Re: [Lightning-dev] Liquidity griefing for 0-conf dual-funded txs

2023-06-07 Thread Bastien TEINTURIER
Hey Antoine, Sure, I agree with you, the usual mempool pinning issues still apply regardless of whether we use 0-conf or not. And we must solve them all at some point! I think a reasonable mid-term solution is to use v3 transactions for channel funding and splicing, with the obvious caveat that

Re: [Lightning-dev] Liquidity griefing for 0-conf dual-funded txs

2023-06-06 Thread Antoine Riard
Hi Bastien, > This can be fixed by using a "soft lock" when selecting utxos for a non > 0-conf funding attempt. 0-conf funding attempts must ignore soft locked > utxos while non 0-conf funding attempts can (should) reuse soft locked > utxos. If my understanding of the "soft lock" strategy is

Re: [Lightning-dev] Liquidity griefing for 0-conf dual-funded txs

2023-05-10 Thread Bastien TEINTURIER
Hey Matt, Zman, > I propose that we DO lock our UTXOs after tx_completes have been > exchanged IF we are the only contributor. We don't have to worry > about liquidity griefing in this case, since the peer has no > tx_signatures to withhold from us. While this is true for dual funding, this

Re: [Lightning-dev] Liquidity griefing for 0-conf dual-funded txs

2023-05-09 Thread ZmnSCPxj via Lightning-dev
Good morning Matt, and t-bast, Your proposal basically means "do not dual-fund 0-conf". You might as well use the much simpler openv1 flow in that case, just because it is simpler. Regards, ZmnSCPxj Sent with Proton Mail secure email. --- Original Message --- On Tuesday, May 9th,

Re: [Lightning-dev] Liquidity griefing for 0-conf dual-funded txs

2023-05-09 Thread Matt Morehouse
Hi Bastien, In general, 0-conf is only safe when WE are the only contributor to the channel, otherwise the peer could double spend us. The problem you seem to be describing is that we might double-spend ourselves if we don't lock our 0-conf UTXOs at some point. I propose that we DO lock our

Re: [Lightning-dev] Liquidity griefing for 0-conf dual-funded txs

2023-05-08 Thread ZmnSCPxj via Lightning-dev
Good morning t-bast, and list, Dual-funded 0-conf can be made safe in the following case: * If the initiator uses swap-in-potentiam addresses (with initiator as Alice, acceptor as Bob). If the initiator stalls, then the acceptor can retaliate by refusing to sign the swap-in-potentiam UTXOs

[Lightning-dev] Liquidity griefing for 0-conf dual-funded txs

2023-05-05 Thread Bastien TEINTURIER
Good morning list, One of the challenges created by the introduction of dual funded transactions [1] in lightning is how to protect against liquidity griefing attacks from malicious peers [2]. Let's start by reviewing this liquidity griefing issue. The dual funding protocol starts by exchanging