explore all Products

ChatBTC imageBitcoin searchBitcoin TranscriptsSaving SatoshiBitcoin Transcripts Review
Built with 🧡 by the Bitcoin Dev Project
View our public visitor count

We'd love to hear your feedback on this project?

Give Feedback