Lightning in a Jar can now pay several people in a single on-chain send, silent-payment addresses included. The builder posted a test spend; I found it in the blockchain, checked the arithmetic, and looked for the matching change in the public repository. Here is what that one transaction shows, wha
Today the SEC proposed the rule that decides whether your financial advisor can actually hold crypto for you, and it does something the custody rule hasn't done since it was written in response to Bernie Madoff: let the advisor be the vault. It also quietly blesses something the industry has been do
Two things I flagged as "he says so, but I can't see it yet" in my last two Lightning in a Jar posts — a recovery scheme for silent payments, and Nostr Wallet Connect — showed up in the public repository overnight. I went and checked. Both are there, and the code backs up what he told me.
A quick follow-up to my Lightning in a Jar review — the wallet's author tells me he's shipped Silent Payments, send and receive, with the first inter-wallet transactions running tonight. Here's what that feature actually does, why it's not the same as "now anonymous," what I could and couldn't verif
An email landed today announcing Binance.US's new self-custody wallet — no seed phrase, keys split three ways, "no single point of failure." I already own the product that pitch describes; it's called a Bitkey, and Block shipped it two years ago. Here's what's actually the same, what's genuinely dif
A friend of mine spent six months building a self-custodial Lightning wallet that runs in a browser, and he'd be the first to tell you it has no audit. I trust him — which is exactly why I shouldn't ask you to trust it on my say-so. So I read the code, checked the served binary against the published
On September 9th roughly 347,000 people got an email from [email protected] warning them about a chip flaw in their wallet and pointing them somewhere to check it. It was a phishing attack — and it came from Trezor's real domain, passed every authentication check a mail server performs, and borrowed it
Alby disclosed a critical flaw in Alby Hub, its self-hosted Lightning node software, that could let an attacker who reaches an exposed control panel send your bitcoin out from under you. The twist worth sitting with is the timeline — the fix shipped over a year before the warning did — and what that
A beta Bitcoin wallet's own README says, in one sentence, that it was coded and audited by frontier AI models. Taken alone that sentence would worry me. Taken alongside the actual security document and the actual changelog, it turns out to be shorthand for something more specific, more human, and mo
A federation that was supposed to hold every L-BTC one-to-one in real bitcoin just watched roughly four thousand bitcoin walk out the door in a single afternoon. The working theory is an inflation bug in Liquid's confidential transactions, and the functionaries signed the withdrawal anyway — because
A firmware bug sat undetected for five years, then drained over a hundred million dollars from Coldcard wallets in one week. Why I have never trusted a single device with all of mine, and what my Bitkey actually does.