By EZ in Releases — Aug 13, 2024

Validating Lightning Signer v0.12: 'Benevolent Basilisk'

VLS enhances Lightning Network security by isolating private keys and security rule validation into a separate signing device, reducing the attack surface. As Taproot, Musig2, and FROST implementations mature, VLS is expected to become key for creating seamless multi-sig Lightning Network channels.

Support our reporting here.

"We're thrilled to announce a new VLS release "Benevolent Basilisk". We invite Lightning developers and companies to try it out and provide feedback that will shape future VLS releases," announced the project.
The latest release packages enhanced security features, LSS support, logging improvements, and various bug fixes and policy updates.

"Help us improve the security of the Bitcoin Lightning Network. Join our Matrix room, submit feature requests, and test VLS with sample CLN or LDK nodes."

The latest release is secure against common threats from malicious nodes but does not yet cover all scenarios where users might lose funds. Users are advised to run VLS in testnet or with limited funds in production until the production release is reached and adequate protection is confirmed for their use case.

What's new

LSS support in vlsd2
Added tests for validating trusted oracle public key.
Implement sign_holder_htlc_transaction.
Make NativeKeyDerive struct public usable.
Rename TxIdDef and OutpointDef to clarify the txid encoding used.
Validate blocks using trusted oracle pubkeys.
channel_balance now breaks channel counts into stub, unconfirmed, ready, and closing counts.
Added hsmd protocol version 6: GetPerCommitmentPoint no longer returns the old secret.
A new procedural macro SerBoltTlvOptions was added to streamline defining TLV option structures.
Set the default directory to ~/.
Set the only read permission on the seed.
HsmdDevPreinit2 sent from CLN is now merged with VLS use.
Added unknown onchain destination approver screen. Fixes ([#488]).
Now displays prep, active, and closing channel counts.
To avoid accidentally deleting a node instance the blue button must be held down when deleting a node.
Added new rpc methods and cli commands.
Added log support for core, persist.
Added tracing-instrument macro for span generation.
Opentelemetry Logging Protocol exporter with tracing subscriber.
The channel balance summary is logged on heartbeats.
A table of current channel information is logged on startup.
vls-probe-testnet service added to monitor stm32.