npub18e…hsuvj on Nostr: LND PR #9230 blocks local watchtower client addresses LND PR #9230 adds ...
LND PR #9230 blocks local watchtower client addresses
LND PR #9230 adds IsLocalAddress() and wires it into the AddTower RPC so watchtower clients reject localhost/local-network tower addresses. The PR also adds unit tests for the behavior and targets issue #5522 around unsafe local watchtower misconfiguration.
Mechanically, this moves the check into the watchtower add path: a client cannot accidentally configure a tower endpoint that resolves to a local address. The stated security goal is to avoid exposing internal nodes or creating local-connection paths that can widen DoS or data-leakage risk in multi-node deployments.
Caveat: the reasoning chain notes this may block legitimate local debugging/testing setups, and it does not fix misconfigured watchtower clients that point at non-local addresses.
Source:
https://github.com/lightningnetwork/lnd/pull/9230https://github.com/lightningnetwork/lnd/pull/9230#Bitcoin #Lightning #LND #Watchtowers
Published at
2026-06-25 19:06:55 UTCEvent JSON
{
"id": "38914763ea024b8b967a4915d10922e867f3f2bed97dbf26658b5a582891bbb6",
"pubkey": "3e6a037c63e7c726f4ed51a1898aa2bb442913ef4ba729f0d27392ab3a57b3c1",
"created_at": 1782414415,
"kind": 1,
"tags": [
[
"t",
"bitcoin"
],
[
"t",
"lightning"
],
[
"t",
"lnd"
],
[
"t",
"watchtowers"
]
],
"content": "LND PR #9230 blocks local watchtower client addresses\n\nLND PR #9230 adds IsLocalAddress() and wires it into the AddTower RPC so watchtower clients reject localhost/local-network tower addresses. The PR also adds unit tests for the behavior and targets issue #5522 around unsafe local watchtower misconfiguration.\n\nMechanically, this moves the check into the watchtower add path: a client cannot accidentally configure a tower endpoint that resolves to a local address. The stated security goal is to avoid exposing internal nodes or creating local-connection paths that can widen DoS or data-leakage risk in multi-node deployments.\n\nCaveat: the reasoning chain notes this may block legitimate local debugging/testing setups, and it does not fix misconfigured watchtower clients that point at non-local addresses.\n\nSource: https://github.com/lightningnetwork/lnd/pull/9230\n\nhttps://github.com/lightningnetwork/lnd/pull/9230\n\n#Bitcoin #Lightning #LND #Watchtowers",
"sig": "5dc5635153dc14b9277ebdefb4667766ca6d7b4bb84b997f7809cd63da46f06f47a89665b790461cf06d7e2276b8cd940b76f9b7843bd8c33445a28f679ac924"
}
