Skip to content

Shouldn't Bolt12Offer/RefundContext be HMAC'd? #3427

Closed
@TheBlueMatt

Description

@TheBlueMatt

Anyone can create a blinded path to us with whatever data they want in it, including the Bolt12OfferContext. While they have to have a payment_secret that matches the amount we expected to receive, this may be extracted from a BOLT 11 invoice. Then someone can forge a payment for an OfferId even if it doesn't match the amount we expected for that offer.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions