Join our newsletter to receive the latest insights on Bitcoin and cyber-security.
Security incidents, legislation, corporate adoption and protocol changes, with the primary source linked and the limits stated.
After July's entropy failure, Coinkite's unreleased changelog rewires seed generation to combine three hardware sources, adds checks that the random path reaches the hardware, and makes user-supplied entropy mandatory. None of it repairs a seed already made.
BIP-85 now has a Nostr application, so a Nostr secret key can be derived from a seed phrase already written down rather than backed up separately. The design allows several unlinkable identities and key rotation within each.
3 min read
The BIPs repository now carries a security policy. Its first instruction is not to use it: report to the implementations, because a specification has nothing to patch.
3 min read
A multisig co-signer normally has to be handed an xpub, which shows them every address and every balance in the wallet. BIP-89 hands over a per-input tweak instead, and it has now been marked as deployed.
3 min read
Two LND releases cap how many channel identifiers a peer can make a node accumulate while syncing the Lightning graph. No funds were at risk. What was at risk was the node staying up, which is not the same as nothing.
3 min read