2

In Eltoo the set-up phase is similar to Lightning. You fund a n-of-n multisig (usually 2-of-2). Of course you don't want to publish this until you have a bail-out possibility - called "settlement transaction" here.

But what I found out is this "setup transaction" is exactly the same as later "updates" - you could also call it Tu0. So is there any need to even broadcast this first transaction to the blockchain (before doing further ones)? Or is it enough if both parties just keep the properly signed Tu0 (with both signatures)? What else do you need in case of an uncooperative close? You broadcast Tu0, latest Tui and (time-locked) Tsi ? I guess one problem would be the other party trying to "double-spend" his input into the multisig?

Improve this question

1 Answer 1

Reset to default
2

I think you have answered your question yourself in the last question that you raised. The problem with not publishing Tu0 is that the funder of the channel could double spend the input of Tu0 and in that case "steal" all the money from the channel. so with eltoo we still need the bitcoin network / blockchain give proof of the existence of funds in the 2-2 multisig

Improve this answer
3
  • Yeah, I realized when writing the question that double spend could be a problem. What about any "clever hacks" like requiring inputs to have nSequence 0xffffffff to prevent replace-by-fee? And broadcasting the 2-of-2 with 0 fees to the mempool then. Or what exactly is the minimum transaction fee (since else you could have some sort of DoS)?
    – fiction
    Commented Dec 2, 2019 at 21:43
  • No DoS since UTXO set is limited. But still silly, because the 2-of-2 will eventually need to be mined for the Tui to be "attached" to it and I basically prevent this with the low fee. Guess you can't have the cake and also eat it :)
    – fiction
    Commented Dec 2, 2019 at 22:01
  • Or could you use the same SIGHASH_SINGLE hack that is also described in the paper for Tu-s? Like have a 0 fee 2-of-2 lurking around in the mempool, so if eveybody is cooperating there is no cost associated (and people cannot double spend), but when other party is uncooperative you can "pump-up" Tu0 and do the rest normally after that one gets mined. I am probably again missing something?
    – fiction
    Commented Dec 2, 2019 at 22:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.