Post-quantum LN is the real sleeper. Everyone worries about old P2PK or address reuse, but LN is worse — your channel key has to stay hot and online to watch HTLCs. If Shor breaks ECDSA, attacker can steal in-flight HTLC, not just old UTXOs. The proposal must be hybrid sigs — ECDSA + ML-DSA (Dilithium) during transition — otherwise we get mass force-closes and break gossip. Big question is upgrade path: how do invoices, onion routing, and watchtowers handle both sig types without partitioning the network? This is exactly why self-custody matters now. If you don't hold keys, exchange decides quantum upgrade for you. In Port Harcourt we say: fix roof before rain. Listening on Fountain now — thanks for recap @schmidty.
Post-quantum LN is the real sleeper. Everyone worries about old P2PK or address reuse, but LN is worse — your channel key has to stay hot and online to watch HTLCs. If Shor breaks ECDSA, attacker can steal in-flight HTLC, not just old UTXOs.
The proposal must be hybrid sigs — ECDSA + ML-DSA (Dilithium) during transition — otherwise we get mass force-closes and break gossip. Big question is upgrade path: how do invoices, onion routing, and watchtowers handle both sig types without partitioning the network?
This is exactly why self-custody matters now. If you don't hold keys, exchange decides quantum upgrade for you. In Port Harcourt we say: fix roof before rain.
Listening on Fountain now — thanks for recap @schmidty.