Miners Dust Inflation attacks on Lightning Network



Summary:

The conversation is about setting up an `htlc_minimum_msat` higher than remote's `dust_limit_satoshis`. This can be done to forbid dust HTLC, but it will outlaw low-value payments. The cost-to-spend will increase with fees going higher and HTLC outputs being encumbered. It is suggested that an honest forwarder can hold an HTLC for a while once it notices that the next hop has a bunch of dusty HTLCs in-flight that are beyond the negotiated `max_dust_htlc_value_in_flight_msat`, which might help reliability of micropayments slightly, but there is still the reduction of reliability.Negotiating a new `max_dust_htlc_value_in_flight_msat` enforced by HTLC recipient can mitigate attacks, therefore expressing its maximum trust tolerance with regards to dust. However, this will lead to reduced reliability on micropayments. Even without a spec change, such a setting may be enforced by a forwarding node by refusing to forward an HTLC once a certain level of incoming dust HTLCs are currently in-flight. The attack requires that the forwarding node actually forward the HTLC, after all. It is suggested that adding this to the spec does have the advantage that an honest forwarder can hold an HTLC for a while once it notices that the next hop has a bunch of dusty HTLCs in-flight that are beyond the negotiated `max_dust_htlc_value_in_flight_msat`, which might help reliability of micropayments slightly, but there is still the reduction of reliability. Not to mention that the easiest code change to respect such a limit would be simply to fail forwarding anyway.


Updated on: 2023-06-03T01:27:14.296076+00:00