Watchtower | Bitcoin Glossary | Mapping Bitcoin

Overview

A watchtower is a service that monitors the Bitcoin blockchain on behalf of Lightning Network users, watching for fraudulent channel closure attempts. When a channel counterparty broadcasts an outdated commitment transaction (attempting to steal funds by reverting to an earlier channel state), the watchtower detects this and submits a penalty transaction that claims all funds in the channel as punishment.

Why Watchtowers Are Needed

Lightning Network channels require both parties to be able to monitor the blockchain for cheating attempts. However, users (especially those on mobile devices) cannot always be online:

Without Watchtower:
  Alice (offline)          Bob (malicious)
       |                        |
       |    Bob broadcasts old  |
       |    commitment tx       |
       |    (favorable to Bob)  |
       |                        |
       |    Timelock expires    |
       |    before Alice sees   |
       |    the fraud           |
       |                        |
       |    Bob steals funds ✗  |

With Watchtower:
  Alice (offline)     Watchtower    Bob (malicious)
       |                  |              |
       |                  |  Bob broadcasts old
       |                  |  commitment tx
       |                  |              |
       |              Detects fraud!     |
       |              Submits penalty tx |
       |                  |              |
       |              All channel funds  |
       |              go to Alice ✓      |

How Watchtowers Work

1. Pre-authorization: Before going offline, Alice provides the watchtower with encrypted "justice" data for each channel state update. This data contains the information needed to construct a penalty transaction but is encrypted so the watchtower cannot use it unless a specific old commitment transaction appears on-chain.
2. Monitoring: The watchtower continuously monitors the blockchain for any transactions that match the commitment transaction patterns it is watching.
3. Response: If a breach is detected, the watchtower decrypts the corresponding justice data and broadcasts the penalty transaction before the timelock on the fraudulent commitment transaction expires.

Privacy Design

Watchtowers are designed to minimize the information they learn:

• They receive encrypted blobs that are only useful if a specific breach occurs.
• They do not know the channel balance, the counterparty, or the funding transaction unless a breach actually happens.
• Multiple watchtowers can be used simultaneously for redundancy without revealing information across them.

Common Misconceptions

Watchtowers are not custodial — they never have access to spend funds under normal circumstances. They can only submit penalty transactions, and the penalty output is controlled by the channel owner's key, not the watchtower's. The watchtower is a defensive service, not a custodian.