Announcements

Please join us for our next Socratic Seminar.

Broadcast your topic proposals to our local node: bitdevstoronto@gmail.com

A special thank you to our sponsors Bitcoin Bay for providing the venue and Lygos Finance for funding the website domain.

Today’s MCs: James, Lizzie & Tony

bitcoin-dev

• SHRINCS: A Compact Hash-Based Signature Scheme
• Ledger CTO On SHRINCS & Bitcoin’s Post-Quantum Migration
• Computing 256-bit elliptic curve discrete logarithms in 26 days on a 20,000-qubit trapped-ion quantum computer
• FROST: Flexible Round-Optimized Schnorr Threshold Signatures
• BMuSig2: Schnorr-Compatible Blind Multi-Signatures
• BIP 461: Deterministic ECDSA Signatures
• The Ark Protocol: VTXOs and the Virtual Transaction Tree
• The Ark Protocol: OOR Transactions
• Shielded Bitcoin: Private Transfers on the Bitcoin L1
• Blog: Shielded Bitcoin
• Comparison of Bitcoin Covenant Proposals for Vaults
• Depots: Theft-Proof, Self-Custodial Bitcoin For Billions Of Users
• Bounds on chain length with BIP-54 timewarp fixes
• miner: Enforce Murch-Zawy rule (BIP54)
• BIP 138: Compact Encryption Scheme for Non-seed Wallet Data

lightning-dev

• CLN Vulnerability
• CLN v26.06.7 security PRs
• Ten AI models vs embargoed Core Lightning: A case study of AI for security auditing
• Crashing a lightning node with a flood of pings
• Topological and temporal stability analysis of the lightning network
• Iceberg: Nested Threshold Signatures for Lightning
• PQLN: Post-Quantum Security for the Bitcoin Lightning Network’s Off-Chain Surfaces

Optech

• Just a rumour of a bug is enough to find a security exploit these days
• The end of open source in Bitcoin
• Something’s been bugging me
• Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware
• When random.bytes() runs but doesn’t work
• Roll your own Bitcoin seed
• Hackers steal more than $140M worth of bitcoin from Canadian-made devices
• After $140-million hack, bitcoin users ‘soul-searching’ over self-custody
• White-Hat Hackers Route Coldcard Exploit Bitcoin Into ‘Recovery Trust’
• Blockchain.info: Reused R values again
• Critical BTCPay vulnerability
• The Black Hole: 6 Mix Depth Concept
• Trezor Email provider breached
• Bitbox newsletter compromised

Bitcoinomics

• Illicit Iranian gambling network helped pull off a $4 billion sanctions dodge
• An open letter to the researchers, engineers, and leaders building frontier AI systems

Network Data

• SpiderPool mines two blocks at same height 963853
• ViaBTC bitpeers sending the same block message multiple times during forks
• Invalid blocks catalogue

Mining

• DATUM Gateway: decentralized block template creation for true solo mining
• River has sued Blockstream Services Canada over bitcoin mining services

Token Layer

• Liquid Network Security Incident Assessment
• How the Liquid Network Hack Worked: The Range Proof Cache Bug
• mononaut on the exploit and the whitehat peg-out OP_RETURN
• Attacker’s ~4,000 BTC self-send with an OP_RETURN note to Blockstream
• Elements rangeproof-cache collision reproducer
• Citrea pausing the chain

Regulatory

• He thought he was talking to the RCMP. Then nearly $19K vanished
• The proposed BRCA changes are a tough pill to swallow
• The Senate must reject the Clarity Act’s ethics charade

New Releases

• Bitcoin Core 32.0rc2
• The Nakamoto Project
• Decentralized Search
• DITTA: federated web search protocol with Lightning payment
• Cloudflare Wallets
• Let your agent talk directly to your node
• Boltz is shutting down
• LNP2PBot shuts down
• Swiss Bitcoin Pay goes offline

Miscellaneous

• How did man recover £3.3m Bitcoin ‘lost’ for decade?
• Hidden crypto farm in Mexican mountains puts spotlight on cartel funding