Connect with us
DAPA Banner

Crypto World

The Lightning Network isn’t ‘helplessly broken’

Published

on

The Lightning Network isn’t ‘helplessly broken’

A post from Udi Wertheimer a few weeks ago made headlines across crypto media with a stark claim: the Lightning Network is “helplessly broken” in a post-quantum world, and its developers can do nothing about it. The headline traveled fast. For businesses that have built real payment infrastructure on Lightning or are evaluating it, the implications were unsettling.

It deserves a measured response.

Wertheimer is a respected Bitcoin developer, and his underlying concern is legitimate: quantum computers, if they ever become sufficiently powerful, pose a real long-term challenge to the cryptographic systems on which Bitcoin and Lightning depend. That part is true, and the Bitcoin development community is already working on it seriously. But the framing of Lightning as “helplessly broken” obscures more than it reveals, and businesses making infrastructure decisions deserve a clearer picture.

What Wertheimer got right

Lightning channels require participants to share public keys with their counterparty when opening a payment channel. In a world where cryptographically relevant quantum computers (CRQCs) exist, an attacker who obtains those public keys could theoretically use Shor’s algorithm to derive the corresponding private key, and from there, steal funds.

Advertisement

This is a real structural property of how Lightning works. What the headline leaves out

The threat is far more specific and far more conditional than “your Lightning balance can be stolen.”

First, the channels themselves are protected by a hash while they are open. Funding transactions use P2WSH (Pay-to-Witness-Script-Hash), meaning the raw public keys inside the 2-of-2 multisig arrangement are hidden onchain for as long as the channel remains open. Lightning payments are also hash-based, routed through HTLCs (Hashed Time-Lock Contracts), which rely on hash preimage revelation rather than exposed public keys. A quantum attacker passively watching the blockchain cannot see the keys they would need.

The realistic attack window is much narrower: a force-close. When a channel is closed, and a commitment transaction is broadcast onchain, the locking script becomes publicly visible for the first time, including the local_delayedpubkey, a standard elliptic-curve public key. By design, the node that broadcasts it cannot immediately claim its funds: a CSV (CheckSequenceVerify) timelock, typically 144 blocks (about 24 hours), must first expire.

In a post-quantum scenario, an attacker watching the mempool could see that a commitment transaction confirms, extract the now-exposed public key, run Shor’s algorithm to derive the private key and attempt to spend the output before the timelock expires. HTLC outputs at force-close create additional windows, some as short as 40 blocks, roughly six to seven hours.

Advertisement

This is a real and specific vulnerability. But it is a timed race against an attacker who must actively solve one of the hardest mathematical problems in existence, within a fixed window, for each individual output they want to steal. It is not a passive, silent drain on every Lightning wallet simultaneously.

The quantum hardware reality check

Here is the part that rarely makes it into the headlines: cryptographically relevant quantum computers do not exist today, and the gap between where we are and where we would need to be is enormous.

Breaking Bitcoin’s elliptic curve cryptography requires solving the discrete logarithm on a 256-bit key, a roughly 78-digit number, using millions of stable, error-corrected logical qubits running for an extended period. The largest number ever factored using Shor’s algorithm on actual quantum hardware is 21 (3 × 7), achieved in 2012 with significant classical post-processing assists. The most recent record is a hybrid quantum-classical factoring of a 90-bit RSA number, impressive progress, but still roughly 2⁸³ times smaller than what it would actually take to break Bitcoin.

Google’s quantum research is real and worth watching. The timelines discussed by serious researchers range from optimistic estimates for the late 2020s to more conservative projections for the 2030s or beyond. None of that is “your Lightning balance is at risk today.”

Advertisement

The development community is not sitting still

Wertheimer’s framing, that Lightning developers are “helpless”, is also out of step with what is actually happening. Since December alone, the Bitcoin development community has produced more than five serious post-quantum proposals: SHRINCS (324-byte stateful hash-based signatures), SHRIMPS (2.5 KB signatures across multiple devices, roughly three times smaller than the NIST standard), BIP-360, Blockstream’s hash-based signatures paper, and proposals for OP_SPHINCS, OP_XMSS, and STARK-based opcodes in tapscript.

The correct framing is not that Lightning is broken and unfixable. It is that Lightning, like all of Bitcoin, and like most of the internet’s cryptographic infrastructure, requires a base-layer upgrade to become quantum-resistant, and that work is underway.

