Replying to Avatar JackTheMimic

By what mechanism? The node has the XPRV secret and it is not propagated elsewhere. So, this is akin to having a hot wallet on your device and someone, knowing your password/passphrase, signing a transaction, and finalizing all without your knowledge.

"Issue with LND + Lightning" is almost certainly user error. Stay safe, route through Tor, only connect vetted lightning wallet applications to your node.
Avatar
Bill Cypher 10mo ago

I think it was LN side not on chain.

Reply to this note

Please Login to reply.

Discussion

Avatar
JackTheMimic 10mo ago

You still sign channel state revisions with the on-chain key. I forget where I saw it but it was a compromised device not a LND specific issue. I.E. could have affected any "Hot wallet" type of program.

Avatar
Bill Cypher 10mo ago

True, but it is semi automated. Add in automated systems like custodians running accounts on top of the typical pleb node and there are plenty of places for excess payout bugs to sneak in.