Full Disclosure: CVE-2023-40231 / CVE-2023-40232 / CVE-2023-40233 / CVE-2023-40234 "All your mempool are belong to us"

Posted by Matt Morehouse

Oct 16, 2023/22:10 UTC

The email discusses two main ways of spending an "offered" HTLC txout. The first option involves a presigned multisig covenant transaction that pays to the offerer, also known as the HTLC-timeout transaction. This option can only be spent by the offerer since they hold the presigned covenant. The second option requires a preimage and the receiver's signature, and can only be spent by the receiver.

To understand the exact script used for these options, a link is provided to the GitHub repository: https://github.com/lightning/bolts/blob/master/03-transactions.mdoffered-htlc-outputs.

In summary, the email explains the two methods of spending an "offered" HTLC txout and provides a link to the specific script used for reference.

Link to Raw Post

Thread Summary (69 replies)

Oct 16 - Nov 17, 2023

Bitcoin Logo

TLDR

Join Our Newsletter

We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.

Explore all Products

ChatBTC imageBitcoin searchBitcoin TranscriptsSaving SatoshiBitcoin Transcripts Review
Built with 🧡 by the Bitcoin Dev Project
View our public visitor count

We'd love to hear your feedback on this project?

Give Feedback