What this means for businesses building on Lightning today

Lightning processes real payment volume for real enterprises today, iGaming platforms, crypto exchanges, neobanks, and payment service providers moving money globally at fractions of a cent with instant finality. The question businesses should be asking is not whether to abandon Lightning based on a theoretical future threat, but whether the teams building Lightning infrastructure are paying attention to what is coming and planning accordingly.

The answer, based on the volume and quality of post-quantum research happening in the Bitcoin development community right now, is yes.

Advertisement

The Lightning Network is not helplessly broken. It faces the same long-horizon cryptographic challenge as the entire digital financial system, and it has a development community actively working to address it. That is a different story from the one the headline told.

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Kelp DAO hits back at LayerZero for trying to shift the blame after a massive exploit

Published

on

Kelp DAO hits back at LayerZero for trying to shift the blame after a massive exploit

The popular Spiderman meme showing three identical superheroes pointing fingers at each other is having its crypto moment today.

Kelp DAO is set to push back on LayerZero’s post-mortem of Sunday’s $290 million exploit, which essentially blames Kelp, a L2 source familiar with the matter told CoinDesk. Kelp plans to dispute the cross-chain messaging firm’s claim that it ignored repeated warnings to move away from a single-verifier setup. CoinDesk has reviewed and verified the memo Kelp plans to publish.

Kelp is a liquid restaking protocol that takes user-deposited ether, routes it through a yield-generating system called EigenLayer, and issues a receipt token, rsETH, in exchange.

LayerZero is the cross-chain messaging infrastructure that moves rsETH between blockchains, using entities called DVNs (decentralized verifier networks) to verify whether a cross-chain transfer is valid.

Advertisement

On Saturday, attackers drained 116,500 rsETH, worth about $290 million, from Kelp’s LayerZero-powered bridge by poisoning the servers that LayerZero’s verifier relied on to check transactions.

Kelp, the source said, is planning on saying the DVN that was compromised via what it calls a “sophisticated state-sponsored attack” was LayerZero’s own infrastructure, not a third-party verifier.

Attackers compromised two of LayerZero’s own servers that check whether cross-chain transactions are legitimate, then flooded the backup servers with junk traffic to force LayerZero’s verifier onto the compromised ones.

All of that infrastructure was built and run by LayerZero, not Kelp, the source claimed.

Advertisement

The source contested LayerZero’s framing of the “1/1 configuration” as a fringe choice made against guidance. LayerZero’s post-mortem said KelpDAO chose a 1-of-1 DVN setup despite expressing recommendations to configure multi-DVN redundancy.

A “1/1 configuration” means only a single validator must sign off on a cross-chain message for the bridge to act on it, leaving the system with no second check to catch a compromised or forged instruction. A multi-validator configuration (such as 2/3, 3/5, etc.) ensures there is no single point of failure that can approve a forged message on its own.

They added that, through a direct communications channel with LayerZero, which has been open since July 2024, they produced no specific recommendation for Kelp to change the rsETH DVN configuration.

LayerZero’s own quickstart guide and default GitHub configuration point to a 1/1 DVN setup, the source told CoinDesk, adding 40% of protocols on LayerZero are currently using the same configuration.

Advertisement

The configuration Kelp ran also appears in LayerZero’s own V2 OApp Quickstart, where the sample layerzero.config.ts wires every pathway with one required DVN and no optional DVNs. That’s the same 1/1 structure.

Kelp’s core restaking contracts were not touched, and the exploit was isolated to the bridge layer, they added. Its emergency pause, 46 minutes after the drain, blocked two follow-up attempts that would have released an additional ~$200 million in rsETH.

CoinDesk reached out to LayerZero for comment on the story and didn’t hear back by the time of publication.

‘Deflecting responsibility’

Security researchers are also not buying LayerZero’s isolated framing, which pinned the blame on Kelp.

Advertisement

Kelp is a liquid restaking protocol. Its core competency is staking infrastructure, EigenLayer integration, and liquid staking token management. When integrating with LayerZero, Kelp relied on LayerZero’s documentation, their defaults, and their team’s guidance to make configuration decisions, the source claimed.

Yearn Finance core team developer Artem K, who is popularly known as @banteg on X, posted a technical review of LayerZero’s public deployment code and said that the reference setup ships with single-source verification defaults across every major chain, including Ethereum, BSC, Polygon, Arbitrum and Optimism.

