Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Podcasts & Audio BriefingsCrowdStrike: China’s 15th Five-Year Plan: What You Need to Know(24.09.2026 um 13:00 Uhr)
Malware / Trojaner / VirenClickFix: 17.000 URLs zeigen Copy-and-Paste als KI-freie Malware-Falle(24.09.2026 um 13:18 Uhr)
Malware / Trojaner / VirenIT Security News Hourly Summary 2026-09-24 13h : 12 posts(24.09.2026 um 13:00 Uhr)
IT Security NachrichtenPlanet Labs Opens Berlin Satellite Factory(24.09.2026 um 13:02 Uhr)
IT Security NachrichtenRedesigning Security Architecture in the Agentic AI Era(24.09.2026 um 13:00 Uhr)
Sicherheitslücken (CVE)[NEU] [hoch] Rancher: Schwachstelle ermöglicht Cross-Site Scripting(24.09.2026 um 12:59 Uhr)
Sicherheitslücken (CVE)[NEU] [kritisch] WordPress: Schwachstelle ermöglicht Codeausführung(24.09.2026 um 12:59 Uhr)
Podcasts & Audio BriefingsCrowdStrike: China’s 15th Five-Year Plan: What You Need to Know(24.09.2026 um 13:00 Uhr)
Malware / Trojaner / VirenClickFix: 17.000 URLs zeigen Copy-and-Paste als KI-freie Malware-Falle(24.09.2026 um 13:18 Uhr)
Malware / Trojaner / VirenIT Security News Hourly Summary 2026-09-24 13h : 12 posts(24.09.2026 um 13:00 Uhr)
IT Security NachrichtenPlanet Labs Opens Berlin Satellite Factory(24.09.2026 um 13:02 Uhr)
IT Security NachrichtenRedesigning Security Architecture in the Agentic AI Era(24.09.2026 um 13:00 Uhr)
Sicherheitslücken (CVE)[NEU] [hoch] Rancher: Schwachstelle ermöglicht Cross-Site Scripting(24.09.2026 um 12:59 Uhr)
Sicherheitslücken (CVE)[NEU] [kritisch] WordPress: Schwachstelle ermöglicht Codeausführung(24.09.2026 um 12:59 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Using the Lightning Anchor Fee Bumping Service: A Frontend Walkthrough

Welcome to Part 6 of my Lightning Anchor Fee Outputs Series In the previous articles, we built the entire backend for a Lightning powered CPFP fee bumping service. From Bitcoin RPC integration, to LND invoice creation, to broadcasting…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Welcome to Part 6 of my Lightning Anchor Fee Outputs Series






In the previous articles, we built the entire backend for a Lightning powered CPFP fee bumping service. From Bitcoin RPC integration, to LND invoice creation, to broadcasting the child transaction.



In this final part, I will walk you through the frontend and show you exactly how to use the service end to end.






What the Service Does



When a Bitcoin transaction gets stuck in the mempool due to low fees, you can use Child-Pays-For-Parent (CPFP) to accelerate/unstuck it. Our service uses the anchor output as the input for a child transaction that pays a higher fee. You pay for this service via a Lightning invoice, and the service broadcasts the fee-bumping transaction on your behalf.






Prerequisites



Before using the frontend, make sure the following are running:




  • Docker containers: bitcoin-regtest, lnd-alice, postgres-db, redis-cache

  • Backend server on port 3000 (npm run dev in /backend)

  • Frontend on port 5173 (npm run dev in /frontend)




# Start all Docker services
cd backend
docker compose up -d

# Terminal 1: Start backend
cd backend && npm run dev

# Terminal 2: Start frontend
cd frontend && npm run dev












Step 1: The Status Dashboard



When you open the app at http://localhost:5173 and click on Get Started, the first thing you'll notice on the right side is the Status Dashboard.



App overview showing the Transaction Input form and Status Dashboard



After the backend syncs to the regtest blockchain, the dashboard shows:





  • Block Height — the current regtest block height, confirming Bitcoin Core is synced


  • Networkregtest for local development


  • Mempool Monitor — shows Inactive until a transaction is submitted



If Block Height shows a number (861 in our case), your backend is successfully connected to the regtest blockchain network.

If it shows an error, check that your backend is running.



App overview showing the Transaction Input form and Status Dashboard







Step 2: Creating a Test Transaction



Before using the fee bumper, you need a stuck transaction to work with. In regtest, we create one manually:



First, get the service wallet address:




SERVICE_ADDR=$(curl -s http://localhost:3000/api/v1/bitcoin/wallet-address | jq -r '.data.address')
echo "Service wallet address: $SERVICE_ADDR"






Then send 330 sats to it and capture the TXID:




TXID=$(docker compose exec bitcoin bitcoin-cli -regtest \
-rpcuser=bitcoinrpc -rpcpassword=changeme \
-rpcwallet=testwallet sendtoaddress $SERVICE_ADDR 0.00000330)
echo "TXID: $TXID"









Expected output



Expected output



Copy the TXID(Transaction Id) as you'll need it in the next step. My TXID in this case is 59224b8385c5dd882f0a1f48b11e05fbe0e9fdab414344f8fd5f725b6571661a









Step 3: Estimating the Fee



Paste your TXID into the Transaction ID field. Set the Anchor Output Index (usually 0) and choose a Target Fee Rate.



