delvingbitcoin

Batched Splicing Considered Risky

Batched Splicing Considered Risky

Original Postby ZmnSCPxj

Posted on: November 8, 2023 17:58 UTC

The existing splice design in Lightning Network transactions involves two sets of commitment transactions: one set for before the splice (pre-splice) and another set for after the splice (post-splice).

This structure is adequate when dealing with the splicing of funds in a single channel. However, challenges arise when considering the simultaneous splicing of multiple channels within a single batched transaction. Such scenarios might include a node desiring to transfer funds out of one channel and into another.

A significant issue with the current design becomes apparent during theft attempts. Specifically, if an attacker publishes a revoked commitment transaction for one channel, it might block the confirmation of the splice transaction for all other involved channels. This potential vulnerability is exacerbated in situations where the cost of attempting theft is minimal or non-existent. For instance, channels that were opened with funds from only one party and have never facilitated incoming transactions for the attacker pose little to no risk for attempting theft. In these cases, the victim has a strong incentive to remove their funds from the compromised channel through splicing.

This overview highlights critical considerations for enhancing the security and functionality of splice transactions within the Lightning Network, especially when managing funds across multiple channels simultaneously. The need for a design that can accommodate the complexities of batched splice transactions without exposing users to increased risks of theft is evident.