Archives/loop - loop - blob42 source forge

Commit Graph

Author	SHA1	Message	Date
Bjorn Olav Jalborg	8d7a272fdd	loop+loopout: validate hash of swap invoice This commit fixes a possible exploit by the loop server, where - in a loop out - the server could claim money off-chain, without publishing an on-chain swap htlc. The server could do this by responding with a regular invoice, whose hash is different than the hash in the NewLoopOutSwap request. To prevent the exploit, we validate that the hash of the swap invoice is equal to the hash the client generated.	5 years ago
Olaoluwa Osuntokun	f552bc06b1	utils: remove utils package in favor of new swap package	5 years ago

Author

SHA1

Message

Date

Bjorn Olav Jalborg

8d7a272fdd

loop+loopout: validate hash of swap invoice

This commit fixes a possible exploit by the loop server, where
- in a loop out - the server could claim money off-chain, without
publishing an on-chain swap htlc.

The server could do this by responding with a regular invoice, whose hash
is different than the hash in the NewLoopOutSwap request. To prevent
the exploit, we validate that the hash of the swap invoice is equal to the
hash the client generated.

Olaoluwa Osuntokun

f552bc06b1

utils: remove utils package in favor of new swap package

2 Commits (a473ab5d79dc7c1f6167854ed4ff52dfb040f04b)