That deployment also leaves a public endpoint exposed that leaks the list of configured servers to anyone who queries it.

Banteg flagged in his analysis that he can’t prove which configuration Kelp used, but noted that LayerZero usually asks new operators to use its default setup, which its post-mortem criticized.

Advertisement

Chainlink community manager Zach Rynes put it bluntly on X, alleging that LayerZero was “deflecting responsibility” for its own compromised infrastructure and accused the company of throwing Kelp under the bus for trusting a setup LayerZero itself supported.

As such, LayerZero has said it will no longer sign messages for any application running a single-verifier setup, forcing a protocol-wide migration.

Read more: ‘DeFi is dead’: crypto community scrambles after this year’s biggest hack exposes contagion risk

Source link

Advertisement
Continue Reading

Crypto World

Strategy boosts BTC stash to 800k with $2.5B for 34,164 BTC

Published

on

Crypto Breaking News

Strategy, Michael Saylor’s flagship vehicle and the largest public holder of Bitcoin, has surpassed 800,000 BTC in total holdings after its latest purchases. The company disclosed in an 8-K filing with the U.S. Securities and Exchange Commission that it bought 34,164 BTC for $2.54 billion between April 13 and 19, at an average price of $74,395 per coin.

The new purchase lifts Strategy’s total BTC under custody to 815,061 coins, purchased for $61.56 billion. The firm had about 780,897 BTC after a $1 billion buy just a week earlier. By coin count, the April tranche ranks as Strategy’s third-largest BTC acquisition, behind 55,500 BTC and 51,780 BTC purchases made in November 2024.

Key takeaways

  • New BTC haul: 34,164 BTC acquired for $2.54 billion (April 13–19), at an average price of $74,395 per coin.
  • Funding mix: Stretch (STRC), the perpetual preferred security, supplied about $2.18 billion (roughly 85.7% of the total proceeds); Class A common stock contributed about $366 million.
  • Record-pace activity via STRC ATM: The STRC at-the-market program delivered two consecutive days of heavy buying, with estimated BTC purchases rising to around 17,204 BTC across 11.9 million and 14.4 million shares sold, according to STRC Live—about a 518% surge versus the four-week average.
  • Cost basis and scale: The purchase price sits slightly below Strategy’s overall average cost basis, reinforcing the company’s long-standing commitment to accumulating BTC.
  • Future dividend signal: Strategy CEO Phong Le has signaled potential semi-monthly dividends for STRC, a unique feature among preferreds, a move the company says could be attractive.

Strategy expands its BTC stake with a mid-April buy

The363,164-BTC addition cements Strategy’s position as the world’s most prominent publicly traded Bitcoin holder. The deal, documented in an 8-K filing, shows the bulk of the purchase was executed through financing channels tied to STRC, the company’s perpetual preferred security. With the new BTC, Strategy’s total holdings stand at 815,061 BTC, a stake amassed for $61.56 billion to date.

For context, Strategy had been holding about 780,897 BTC after a $1 billion purchase a week prior, underscoring a rapid acceleration in accumulation over a short window. The new acquisition sits just below Strategy’s average cost of around $75,527 per BTC, illustrating a cautious approach to price levels over the course of the company’s investment program.

In a regulatory filing, Strategy confirmed the April purchases and reiterated that the company prioritizes a diversified approach to funding its Bitcoin stack, balancing debt-like instruments with equity capital. The size and cadence of the buys highlight how a very large corporate treasury can shape a single-asset narrative, particularly as BTC remains a focal point for corporate treasuries seeking to optimize risk/return over time.

Advertisement

STRC fuels the deal, underscoring the instrument’s role in Strategy’s strategy

The funding structure behind the latest BTC accumulation shows STRC playing a central role. The SEC filing indicates STRC generated $2.18 billion in proceeds from the sale of shares, accounting for roughly 85.7% of the total funding for the new purchase. By contrast, net proceeds from the sale of Class A common stock accounted for about $366 million.

Strategy’s leadership has repeatedly highlighted STRC as a key financing vehicle. Last week, co-founder and executive leadership signaled the potential for STRC to pay semi-monthly dividends, a rarity among preferred securities. In remarks cited by the filing, Strategy CEO Phong Le said, “If we were to move forward with paying STRC semi-monthly, we would be in category one, the only preferred in the world that pays semi-monthly dividends. We think this is unique and attractive.”

