Watchtower

💡 The Plain-English Definition

A watchtower is a third-party service that watches the Bitcoin blockchain for a Lightning Network node that’s offline — ready to broadcast a justice transaction (a special transaction that claims all a channel’s funds as a penalty for cheating) if a channel partner tries to steal funds while you’re away.

⤢ Enlarge

🤔 But Why Though?

Lightning payment channels — direct two-party connections — depend on both parties holding the most recent state, meaning the current split of the balance between them.

The security works like this. If one party tries to close the channel by broadcasting an old state — one from earlier in the channel’s history, more favourable to them — the other party gets a window of time to fight back. Within that window they can broadcast a justice transaction, which claims all of the channel’s funds as a penalty for the attempted fraud.

That window is created by a timelock called CSV: a condition written into the channel’s script that forces a set number of blocks to pass before the closing party can collect. It is typically set between 144 and 2,016 blocks — very roughly a day to two weeks. The cheat cannot complete until that clock runs out, and that delay is exactly what gives the honest party time to respond.

The catch is that this defence needs your node online, watching the blockchain, and ready to respond. If your node is offline for days or weeks — your home server went down, or you’re travelling — a dishonest channel partner could try to close with an old state precisely while you’re away, betting you can’t respond in time.

Watchtowers fix this by taking over the watching. You register your channel’s “breach remedy” information with a watchtower — enough for it to detect and respond to a cheating attempt, but designed to reveal nothing about your channel’s normal activity. If it spots a breach, it broadcasts the justice transaction for you before the timelock expires, penalising the attacker and protecting your funds.

The privacy design matters. A well-built watchtower receives encrypted breach-remedy transactions keyed to specific transaction IDs. It can only decrypt and act when that specific cheating transaction actually appears on-chain — it can’t see your ordinary channel activity or your balance.

🌍 The Real-World Analogy

A watchtower is like a security service watching your house while you’re on holiday. You give them a sealed envelope of instructions: “If you see this specific person trying to climb in the back window, call the police immediately.” They can’t read your private letters or touch your belongings, but they have exactly what they need to respond to the one threat you’ve named. A Lightning watchtower has the same narrow remit: sealed instructions for one specific threat, and nothing more.