lightning community – How the is the refund transaction in Uneven Revocable Commitments constructed?

While you first create the channel, the very first thing Hitesh and Irene do is signal the preliminary commitments, which assigns the preliminary steadiness to themselves. That is what known as the refund, as a result of if one of many events determine to not proceed, the cash returns to the homeowners. This transaction is a standard dedication transaction however is created as a result of if not, the funds might be locked perpetually on a multisig if one of many events of the channel disappears!

First two examples

The primary two examples are dedication transactions created. Every person creates one dedication transaction with two outputs. In these, each Hitesh and Irene have two outputs:

1. The primary output is a fee to the opposite particular person of the preliminary
   steadiness (5 BTC).
2. The second output is a fee to the identical particular person making the
   dedication however with a locktime of 1000 blocks. (The locktime goes there, not within the refund!)
   This dedication isn’t broadcasted, every one of many events has his personal model. Every one of many events at any second can signal it and broadcast it. In that case the opposite particular person would obtain the 5 BTC immediately and the particular person chargeable for the published should wait 1000 blocks.

Word that this dedication transactions are incomplete because the penalty mechanism is lacking in case some occasion tries to cheat. Within the e book they present this uncompleted model to offer an concept of the way it seems to be

Third instance

This final instance exhibits the best way to create an actual dedication transaction with the penalty mechanism included.

It provides a situation which permits a person to retrieve the funds of the second output if it has the revocation non-public key. The revocation secret’s a key which each events can calculate the general public key, however they’ll solely get half of the non-public key. So that they solely have half of the non-public key. If at any second, one of many two customers has the 2 halfs of the non-public key, it might declare the funds within the second output.

If the channel state is up to date and a brand new dedication transaction is created, they alternate their half of the revocation non-public key. This provides them the safety that if the opposite particular person cheats and broadcast an previous dedication transaction, the sufferer will be capable to declare the opposite particular person the funds as a punishment.

Think about Hitesh tries to cheat; since Irene can declare his 5 BTC immediately (output 1), and Hitesh has to attend 1000 blocks to get the 5 BTC, Irene can declare Hitesh cash as she has the complete revocation non-public key (that is the brand new situation we added within the third instance).

Word that if Irene does not declare the funds earlier than 1000 blocks Hitesh will be capable to proceed and declare himself the cash.

Abstract

In order a abstract, dedication transactions seem like the third instance because the penalty mechanism is required. Refund transaction is simply the primary dedication transaction that simply returns the funds to the customers. The penalty mechanism can also be wanted there as a result of when you do not add it you might cheat and steal cash by broadcasting the refund transaction sooner or later when the channel state has superior.