You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the current implementation, if an attempt to open a channel to a destination fails, the associated fees are locked away indefinitely. This issue arises because the system does not have a mechanism to refund or reclaim fees for unsuccessful channel openings. As a result, users lose their funds permanently, leading to financial losses and reduced trust in the platform.
Risk
Users permanently lose their fees, leading to direct financial harm to the users (Domain operators).
Mitigation
Currently only an opened channel can be closed. We recommend to also allow closing a channel in ChannelState::Initiated state to allow to recover funds.
The text was updated successfully, but these errors were encountered:
vanhauser-thc
changed the title
[LOW] XDM - Fees are locked away forever if a channel to a destination is not successfully opened
[Low] XDM - Fees are locked away forever if a channel to a destination is not successfully opened
May 30, 2024
Channel can be in init state, if the dst_chain does not have the src_chain in the allowlist. If we allow closing the channels in the init state, then there could be small DDOS. Since user can claim their reserve back, they will open many channels to dst_chain and dst_chain will reject opening channel and then user can close the channel and claim their deposit. Ofcourse there is fee to initiate channel open request but its not that big.
I'm thinking protocol could take a percentage of reserve if the channel is in init state. This is dis-incentivze the user to open many channels to dst_chain that does not allow src_chain.
thoughts @dariolina
Issue Description
In the current implementation, if an attempt to open a channel to a destination fails, the associated fees are locked away indefinitely. This issue arises because the system does not have a mechanism to refund or reclaim fees for unsuccessful channel openings. As a result, users lose their funds permanently, leading to financial losses and reduced trust in the platform.
Risk
Users permanently lose their fees, leading to direct financial harm to the users (Domain operators).
Mitigation
Currently only an opened channel can be closed. We recommend to also allow closing a channel in
ChannelState::Initiated
state to allow to recover funds.The text was updated successfully, but these errors were encountered: