-
@ Super Testnet
2025-05-28 14:50:51
It's worse on monero than on LN. On monero, if I send coins to pubkey X, I know that pubkey has unilateral control over them for about 20 minutes (10 monero blocks) before they can possibly forward them to some other destination. If they do forward them to someone else, I can credibly accuse them of knowingly doing so and I can provide cryptographic proof that they had the coins at some point.
Not so with LN. Thanks to atomic swaps, if I send coins to invoice X, I don't know if the pubkey therein ever has control of those coins. If he is a routing node, the amount of time he has control of those coins is 0. I cannot credibly accuse him of knowingly forwarding those coins to someone else, because he too does not know the destination, and moreover, once the swap was entered into there was no way he could possibly stop it. Once you create an htlc, you no longer control whether it gets settled.
So it's very different. On LN, intermediaries have plausible deniability. On monero, mixers have no plausible deniability.