Breach of contract? [combined summary]



Individual post summaries: Click here to read the original discussion on the lightning-dev mailing list

Published on: 2015-07-30T02:33:21+00:00


Summary:

The discussion revolves around the implications of using Hashed Timelock Contracts (HTLCs) in the Lightning Network. Two main implications are highlighted. Firstly, constant monitoring of the blockchain is required due to the low interval of HTLC-TIMEOUT. This is necessary to avoid losing money, especially when the channel balance is heavily tilted in one direction. Secondly, using HTLCs results in doubling the timelock on LN payments, which can lead to higher fees and potentially less graph centralization.Joseph Poon and Rusty Russell discuss the interlink between HTLC timeout and OP_CSV revocation. They also address the need for a contestation period to prevent older versions of transactions from being broadcasted through credible threats. The email exchange highlights the importance of properly delaying outputs redeemable by a party and provides fixes for issues found in the initial draft.The conversation further explores the risk of broadcasting older commitments and stealing HTLC payouts. To mitigate this risk, it is suggested to have reserve funds available and ensure that the total value of HTLCs remains below one's own reserve balance. This solution works better with dual-funder models and requires shallow rebalancing for single-funder scenarios. The email also advises maintaining a permanent reserve above the value encumbered in HTLCs to maximize security against uncooperative counterparties.Christopher Jamthagen raises concerns about the security and invalidation of HTLCs. He questions the ability of receivers to use the pre-image to spend the output after the CLTV has expired. Rusty Russell agrees with this concern but suggests eliminating the HTLC through a commitment transaction update. Adding an additional delay is considered overengineering.Another email conversation discusses the design of HTLCs and their invalidation process. It is explained that HTLCs have a built-in contestation period where the party broadcasting the Commitment Transaction must wait before the payment goes back to themselves. The implications of dual anchor/funding versions and the use of OP_CSV are also explored. The tradeoff between increased time delay and blockchain monitoring frequency is discussed, along with the benefits of a SIGHASH_NOINPUT model.Overall, the discussions highlight various implications and potential solutions related to the use of HTLCs in the Lightning Network, addressing issues such as constant monitoring, reserve balance, invalidation, and security concerns.


Updated on: 2023-07-31T18:10:01.215407+00:00