Fiber Dev Log 2026-06-11

[chenyukang]

Updates

This cycle focused heavily on security audits and hardening.

We successfully addressed several security reports received through the Bug Bounty program, while also using AI tools to analysis the Fiber codebase and fix additional potential risks identified internally.

The team published v0.9.0-rc3 on June 10, 2026. The final v0.9.0 is pending completion.

Most merged work went into security, stability, and release-readiness improvements rather than major new features:

• Channel & Funding: Tightened external funding and channel lifecycle edge cases.
• Payment & Routing: Implemented stricter validation.
• Watchtower: Isolated and hardened watchtower behavior.
• Operator UX: Cleaned up operator-facing logs, RPC paths, filesystem permissions, and release packaging.

The main remaining include final reviews and follow-up for CCH (Cross-Chain Hub), dev-scoped RPCs, backup/restore, CLI/TUI improvements, Atomic MPP (Multi-Path Payment), and x402-related payment proof support.

Features

Backup & Restore

The implementation of backup and restore is reviewed and ready to merge. It will be released in next version: feat: add backup and restore for storage backends

Improvements & Fixes

Channel Lifecycle & External Funding

Improved across reconnects, pending states, and restart paths:

• fix: reject peer TxUpdate while awaiting external funding submission
• External funding handshake: make post-submit TxComplete idempotent
• fix: clean stale funding exclusions and stabilize external-funding handshake CI
• fix stale funding exclusion leakage on peer TxUpdate
• fix external funding reestablish commitment replay
• fix: persist commitment ack intent before send

Payment & Routing Stricter Validation

Enforced stricter validation and clearer failure behavior for payment, routing, trampoline, MPP, and TLC handling:

• Deduct outer route fee from trampoline budget in routing logic
• Wrap trampoline forwarding failures
• Handle missing trampoline previous TLC
• Reject invalid trampoline hash algorithms
• Fix: improve MPP invoice validation and test naming
• Fix: enhance TLC error packet decoding to reject spoofed nodes

Gossip & Data Integrity

Tightened gossip, invoice, on-chain, and peer-supplied data checks.

• Added network-level protection through gossip ban and rate-limit policy: Add gossip ban and rate limit policy
• fix: require signature in CkbInvoice parsing
• Fix: validate invoice hash algorithm during payment processing
• fix: validate chain_hash on individual gossip messages before persisting
• fix: reject NodeAnnouncement addresses with mismatched /p2p peer ID
• fix: validate ChannelAnnouncement outpoint index in on-chain info
• fix: bound peer-added funding tx complexity before chain lookups

Watchtower, RPC, and Operator

• fix: scope watchtower preimage lookups by node
• fix: prevent watchtower RPC errors from killing event-processing task
• fix: prevent RPC panic on invalid watchtower private keys
• fix(cli): redact secrets in interactive history
• fix: enforce private filesystem permissions on store directories and files
• Fix: enhance URL validation and auth token handling in RpcClient
• Added operator-facing documentation for WSS configuration: Fiber WSS Configuration Manual

Maintenance

Aligned dependencies, tests, and companion packages:

• chore(deps): bump fiber-sphinx to 3
• Fix deprecated rand API calls in udt-init
• fix: rename fuding_tests.rs to funding_tx_tests.rs

In Pipeline

Cross-Chain Hub

CCH remains the largest active feature track, with fee-budget fixes in review and the broader multi-asset swap remains in draft.

• fix: bind CCH fee budget to outgoing payments
• feat: CCH multi-asset swap

RPC & Operator UX

Awaiting review or final follow-up:

• [codex] Require dev scope for dev RPC
• Add install and quick start scripts
• Add tui option for fnn-cli
• Add fee stats RPC

Long-Running Capabilities

Active development continues across storage recovery, payment primitives, x402 support, and networking internals.

• Atomic mpp
• add x402 facilitator MVP and payment preimage proof support
• feat: use tentacle spawn feature