Full Disclosure: CVE-2023-40231 / CVE-2023-40232 / CVE-2023-40233 / CVE-2023-40234 "All your mempool are belong to us"

Posted by Peter Todd

Oct 21, 2023/02:43 UTC

The email discusses the topic of storing ephemeral data, specifically focusing on HTLC (Hashed Time-Lock Contract) transactions and commitment transactions in the context of the Lightning Network. It highlights that due to the nature of Lightning's use of disclosed secrets to invalidate old state, it is not necessary to keep every signature from the counterparty indefinitely.

The email mentions that for each channel, there is a requirement of having a minimum incremental relay fee of 1sat/vByte by default. This information is relevant in the context of discussing the need for combining multiple SIGHASH_SINGLE transactions together. The email explains that the savings obtained from combining these transactions are not significant, as the reduction in size is only around 18 bytes for certain fields such as nVersion, nLockTime, txin, and txout size.

Furthermore, the email mentions that the HTLC-timeout transaction occupies around 166.5 vBytes, resulting in a savings of just 11% when combined with other transactions. However, if there is a need to fee bump and add an additional input, the space occupied by the input and the need for a change output might make a pre-signed transaction a better option.

It is important to note that the email assumes the presence of numerous HTLCs in flight that need to be spent, although this may not always be the case. In conclusion, the email provides insights into the optimization possibilities and considerations when dealing with ephemeral data storage and transaction efficiency in the context of HTLC and commitment transactions within the Lightning Network.

For more details, you can refer to the original email at: [https://petertodd.org 'peter'[:-1]@petertodd.org].

Link to Raw Post

Thread Summary (69 replies)

Oct 16 - Nov 17, 2023

Bitcoin Logo

TLDR

Join Our Newsletter

We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.

Explore all Products

ChatBTC imageBitcoin searchBitcoin TranscriptsSaving SatoshiBitcoin Transcripts Review
Built with 🧡 by the Bitcoin Dev Project
View our public visitor count

We'd love to hear your feedback on this project?

Give Feedback