Watchtower

💡 The Plain-English Definition

A watchtower is a third-party service that monitors the Bitcoin blockchain on behalf of a Lightning Network node that’s offline — ready to broadcast a justice transaction (a special transaction that claims all channel funds as penalty for cheating) if a channel partner tries to steal funds while you’re away.

🤔 But Why Though?

Lightning payment channels (direct two-party payment connections) rely on both parties maintaining the most recent state — the current balance split between them. The security mechanism works like this: if a party tries to close the channel by broadcasting an old state (one more favourable to them from an earlier point in the channel’s history), the other party has a window of time — the CSV timelock delay (a Bitcoin script condition requiring a set number of blocks to pass after the cheating transaction is broadcast, typically 144 to 2,016 blocks) — to broadcast a justice transaction that claims all funds in the channel as a penalty for the attempted fraud.

The problem: this defence requires your node to be online, watching the blockchain, and ready to respond. If your Lightning node is offline for days or weeks — perhaps your home server went down, or you’re travelling — a malicious channel partner could attempt to close the channel with an outdated state precisely during your absence, knowing you can’t respond in time. Watchtowers solve this by outsourcing the monitoring. You register your channel’s breach remedy information with a watchtower — enough data for it to detect and respond to a cheating attempt, but designed to reveal nothing about your channel’s normal activity. If the watchtower detects a breach, it broadcasts the justice transaction on your behalf before the timelock expires, penalising the attacker and protecting your funds. The privacy design is important: well-designed watchtowers receive encrypted breach remedy transactions keyed to specific transaction IDs. They can only decrypt and act when the specific cheating transaction appears on-chain — they can’t see your normal channel activity or balance.

🌍 The Real-World Analogy

A watchtower is like a security service watching your house while you’re on holiday. You give them a sealed envelope with instructions: “If you see this specific person trying to enter through the back window, call the police immediately.” They can’t read your private letters or access your belongings, but they have exactly what they need to respond to the specific threat you’ve identified. Lightning watchtowers have the same limited mandate: sealed instructions for one specific threat, nothing else.