Announcements

Please join us for our next Socratic Seminar. This Socratic Seminar is sponsored by Antidote and Brink. Please speak to the hosts if you’re interested in supporting London BitDevs.

General Links

• Bitcoin Optech
• Bitcoin Core PR Review Club
• bitcoin-dev Mailing List
• lightning-dev Mailing List

Delving Bitcoin, Mailing Lists, Meetings and Bitcoin Optech

Delving Bitcoin

• Universal opt-in replay protection?
• Towards New Self-Custody Best Practices
• Improving the Security of lArk OOR Channels with Equivocation Bonds
• Libshrincs: A C implementation with a machine-checked security proof
• Conditional Message Transfer Contract To Solve Jamming
• Silent Payments coinbase
• Covenants.diy: a node editor for covenant scripts

Mailing Lists

bitcoindev

• DropKick - A minimal commit/reveal PQ rescue protocol
• [BIP Proposal] Stale Tip Relay
• post-quantum: solution ideas to “tripwire” game-theory issues + a certificate-based rescue protocol
• [BIP Proposal] rawtr() Output Script Descriptors
• static-pie release binaries available for testing

Optech

• Newsletter #416, audio recap
• Newsletter #417, audio recap
• Newsletter #418, audio recap
• Newsletter #419, audio recap

BIP54: Consensus Cleanup

• BIP54.org - The Consensus Cleanup
• BIP54 specification
• Consensus cleanup soft fork (Optech topic page)
• Slowish blocks on Signet
• BIP 54 active on Bitcoin Inquisition
• The Core Issue: Consensus Cleanup
• Implement BIP 54 (Consensus Cleanup) without mainnet activation (open)

CVEs and Research

Research

• Enabling Threshold Custody for the Lightning Network
• Hardware wallets can do post-quantum signatures

InfoSec

• Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware
• Critical Coldcard flaw: what happened, who is affected, and what to do
• COLDCARD Incident: When a Wallet’s “Random” Seed Wasn’t Random
• Coldcard RNG vulnerability discussion
• Security advisory: BTCPay Server 2.4.2
• BTCPay Server v2.4.2 Patches Live LND Macaroon Exploit Draining Lightning Nodes
• BTCPay Server two-factor authentication bypass in the Greenfield API
• Boltz Suspends Bitcoin Swaps Indefinitely as AI Attacks Outpace Patching
• 4,962 Vulnerabilities In 27.5 Hours: Bitcoin Red Team’s AI Blitz Is Rewriting Open-Source Security
• Alekos Filini on the libngu commit that replaced only some RNG calls
• How to handle responsible disclosure when there is no proper fix?

Pull Requests and repo updates

Bitcoin Core

• txindex: hash keys and pack positions to reduce disk usage
• fees: Introduce Mempool Based Fee Estimation to reduce overestimation
• wallet: store all witness variants of a transaction
• rest: add Cache-Control headers to REST responses

LND

• Add Outbound Remote Signer implementation

BIPs

• BIP332: Stale Tip Relay (open)
• BIP 110: update status to Closed
• bip8: Advance to Complete
• BIP85: add Nostr application

New Releases

• Bitcoin-PIR: private information retrieval for UTXO queries
• BAO Court

Privacy

• Bitcoin-PIR: private information retrieval over the UTXO set
• lumen: wallet fingerprints on-chain

Miscellaneous

• Who was the 1st Bitcoin Miner?
• Wiz submits community application for .bitcoin domain to ICANN
• River’s Bitcoin Core upgrade process
• ZBD launches embedded financial infrastructure for video games
• BIP39 seed word entropy weakness