Here are the scripts found in BOLT 03.

Offered HTLC Outputs:

enter image description here

2nd stage output script:

enter image description here

Why not just use one pubkey, like localpubkey?

1 Answer 1


The split is intentional, and allows for trustless watching of revoked transactions, which is often outsourced with the help of watchtowers.

From Bolt3

Splitting the local_delayedpubkey, which is required for the penalty transaction, allows it to be shared with the watcher without revealing localpubkey; even if both peers use the same watcher, nothing is revealed.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.