How can a DLC implementation bug lead to loss of user funds

[Tibo-lg]

I think it would be a good idea to setup a document describing all the possible ways in which a bug in a DLC implementation can lead to loss of user funds, maybe with a grade on criticality of the bug or feasibility of exploiting it. It would then make it easier to implementation maintainers to setup (integration) tests to validate (to the extent possible) against them (the document could even have suggestions on how to do this validation).

As a start we could include (thanks @nkohen): #97 #109

[nkohen]

Another thing to include might be #98 as if someone is not parsing the full prev_tx themselves then I believe they can be exploited

[ariard]

A good start is referring this : https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures