mirror of
https://github.com/lightninglabs/loop
synced 2024-11-11 13:11:12 +00:00
8d7a272fdd
This commit fixes a possible exploit by the loop server, where - in a loop out - the server could claim money off-chain, without publishing an on-chain swap htlc. The server could do this by responding with a regular invoice, whose hash is different than the hash in the NewLoopOutSwap request. To prevent the exploit, we validate that the hash of the swap invoice is equal to the hash the client generated. |
||
---|---|---|
.. | ||
fees.go | ||
htlc.go | ||
keychain.go | ||
net.go | ||
tx.go |