A better Lightning

Bitcoin on Bitcoin Cash rails

A payment channel whose funds live in an ordinary Bitcoin 2‑of‑2, while its state is recorded on a Bitcoin Cash covenant instead of inside a private Lightning node.

No node. No watchtower. No “stay online to defend or lose your funds.” Two light, self‑custodial wallets — one key each — and a public chain that remembers the balance. This is T6.

The idea

Lightning, with its weakest layer replaced by a public chain

Lightning keeps channel state inside a private node you must run and defend: lose that state, or go offline while a counterparty broadcasts a stale one, and you can lose funds. T6 keeps the same trust model — a Bitcoin 2‑of‑2 holding the value — but moves the state record onto the Bitcoin Cash chain, where it is public, permanent, and unloseable. The channel becomes two coupled halves, one secp256k1 key per party working on both chains.

Architecture

Bitcoin · the bailiff

Holds & settles the funds

  • Value sits in a standard 2‑of‑2 P2WSH
  • Cooperative close pays the agreed split
  • Co‑signed natively via PSBT — each party signs its own input
  • Unilateral exit: a commitment output with a CSV delay + revocation penalty
Bitcoin Cash · the clerk

Records the channel state

  • A covenant NFT “board” holds state ‖ balA ‖ balB
  • Updated by both parties’ checkDataSig — no transaction co‑signing
  • Strictly monotonic: a stale state can never overwrite a newer one
  • Readable by anyone, anytime — a permissionless watchtower
Between the two wallets sits a dumb, keyless relay — it forwards a proposal and a 64‑byte signature, never a key, never funds. A hostile relay can stall the channel; it can never move a coin.

Versus Lightning

What you stop running

LightningT6
Channel state lives in…a private node’s databasethe public BCH board
A persistent node / daemonrequirednot run — two light wallets
A watchtower to catch a cheatrequired (or you self‑watch)the chain is the watchtower
Stay online to defendyes — or risk a stale broadcastno — the board can’t be overwritten
Private state you can loseyes (commitments + secrets)no — restore from seed + read the board
Who holds your keyyouyou — never the peer, never the relay

A payment

Signed by both, held by neither

01

Payer proposes

Computes the next state (new balances), signs that message with only its own key.

02

Peer co‑signs

The proposal rides the relay to the peer, who checks it and signs with only its own key — a 64‑byte reply.

03

Board updates

The payer broadcasts the update to the BCH board, paying only its own fee. Both sides now read the new state.

What crosses the relay: a proposal (state number + balances) and a 64‑byte signature — both public. What never crosses it: a private key or a coin. The board enforces monotonicity and both‑party checkDataSig on‑chain, so authorization can only come from the two parties themselves.

Proven on real coins

One channel, opened and closed end‑to‑end

Two independent wallet processes — each holding only its own keys, coordinating through the keyless relay — opened a real channel, paid both directions, and cooperatively closed it. Every step is a live transaction on BCH chipnet (the board) and BTC signet (the funds).

  1. 01

    Open BTC · signet

    Alice single‑funds a real 2‑of‑2 with 10,000 sat — the channel’s value.

    c0832299…1bc4 ↗
  2. 02

    Genesis board BCH · chipnet

    State #0 records the opening split. Alice 6000 / Bob 4000

    04ccc060…8141 ↗
  3. 03

    Alice → Bob 2000 BCH · chipnet

    State #1. Alice 4000 / Bob 6000

    fd3367bd…4a28 ↗
  4. 04

    Bob → Alice 1000 BCH · chipnet

    State #2. Alice 5000 / Bob 5000

    d968a524…b8cb ↗
  5. 05

    Cooperative close BTC · signet

    The 2‑of‑2 settles to the board’s final split, co‑signed via PSBT over the relay — the peer verifies the payout against the board before signing.

    a380d0e4…ebad ↗
Settled on Bitcoin: Alice 4,750 sat · Bob 4,750 sat (the 5000/5000 board split, minus a 500‑sat on‑chain close fee) — two outputs spending the shared 2‑of‑2, verified on the signet explorer.

Where it stands

Built, and what’s next

Validated on live testnets

  • Self‑custodial board — checkDataSig state updates, no tx co‑signing
  • Two wallet agents + keyless relay — payments both directions
  • Real BTC 2‑of‑2 open + cooperative close, PSBT‑co‑signed over the relay
  • Unilateral‑exit primitives — penalty on a stale broadcast, honest CSV self‑close