Can someone who is an LND expert confirm I understand this correctly?
I'm running a full bitcoin node and LND, as different UNIX users.
The LND service has the keys for my bitcoin wallet.
If my bitcoin node got compromised, the attacker woud NOT be able to immediately be able to drain any funds (because the bitcoin service account doesn't have access to move funds on chain, nor does it have the ability to read the macaroons needed to interact with the LND service).
If the LND service get compromised, all funds are at risk.
And obviously if the server gres rooted, the LND service is compromised.
Did I get that all correct?
Dr. Hax
npub16v…meqha
2025-04-21 01:04:53
Author Public Key
npub16v82nr4xt62nlydtj0mtxr49r6enc5r0sl2f7cq2zwdw7q92j5gs8meqhaPublished at
2025-04-21 01:04:53Event JSON
{
"id": "3798fc5aee1a6c6716fa46ed64e8c4010767abe1e914cb0f4c39a13dead4d092",
"pubkey": "d30ea98ea65e953f91ab93f6b30ea51eb33c506f87d49f600a139aef00aa9511",
"created_at": 1745197493,
"kind": 1,
"tags": [],
"content": "Can someone who is an LND expert confirm I understand this correctly?\n\nI'm running a full bitcoin node and LND, as different UNIX users.\n\nThe LND service has the keys for my bitcoin wallet.\n\nIf my bitcoin node got compromised, the attacker woud NOT be able to immediately be able to drain any funds (because the bitcoin service account doesn't have access to move funds on chain, nor does it have the ability to read the macaroons needed to interact with the LND service).\n\nIf the LND service get compromised, all funds are at risk.\n\nAnd obviously if the server gres rooted, the LND service is compromised.\n\nDid I get that all correct?\n\n",
"sig": "1ba3a7faecf92ffc1de3c0fdfa3ded079f22b76d598ce7a6f568571f0dda520b3d6a0e590dfabf8ad28e7c4979cbc9ab0a51daf64a15dcd049319fcc80cb453f"
}