ATM program momentum and what it signals

The week’s activity also reflected STRC’s at-the-market program’s capacity to drive large, rapid purchases. STRC Live reported a new daily record on April 13 of about 7,741 BTC tied to the sale of 11.9 million STRC shares, generating more than $1 billion in trading volume. The following day, the program set another record with an estimated 9,364 BTC tied to the sale of 14.4 million shares. Combined, the two days accounted for roughly 17,204 BTC, marking a 518% increase versus the four-week average.

These figures illustrate how a perpetual preferred instrument can work in tandem with a strategic corporate treasury plan to widen exposure to Bitcoin quickly, leveraging market liquidity to scale holdings without committing to large, single-block equity raises.

Advertisement

Market implications and what investors should watch next

Strategy’s latest round of accumulation reinforces the company’s longstanding thesis: Bitcoin remains a core long-term asset, with corporate treasuries willing to deploy significant capital through diversified financing structures. For investors in Strategy and BTC, the coordination between STRC-based funding and large-scale purchases signals a sustained appetite for exposure to Bitcoin as a strategic reserve asset rather than a speculative position.

Key questions moving forward include how STRC dividends will evolve, whether subsequent purchases will follow the same financing pattern, and how regulators might view semi-monthly dividend structures tied to a crypto-asset strategy. Market participants will want to monitor further SEC disclosures and STRC Live updates for new guidance on payout schedules and any shifts in the ATM program’s cadence.

As Strategy continues to expand its BTC stash, eyes will remain on the company’s next steps and the potential ripple effects on corporate treasury behavior, Bitcoin price discovery, and the broader crypto market’s adoption by public-market players.

Readers should watch for additional updates from Strategy and STRC in the coming weeks, including any new 8-K filings or official statements on dividend structure and future ATM activity.

Advertisement

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Source link

Advertisement
Continue Reading

Crypto World

Saylor’s Strategy Boosts Bitcoin Holdings Past 815,000 BTC

Published

on

Saylor’s Strategy Boosts Bitcoin Holdings Past 815,000 BTC

Michael Saylor’s Strategy, the world’s largest public Bitcoin holder, has blasted past 800,000 BTC in total holdings after announcing its latest purchases.

Strategy acquired 34,164 Bitcoin (BTC) for $2.54 billion between April 13 and 19, according to an 8-K filing with the US Securities and Exchange Commission on Monday.

The buy ranks as Strategy’s third-largest Bitcoin acquisition on record by coin count, behind purchases of 55,500 BTC and 51,780 BTC in November 2024.

Holding around 780,897 BTC after a $1 billion purchase just a week ago, the company now holds 815,061 BTC, purchased for $61.56 billion.

Advertisement
Source: SEC

The new acquisition was made at an average price of $74,395 per coin, slightly below the company’s average acquisition price of $75,527.

Saylor had teased the purchase on Sunday, signaling another large Bitcoin acquisition ahead of the announcement. The company also disclosed on Friday plans to pay Stretch (STRC) dividends twice monthly. STRC is the company’s perpetual preferred security.

“If we were to move forward with paying STRC semi-monthly, we would be in category one, the only preferred in the world that pays semi-monthly dividends. We think this is unique and attractive,” Strategy CEO Phong Le said.

Related: Bitmine ramps up Ether buys, pushes holdings toward 5% of total supply

Strategy’s STRC funds more than 85% of the purchase

Similar to a few recent acquisitions, the majority of Strategy’s latest purchase has been funded through STRC.

Advertisement

According to the filing, STRC generated $2.18 billion, or about 85.7% of total proceeds, while sales of Class A common stock (MSTR) contributed $366 million.

Source: SEC

Last week marked several new records for STRC, including the company’s largest single-day buying spree through its at-the-market, or ATM, program.

On April 13, STRC set a new estimated daily record of about 7,741 BTC, based on the sale of 11.9 million shares through its at-the-market, or ATM, program, generating more than $1 billion in trading volume, according to STRC Live.

The stock set another record the following day, with an estimated 9,364 BTC tied to 14.4 million shares sold through its at-the-market, or ATM, program. The two days combined brought an estimated 17,204 BTC, marking a 518% surge versus the four-week average.

Magazine: Will the CLARITY Act be good — or bad — for DeFi?

Advertisement