A collection of scripts to steal BTC from Lightning Network enabled custodial services. Only for educational purpose! Share your findings only when design flaws are fixed.

Last update: Oct 15, 2022

Overview

Lightning Network Fee Siphoning Attack

LN-fee-siphoning is a collection of scripts to subtract BTC from Lightning Network enabled custodial services by means of placing a node-in-the-middle and forcing routing and fee collection.

Originally described in 2018 by u/juscamarena (Bitrefill LN presentation) and independently executed at scale by Reckless_Satoshi

Read the full explanation on how this attack works in: LN+, Reddit or Y'alls .

This repository is intended for educational purpose only. It should serve to any new service onboarding in the Lightning Network understand what an attacker could do by abusing the withdrawal fee policy.

Please behave nicely. The scripts in this repository do not work anymore, as the services have fixed the flaws before publication. Do not open an issue to discuss exploits that might be viable (will be deleted). You can contact Reckless_Satoshi at [email protected]

You might also like...

Get an SNS alert for High Severity GuardDuty findings

Automation AWS-GuardDuty findings Get an SNS alert for High Severity GuardDuty findings Problem: Getting notified when there is Red finding in AWS Gua

4 Nov 18, 2022

🐙 Share your Github stats for 2020 on Twitter

Year on Github 🐙 Share your Github stats for 2020 on Twitter. This project contains a small web app that let's you share stats about your Github acti

129 Dec 25, 2022

KiKi bare dogs can share your joys and sorrows with you.

Kiki-FangLee-DiscordBot KiKi bare dogs can share your joys and sorrows with you. $help: Kiki will show you my talent, aw-aw. $list: Show Kiki's knowle

0 Feb 12, 2022

A quick and dirty script to scan the network, find default credentials on services and post a message to a Slack channel with the results.

11 Jun 3, 2022

Helpful aws-boto3-scripts - Python3 scripts that include threading to quickly perform a few checks on any keys added to an input file

Helpful aws boto3 scripts python3 scripts that include threading to quickly perf

16 Sep 27, 2022

This is a simple collection of instructions and scripts to accompany the computerphile video about mininet and openflow.

How to get going. This project should work on Linux or MacOS. I used Ubuntu 20.04 and provide some notes here. Note, this is certainly not intended as

70 Jan 2, 2023

Allows you to easily share bookmarks from Raindrop.io in Telegram chats.

Allows you to easily share bookmarks from Raindrop.io in Telegram chats. As well as save links/photos/longreads from Telegram right into Raindrop.io. Join us, we have a nice 'reader mode' :)

36 Dec 19, 2022

For specific function. For my own convenience. Remind owner to share data to another DITO user.

1 Dec 14, 2021

Google scholar share - Simple python script to pull Google Scholar data from an author's profile

google_scholar_share Simple python script to pull Google Scholar data from an au

9 Sep 15, 2022

Owner

Reckless_Satoshi

GitHub

A pyrogram simple bot for Educational purpose.

A pyrogram simple bot for Educational purpose. To Learn More check at @PyrogramBot or on Documentation Mandatory variables API_ID - Get It From my.tel

10 Dec 6, 2022

Discord bot code to stop users that are scamming with fake messages of free discord nitro on servers in order to steal users accounts.

AntiScam Discord bot code to stop users that are scamming with fake messages of free discord nitro on servers in order to steal users accounts. How to

94 Dec 15, 2022

You can share your Chegg account for answers using this bot with your friends without getting your account blocked/flagged

Chegg-Answer-Bot You can share your Chegg account for answers using this bot with your friends without getting your account blocked/flagged Reuirement

27 Dec 24, 2022

Image Tooᥣs Bot I specialize for logo design Services with Amazing logo Creator Platform and more tools

10 Oct 21, 2022

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

aws-allowlister Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance fr

189 Dec 8, 2022

Python script to replace BTC adresses in the clipboard with similar looking ones, whose private key can be retrieved by a netcat listener or similar.

BTCStealer Python script to replace BTC adresses in the clipboard with similar looking ones, whose private key can be retrieved by a netcat listener o

6 Jun 7, 2022

🚧 finCLI's own News API. No more limited API calls. Unlimited credible and latest information on BTC, Ethereum, Indian and Global Finance.

?? finCLI's own News API. No more limited API calls. Unlimited credible and latest information on BTC, Ethereum, Indian and Global Finance.

5 Jun 16, 2022