Three fee rate presets are available:




























Preset Rate Use case
Low 1 sat/vB Non-urgent, patient
Medium 10 sat/vB Standard confirmation
High 50 sat/vB Urgent, next block


Click Estimate Cost. The Fee Estimation panel below will populate with:





  • Child Fee Needed — the fee the child transaction must pay


  • Total Fee Needed — child fee plus the service fee


  • Parent Fee Rate — what the stuck transaction is currently paying


  • Feasibility indicator — confirms the anchor output can cover the bump



Fee Estimation panel showing 2369 sats child fee, 2510 sats total, and a green Feasible badge






Feasible vs Non-Feasible Transactions



The 330-sat anchor feasible badge tells you whether the service can actually bump your transaction.



Feasible (green badge) means the anchor output in your transaction is a valid 330-satoshi output that the service can spend as the CPFP child input. The child transaction can pay enough to bring the combined package fee rate up to your target. You can proceed to generate an invoice and broadcast.



Not feasible (red badge) means one of the following is true:




  • The output at the specified index is not a 330-satoshi anchor output

  • The parent transaction's fee rate is already at or above your target. There is nothing to bump

  • The TXID does not exist in the mempool or the local blockchain



If you see a non-feasible result, double-check that you are using the correct Anchor Output Index — try 0, 1, or 2 depending on which output in the transaction is the anchor. Also confirm the transaction is genuinely stuck by checking its current fee rate against your target..



Sample non-feasible output

Not feasible







Step 4: Generating the Lightning Invoice



Once the estimate looks good, scroll down and click Generate Invoice. The backend calls LND via gRPC to create a Lightning invoice for the exact fee amount.



The Lightning Invoice panel appears with:




  • A QR code you can scan with any Lightning wallet

  • The amount in satoshis

  • The payment hash for tracking

  • A Copy Invoice button to copy the raw lnbc... invoice string



Lightning Invoice section showing QR code, amount, payment hash, and Copy Invoice button



In production, your user scans this QR code with their Lightning wallet and pays. In regtest, you can pay it programmatically:




# Pay the invoice from a second LND node (if you have one set up)
docker compose exec lnd lncli --network=regtest payinvoice <INVOICE_STRING>






Expected output:



self-payments not allowed



The error self-payments not allowed means you're trying to pay an invoice from the same LND node that created it. You can't pay yourself on Lightning.






Coming Up Next



In the next article, we step out of regtest and into the real Bitcoin network, mainnet.



To continue from here on mainnet, we'll need to:




  • Spin up a Lightning node connected to the live Bitcoin network

  • Migrate the project configuration from regtest to mainnet



By doing this, we'll be able to handle real invoices paid by real wallets



Part 7: Going Live — Migrating to Mainnet →

(Link will be updated when the article is published)









What We Built Across This Series



Over six parts, we've gone from understanding what anchor outputs are to building and using a fully functional fee bumping service:





  • Parts 1–2: What anchor outputs are and why they exist in Lightning commitment transactions


  • Part 3: Setting up the backend, Bitcoin RPC integration, and Docker environment


  • Part 4: Integrating LND for Lightning invoice creation and payment verification


  • Part 5: Building the CPFP transaction constructor and broadcast endpoint


  • Part 6 (this article): Walking through the React frontend and completing the end-to-end flow



The full source code is on GitHub. If you found this series useful, feel free to connect on LinkedIn or follow along on Dev.to.

IoC Intelligence (2 Indikatoren)
59224b8385c5dd882f0a1f48b11e05fbe0e9fdab414344f8fd5f725b6571661adev[.]to
CTI Threat Relationship Graph4 Knoten / 3 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - Using the Lightning Anchor Fee Bumping Service: A Frontend Walkthrough
id: 5512471e-2454-45f2-85bd-1dfdb7f8e5be
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      DestinationHostname:
        - 'dev.to'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $h1 = "59224b8385c5dd882f0a1f48b11e05fbe0e9fdab414344f8fd5f725b6571661a" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Using the Lightning Anchor Fee Bumping S.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Using the Lightning Anchor Fee Bumping Service: A Frontend Walkthrough

Thematisch verwandte Begriffe: Using, Lightning, Anchor, Bumping · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97152 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploi…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick