<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.10.0">Jekyll</generator><link href="https://bitcoin.review/feed.xml" rel="self" type="application/atom+xml" /><link href="https://bitcoin.review/" rel="alternate" type="text/html" /><updated>2025-06-09T03:52:36+00:00</updated><id>https://bitcoin.review/feed.xml</id><title type="html">🎙Bitcoin.Review Podcast</title><subtitle>Updates and Commentary on Bitcoin and related projects</subtitle><entry><title type="html">Bitcoin Review Podcast BR097 - Cove Wallet, Harbor, ecash, Sparrow, Liana, Bull Bitcoin, JoinMarket, Hardware Wallets, Coinbase Breach, BitLocker Vulnerability, Lightning Phoenixd, LSP Legality + MORE ft. Praveen, Ben, Paul</title><link href="https://bitcoin.review/podcast/episode-97/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR097 - Cove Wallet, Harbor, ecash, Sparrow, Liana, Bull Bitcoin, JoinMarket, Hardware Wallets, Coinbase Breach, BitLocker Vulnerability, Lightning Phoenixd, LSP Legality + MORE ft. Praveen, Ben, Paul" /><published>2025-06-05T10:00:00+00:00</published><updated>2025-06-05T10:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-97</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-97/"><![CDATA[<p>I’m joined by guests <a href="https://x.com/PraveenPerera">Praveen Perera</a>, <a href="https://twitter.com/futurepaul">Future Paul</a> &amp; <a href="https://twitter.com/benthecarman">Ben Carman</a>  to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>New COLDCARD Co-Sign (CCC) Tutorial: Automated Multisig with Spending Policies [<a href="https://www.youtube.com/watch?v=EDd6HYh7XbU">YouTube</a>]</li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:01:29 Cove Wallet
    <ul>
      <li><a href="https://github.com/bitcoinppl/cove/releases/tag/v0.5.1">v0.5.1</a>
        <ul>
          <li>Added
            <ul>
              <li>Terms and Conditions popup, which is required to use the app</li>
            </ul>
          </li>
          <li>Bug Fixes
            <ul>
              <li>Show updated label on UTXO list screen</li>
              <li>Show updated label on transaction details screen</li>
              <li>Hot wallet import flow where erasing to a correct word would not show the word as valid</li>
            </ul>
          </li>
        </ul>
      </li>
      <li><a href="https://github.com/bitcoinppl/cove/releases/tag/v0.5.0">v0.5.0</a>
        <ul>
          <li>Coin Control
            <ul>
              <li>New UTXO list screen to search, filter, sort and select individual UTXOs</li>
              <li>Select individual UTXOs to send from</li>
              <li>Set a custom amount to send from a UTXO list (the rest will be sent to change)</li>
              <li>Show UTXO labels on the confirm screen</li>
              <li>Search UTXOs by amount</li>
            </ul>
          </li>
          <li>Others
            <ul>
              <li>Add warning if fee is more than 20% of the amount you are sending</li>
              <li>Disallow sending if the fee is more than 100% of the amount you are sending</li>
            </ul>
          </li>
        </ul>
      </li>
      <li><a href="https://github.com/bitcoinppl/cove/releases/tag/v0.4.1">v0.4.1</a>
        <ul>
          <li>Redesign address QR receive sheet</li>
          <li>Redesign “Advanced More Details” sheet in the send flow</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:18:14 <a href="Harbor.cash">Harbor</a>
    <ul>
      <li>Harbor 1.0 is now available</li>
      <li>Mac, Windows (kind of), and Linux binaries available</li>
      <li>Head over to the <a href="https://github.com/HarborWallet/harbor/releases">release page on GitHub</a> to download it</li>
    </ul>
  </li>
  <li>00:35:45 Sparrow Wallet
    <ul>
      <li><a href="https://github.com/sparrowwallet/sparrow/releases/tag/2.2.2">v2.2.2</a>
        <ul>
          <li>Retrieve and show next block median fee rate in Recent Blocks view where available</li>
        </ul>
      </li>
      <li><a href="https://github.com/sparrowwallet/sparrow/releases/tag/2.2.1">v2.2.1</a>
        <ul>
          <li>Update Tor library to fix missing UUID issue when starting Tor on recent macOS versions</li>
          <li>Repackage <code class="language-plaintext highlighter-rouge">.deb</code> installs to use older gzip instead of zstd compression</li>
          <li>Remove display of median fee rate where fee rates source is set to Server</li>
          <li>Add icons for external sources in Settings and Recent Blocks view</li>
        </ul>
      </li>
      <li><a href="https://github.com/sparrowwallet/sparrow/releases/tag/2.2.0">v2.2.0</a>
        <ul>
          <li>Add Recent Blocks view to Send tab</li>
          <li>Convert all bitmapped images to theme aware SVG format for all wallet models and dialogs</li>
          <li>Support send and display of pay to anchor (P2A) outputs</li>
          <li>Switch camera library to openpnp-capture</li>
          <li>In the Download Verifier, prefer verifying the dropped file over the default file where the file is not in the manifest</li>
          <li>Show a warning when importing a wallet with a derivation path matching another script type</li>
          <li>Avoid server address resolution for public servers</li>
          <li>Add a tooltip to indicate truncated labels in table cells</li>
          <li>Dynamically truncate input and output labels in the tree on a transaction tab, and add tooltips if necessary</li>
          <li>Improve tooltips for wallet tabs and transaction diagrams with long labels</li>
          <li>Show the address where available on input and output tooltips in transaction tab tree</li>
          <li>Show the total amount sent in payments in the transaction diagram when constructing multiple payment transactions</li>
          <li>Show transaction diagram fee percentage as less than 0.01% rather than 0.00%</li>
          <li>Optimize and reduce Electrum server RPC calls</li>
          <li>And more</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:37:05 BDK bdk_chain <a href="https://github.com/bitcoindevkit/bdk/releases/tag/chain-0.23.0">v0.23.0</a>
    <ul>
      <li>This release of bdk_chain v.0.23.0 introduces a new option to cache and persist derived script pubkeys, improving performance on KeychainTxOutIndex startup, the tx_graph module now tracks and persists the first_seen timestamp for transactions which is useful for transaction ordering. The bdk_core crate added convenient is_empty methods to types TxUpdate, {Sync,Scan}Response, making it easier to check for no-op updates.</li>
      <li>Also released:
        <ul>
          <li>bdk_core v0.6.0</li>
          <li>bdk_bitcoind_rpc v0.20.0</li>
          <li>bdk_electrum v0.23.0</li>
          <li>bdk_esplora v0.22.0</li>
          <li>bdk_file_store v0.21.0</li>
          <li>bdk_testenv v0.13.0</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:37:52 Liana <a href="https://github.com/wizardsardine/liana/releases/tag/v11.0">v11.0</a>
    <ul>
      <li>Add multi-wallet support</li>
      <li>Add coin control for recovery transactions</li>
      <li>Add a new RPC command to list addresses that have been revealed to the user, whether used or not</li>
      <li>Add ability in the GUI to view unused addresses that were previously generated by the user</li>
      <li>Add support airgap flow (SD card) for Coldcard &amp; Krux signing devices</li>
      <li>It also includes various other improvements and fixes</li>
    </ul>
  </li>
  <li>00:38:24 Nunchuk Android <a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.68.1">v1.68.1</a>
    <ul>
      <li>Custom blockchain explorer</li>
      <li>Ability to archive wallets</li>
      <li>Ability to long-press &amp; reorder wallets on Home</li>
      <li>Anti-fee sniping setting</li>
    </ul>
  </li>
  <li>00:39:02 Bull Bitcoin Mobile
    <ul>
      <li><a href="https://github.com/SatoshiPortal/bullbitcoin-mobile/releases/tag/v5.0.0">v5.0.0</a>
        <ul>
          <li>The entire application has been rearchitected from the ground up for: Ease of adding new features, debugging and collaboration</li>
          <li>Additionally; the app has a fresh new UI that focuses on simplicity and consistency</li>
          <li>Supported Features
            <ul>
              <li>Create/Recover Default (Bitcoin/Liquid Wallet)</li>
              <li>Send/Receive</li>
              <li>Swaps - LN (Bolt11 &amp; LN Address) &amp; Chain</li>
              <li>Payjoin (0.23)</li>
              <li>Transaction History</li>
            </ul>
          </li>
        </ul>
      </li>
      <li><a href="https://github.com/SatoshiPortal/bullbitcoin-mobile/releases/tag/v5.0.3">v5.0.3</a>
        <ul>
          <li>Support for fiat currency preference</li>
          <li>Swap Fee Breakdown</li>
          <li>Fix calculation of absolute fees</li>
          <li>High Fee warning in send</li>
          <li>Default RBF true</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:40:39 Blue Wallet <a href="https://github.com/BlueWallet/BlueWallet/releases/tag/v7.1.8">v7.1.8</a>
    <ul>
      <li>Add: single-address Taproot wallets support (import from WIF)</li>
      <li>Add: Search txs</li>
      <li>Add: ManageWallets search address</li>
    </ul>
  </li>
  <li>00:41:00 Bitkey App <a href="https://bitkey.world/en-US/releases">v2025.10.0</a>
    <ul>
      <li>Introduce Security Hub: Display all security and recovery settings in one place, with clear recommendations that help take the guesswork out of protecting your bitcoin.</li>
    </ul>
  </li>
  <li>00:43:10 RoboSats <a href="https://github.com/RoboSats/robosats/releases/tag/v0.7.8-alpha">v0.7.8</a>
    <ul>
      <li>For Users:
        <ul>
          <li>New coordinator: LibreBazaar</li>
          <li>New payment method: Nomad</li>
          <li>Major libraries update</li>
          <li>Coordinator ratings are now cryptographically verified</li>
          <li>Private chat message are also sent as nip17 as part of the full migration of the chat to nostr</li>
          <li>Android adaptive Icons support</li>
        </ul>
      </li>
      <li>For Coordinators:
        <ul>
          <li>Nostr notes are now additionally published to port 7778</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:43:21 FullyNoded <a href="https://github.com/Fonta1n3/FullyNoded-Server/releases/tag/v0.1.1-beta">v0.1.1-beta</a>
    <ul>
      <li>Add icons to display Join Market session, conjoin and maker status</li>
      <li>Dedicated button for configuring the Join Market network, useful when switching networks with Core</li>
      <li>Ability to easily delete Core wallets, proceed with caution…</li>
      <li>Tor updated to v0.4.8.14</li>
    </ul>
  </li>
  <li>00:44:03 Zaprite <a href="https://help.zaprite.com/en/articles/11457769-zaprite-release-notes-2025-05-26">v2025-05-26</a>
    <ul>
      <li>Enable new Auto-pay feature for all accounts</li>
      <li>Enable Auto-pay and customer card management for our Stripe connection</li>
      <li>Add Misty Breez LNURL integration</li>
      <li>Add new filter on the Orders page that shows Abandoned Orders</li>
      <li>Add message to the Checkout UI showing the customer how much they could save if paying with a discounted payment method</li>
      <li>Add new Filters to the Transactions table: Currency, Method, Connection, and Type</li>
      <li>Add small preview to image upload fields which shows a small thumbnail of the image after it has been uploaded</li>
    </ul>
  </li>
  <li>00:45:43 BoltzExchange
    <ul>
      <li>boltz-client <a href="https://github.com/BoltzExchange/boltz-client/releases/tag/v2.6.1">v2.6.1</a>
        <ul>
          <li>Add new <code class="language-plaintext highlighter-rouge">getpairs</code> CLI command</li>
          <li>Handly unavailable backend gracefully on startup</li>
        </ul>
      </li>
      <li>boltz-backend <a href="https://github.com/BoltzExchange/boltz-backend/releases/tag/v3.11.0">v3.11.0</a> - Counteroffer
        <ul>
          <li>Add support for Reverse Swaps to BOLT12 offers</li>
          <li>gRPC hooks to change the behaviour of the backend</li>
          <li>And many more added features</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:45:46 Padawan Wallet <a href="https://github.com/thunderbiscuit/padawan-wallet/releases/tag/v0.16.0">v0.16.0</a> - Xeric X-Wing
    <ul>
      <li>Improve transitions between important screens</li>
      <li>Pull out translations into separate structure (localizations/ directory)</li>
      <li>Re-write theme (Tatooine Desert)</li>
    </ul>
  </li>
  <li>00:46:23 Blockstream Green Android <a href="https://github.com/Blockstream/green_android/releases/tag/release_5.0.0">v5.0.0</a>
    <ul>
      <li>Nags to backup recovery phrase</li>
      <li>Bitcoin price chart in Home</li>
      <li>New tab based navigation</li>
      <li>UI Refresh</li>
      <li>Notifications for buy related events</li>
    </ul>
  </li>
  <li>00:46:37 Samourai Dojo <a href="https://github.com/Dojo-Open-Source-Project/samourai-dojo/releases/tag/v1.27.0">v1.27.0</a>
    <ul>
      <li>Add Soroban and PandoTx functionality</li>
      <li>Update ban script to disconnect inbound Knots nodes</li>
      <li>Regenerate fulcrum certificate if expired</li>
      <li>Check if transaction already exists in pushTx</li>
      <li>Add new information to transaction API endpoint</li>
      <li>Add txout API endpoint</li>
      <li>Add ability to manage API keys</li>
      <li>Add new /support/services RPC endpoint</li>
      <li>Add an option to use blocksdir config for bitcoin blocks directory</li>
      <li>Use prebuilt addrindexrs binaries</li>
      <li>Add instructions to migrate blockchain/fulcrum</li>
    </ul>
  </li>
  <li>00:46:49 ESP-Miner <a href="https://github.com/bitaxeorg/ESP-Miner/releases/tag/v2.8.0">v2.8.0</a>
    <ul>
      <li>API enhancements:
        <ul>
          <li>Add expected hashrate to API</li>
          <li>Dashboard: Get expected hash rate from API</li>
        </ul>
      </li>
      <li>UI/UX improvements</li>
      <li>Hardware and display enhancements: Add support for multiple displays</li>
      <li>Performance and compilation
        <ul>
          <li>feat: add -O2 compiling</li>
          <li>Update version of CrC calculations</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:46:51 NBXplorer <a href="https://github.com/dgarage/NBXplorer/releases/tag/v2.5.27">v2.5.27</a> (NBXplorer is a minimalist UTXO tracker for HD wallets. The goal is to provide a flexible, .NET-based UTXO tracker for HD wallets. The explorer supports P2SH, P2PKH, P2WPKH, P2WSH, Taproot and multi-signature derivations.)
    <ul>
      <li>Introduce policy wallet tracking support (BIP388, BIP389) enabling users to track wallets with complex spending conditions via Miniscript. Taproot trees and other output descriptors like musig (BIP390) are also supported.</li>
    </ul>
  </li>
  <li>00:47:12 Mempal <a href="https://github.com/aeonBTC/Mempal/releases/tag/v1.5.3">v1.5.3</a>
    <ul>
      <li>Add swipe-down feature to refresh dashboard</li>
      <li>Add custom time option for widget auto-update frequency</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>00:47:23 DahLIAS (Discrete Logarithm-Based Interactive Aggregate Signatures): Bitcoin’s first full signature aggregation scheme for secp256k1 [<a href="https://bitcoinmagazine.com/technical/not-ecdsa-not-schnorr-meet-dahlias">Bitcoin Magazine</a>]
    <ul>
      <li>DahLIAS, developed by researchers from Blockstream and Ledger, introduces the first constant-size aggregate signature scheme based on discrete logarithms in pairing-free groups, offering significant space savings and verification speedups for blockchain systems.</li>
      <li>The signing protocol requires only two rounds, with preprocessing capabilities, and verification is approximately twice as fast as batch verification of individual Schnorr signatures.</li>
    </ul>
  </li>
  <li>00:48:25 <a href="https://mannabitcoin.com/">Manna Bitcoin</a>: A self-custodial spending wallet featuring merchant tools and PoS interface
    <ul>
      <li>It supports on-chain Bitcoin, Lightning Network, and Liquid Bitcoin transactions</li>
    </ul>
  </li>
  <li>00:48:34 <a href="https://darkwire.cyb3r17.space/">Darkwire</a>: A project that enables off-grid communication and Bitcoin transactions using LoRa technology [<a href="https://github.com/cyb3r17/darkwire">Github</a>]
    <ul>
      <li>Messages are signed, fragmented, encrypted, and transmitted through mesh networks without ISPs or satellites</li>
      <li>Currently supports Bitcoin transactions and text messages</li>
    </ul>
  </li>
  <li>00:48:44 <a href="https://parasite.space/">Parasite Pool</a>: An open-source Bitcoin mining pool with zero fees that offers Lightning-native payouts with a 10-satoshi threshold for home miners
    <ul>
      <li>The pool features a ‘pleb eat first’ reward structure, giving 1 BTC to block finders while distributing remaining 2.125 BTC plus fees among all other participants via Lightning.</li>
      <li>Small-scale miners benefit from outsized rewards relative to hashpower, making it suitable for those who need discrete operations while supporting Bitcoin’s resistance to censorship.</li>
    </ul>
  </li>
  <li>00:48:55 <a href="https://allesvoorbitcoin.be/toolsguides/blockpickergame/">Blockpicker</a>: A tool to create entropy for a seed phrase by picking blocks [<a href="https://github.com/avbpodcast/blockpickergame">Github</a>]
    <ul>
      <li>Blockpicker Entropy Game Blockpicker is an interactive, game-based tool for generating BIP39-compliant 24-word mnemonic seed phrases.</li>
      <li>Players select blocks on a 12x12 grid in a turn-based game against a computer opponent, contributing entropy to create a cryptographically secure seed phrase.</li>
    </ul>
  </li>
  <li>00:49:10 LOCK Protocol: A Bitcoin-based access protocol for encrypted secrets [<a href="https://github.com/bramkanstein/lock-protocol">Github</a>]
    <ul>
      <li>LOCK is an open protocol that uses Bitcoin transactions as cryptographic proofs to decrypt secrets</li>
      <li>The protocol seals secrets in encrypted vaults with specific unlock conditions (wallet signature, fee amount, and optional block height) that can only be met through valid Bitcoin transactions.</li>
    </ul>
  </li>
  <li>00:49:17 <a href="https://sigbash.com/">Sigbash</a>: A tool to sign blindly after conditions are met (A project developed by <a href="https://x.com/arbedout">@Arbedout</a>)
    <ul>
      <li>Sigbash provides a signing service that integrates with multisig wallets, offering signatures only under predefined conditions.</li>
      <li>The conditions for signing include factors like hashrate, Bitcoin price, address balance, or time, and are checked using mempool.space’s API. Each xpub includes a cryptographic receipt and OpenTimestamps proof.</li>
    </ul>
  </li>
  <li>00:49:38 <a href="https://arkadeos.com/">Arkade OS</a>: A virtual execution layer that transforms VTXOs and transaction trees into programmable money while maintaining security guarantees [<a href="https://github.com/arkade-os/">Github</a>]
    <ul>
      <li>The open-source Arkade ecosystem includes a <a href="https://github.com/arkade-os/compiler">compiler</a> for Bitcoin-native smart contracts, a <a href="https://github.com/arkade-os/wallet">mobile wallet</a> with PassKey authentication, and a custom script interpreter featuring over 30 new opcodes.</li>
      <li>Arkade’s implementation demonstrates how core components like VTXOs, presigned transaction trees, and batch settlements serve as building blocks for future functionality beyond payment optimization.</li>
    </ul>
  </li>
  <li>00:50:09 <a href="https://swiftbitcoin.org/">Swift Bitcoin</a>: Pure-Swift Bitcoin library and full node implementation with minimal dependencies [<a href="https://github.com/swift-bitcoin/swift-bitcoin">Github</a>]
    <ul>
      <li>Swift Bitcoin is a cross-platform fully-featured Bitcoin development framework for Swift projects</li>
      <li>It includes a standalone network client daemon as well as a command line utility for on-chain and off-chain operations</li>
    </ul>
  </li>
  <li>00:50:36 Pythia: Rust implementation of p2p-derivative-oracle for DLC trading [<a href="https://github.com/dlc-markets/pythia">Github</a>]
    <ul>
      <li>DLC Markets open sources Pythia, its dedicated price oracle system under MIT Licence</li>
      <li>Pythia provides real-time, reliable BTC/USD price attestations.</li>
    </ul>
  </li>
  <li>00:50:45 Arcana Seed Lodge: A Bitcoin wallet experience shaped by memory, mystery, and map-based entropy [<a href="https://github.com/Arcana-Seed-Lodge/arcana-seed-lodge-core">Github</a>] (WIP/Experimental wallet)
    <ul>
      <li>Arcana Seed Lodge is a location-based Bitcoin wallet generator that lets you create secure, human-friendly seeds by selecting six meaningful locations on a map.</li>
      <li>Features
        <ul>
          <li>Generate deterministic Bitcoin seeds from 6 memorable places</li>
          <li>Optional lore-driven story mode with Freemason vibes</li>
          <li>Supports offline PSBT signing (Sparrow-compatible)</li>
          <li>Built for privacy-first, device-free recovery</li>
          <li>Includes a demo wallet (not secure—just for testing)</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:50:54 <a href="https://pajasevi.github.io/bip47-verifier/">BIP47 Message Verifier</a>: A verifier for messages signed with BIP47 notification address [<a href="https://github.com/pajasevi/bip47-verifier">Github</a>]
    <ul>
      <li>A tool to verify messages signed with a PayNym</li>
    </ul>
  </li>
  <li>00:51:02 <a href="https://apps.apple.com/us/app/traxe/id6744660207">Traxe</a>: An iOS app to track your bitcoin home miners [<a href="https://github.com/reez/Traxe">Github</a>]
    <ul>
      <li>Features:
        <ul>
          <li>Automatically discover and manage your home miner devices on your network</li>
          <li>Monitor miner stats and performance in real time</li>
          <li>Support for Light and Dark mode</li>
          <li>StandBy support for always-on at-a-glance monitoring</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:51:08 <a href="https://censorshipresistant.com/">Censorship Resistant</a>: A website offering an overview of Bitcoin’s security model, attack vectors economic incentives, potential attack vectors, and decentralization of mining.</li>
  <li>00:51:21 <a href="https://www.areabitcoin.co/preview/dashboard">Bitcoin-4-All</a>: A comprehensive open-source Bitcoin course with 10 lessons in Portuguese, English and Spanish [<a href="https://github.com/areabitcoin/Bitcoin-4-All">Github</a>] (Developed by AreaBitcoin and supported by OpenSats)
    <ul>
      <li>The course covers Bitcoin fundamentals, wallet setup, and Bitcoin advantages</li>
    </ul>
  </li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>00:51:38 <a href="https://www.coinbase.com/en-pt/blog/protecting-our-customers-standing-up-to-extortionists">Coinbase data breach</a>: Rogue support agents expose KYC details of ~1 million customers [<a href="https://www.bleepingcomputer.com/news/security/coinbase-discloses-breach-faces-up-to-400-million-in-losses/">Bleeping Computer</a>]
    <ul>
      <li>Cybercriminals with rogue overseas support agents steal personal data of approximately 1% of Coinbase’s user base, demanding a 20 million ransom, which has not been granted.</li>
      <li>The stolen data includes names, addresses, government IDs and account information.</li>
      <li>The data breach <a href="https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f61fae18-f669-499e-9a87-f4d323d281f8.html">allegedly</a> occured on Dec 26, 2024 and discovered May 11, 2025.</li>
    </ul>
  </li>
  <li>00:54:07 Ledger Donjon: Vulnerability in Tangem’s Android genuine check process [<a href="https://www.ledger.com/tangem-genuine-check-bypass-on-android-application">Disclosure</a>]
    <ul>
      <li>A code flaw in Tangem’s Android app allows counterfeit hardware wallets to pass verification checks. The bug occurs when the app incorrectly checks attestation status, which allows cards with invalid signatures to appear genuine.</li>
      <li>Exploiting this vulnerability requires obtaining a genuine card’s ID and public key, then creating a counterfeit card that sends these credentials while providing an invalid signature.</li>
      <li>Tangem addressed the issue in version 5.18.3 by fixing the code to properly check attestation status.</li>
    </ul>
  </li>
  <li>00:54:46 CVE-2023-21563: BitLocker encryption bypassed in minutes with Bitpixie vulnerability [<a href="https://cybersecuritynews.com/windows-11-bitlocker-encrypted-files-accessed/">CyberSecurity News</a>]
  00:55:59 - A critical software-only vulnerability called “Bitpixie” enables attackers to bypass Microsoft’s BitLocker encryption in under five minutes without physical tampering.
    <ul>
      <li>The attack exploits the Windows bootloader’s failure to clear the Volume Master Key from memory during PXE soft reboot.</li>
    </ul>
  </li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:57:14 SimpleX
    <ul>
      <li><a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.4.0-beta.0">v6.4.0-beta.0</a>
        <ul>
          <li>“knocking”: review members prior to admitting them to your group</li>
          <li>Talk to your group members directly via chats between all group admins and members</li>
        </ul>
      </li>
      <li><a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.3.4">v6.3.4</a>
        <ul>
          <li>Recognize domain names as links (e.g., simplex.chat)</li>
          <li>Forward compatibility with “knocking”</li>
          <li>iOS improvements:
            <ul>
              <li>Opening the links in the browser/any other apps now requires confirmation in all cases</li>
              <li>Secrets in messages (e.g., #hidden secret#): shown on tap one by one, new design</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:57:15 NomadNet <a href="https://github.com/markqvist/NomadNet/releases/tag/0.7.0">v0.7.0</a>
    <ul>
      <li>Add interface management and statistics</li>
      <li>Add ability to specify page background and foreground colors to Micron parser</li>
      <li>Add transfer speed to progress bar</li>
      <li>Improve memory consumption when serving or downloading large files</li>
    </ul>
  </li>
  <li>00:57:16 Sideband <a href="https://github.com/markqvist/Sideband/releases/tag/1.6.1">v1.6.1</a>
    <ul>
      <li>Update included RNS to version 0.9.6 to use AES-256 by default</li>
      <li>Add option to configure shared instance access</li>
    </ul>
  </li>
  <li>00:57:17 Mullvad introduces <a href="https://mullvad.net/en/blog/launching-mullvad-vpn-loader">Mullvad VPN Loader</a>: An application that automatically verifies integrity and authenticity of downloaded app installations on Windows and macOS systems
    <ul>
      <li>The loader utilizes global third-party CDNs rather than solely Swedish servers, increasing  download speed by accessing content delivery networks closer to customers.</li>
    </ul>
  </li>
  <li>00:58:17 Signal Desktop <a href="https://signal.org/blog/signal-doesnt-recall/">Update</a>
    <ul>
      <li>Signal Desktop now implements “Screen security” setting on Windows 11 by default to prevent Microsoft Recall from capturing screenshots of private conversations.</li>
      <li>Signal uses DRM technology to block Recall, which takes screenshots every few seconds and stores them in a searchable database.</li>
    </ul>
  </li>
  <li>00:58:20 Have I Been Pwned <a href="https://www.troyhunt.com/have-i-been-pwned-2-0-is-now-live/">v2.0</a> (HIBP is a tool to check if your email address is in a data breach)
    <ul>
      <li>Interface rebuild</li>
      <li>Unify user tools into central dashboard</li>
      <li>Remove username/phone number search from the web interface (email remains the sole supported search identifier)</li>
      <li>Add dedicated breach pages: streamlined information and tailored post-breach advice, including future support for passkeys and localized resources</li>
      <li>Redesign dashboard and domain search tools: introduce client-side filtering and improved domain verification</li>
    </ul>
  </li>
  <li>00:58:22 KYCnot.me <a href="https://blog.kycnot.me/p/new-kycnot">Update</a> (A directory of trustworthy alternatives for buying, exchanging, trading, and using bitcoin and cryptocurrencies without having to disclose your identity)
    <ul>
      <li>New features include a point system, automated ToS scraper for KYC/AML detection, full-text search functionality, and public discussions now on GitLab.</li>
      <li>Complete rewrite in Golang after previous versions in Python/Flask and SvelteKit, now using MariaDB instead of JSON files</li>
      <li>The website is now mostly JavaScript-free (except for request forms) and now officially available on Tor and I2P networks</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li>01:00:26 Oniux: A tool that utilizes various Linux namespaces(7) in order to isolate an arbitrary application over the Tor network [<a href="https://gitlab.torproject.org/tpo/core/oniux">GitLab</a>] (A tool by the Tor Project. Considered experimental software)
    <ul>
      <li>Oniux is a command-line utility that uses Linux namespaces to isolate applications over the Tor network, preventing data leaks by placing apps in their own network namespace with a custom interface. [<a href="https://blog.torproject.org/introducing-oniux-tor-isolation-using-linux-namespaces/">Blog post</a>]</li>
      <li>Unlike torsocks, which uses SOCKS proxying through libc, oniux works on all Linux applications including static binaries and can prevent malicious applications from leaking data through direct system calls.</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>01:00:39 <a href="https://www.routstr.com/">Routstr</a>: A decentralized LLM routing marketplace powered by Nostr and Bitcoin [<a href="https://github.com/routstr">Github</a>]
    <ul>
      <li>The platform features a Smart Client SDK that finds optimal models, self-hosted proxies for OpenAI-compatible endpoints, and built-in privacy routing through SOCKS5 and Tor.</li>
      <li>Routstr facilitates micropayments between AI Model Providers and End Users through Cashu ecash tokens and BOLT12 Lightning invoices.</li>
    </ul>
  </li>
  <li>01:01:31 <a href="https://lnemail.net/">LNemail</a>: Fast anonymous email accounts powered by Bitcoin Lightning Network payments [<a href="https://github.com/lnemail/lnemail">Github</a>]
    <ul>
      <li>LNemail offers anonymous email accounts for 1000 sats per year, requiring no personal information and operating on LN payments.</li>
      <li>Service limitations: receiving only, no IMAP access (web interface or API), attachments not supported, and plain text only.</li>
      <li>No IMAP Access: Emails can only be accessed through our web interface or API.</li>
    </ul>
  </li>
  <li>01:02:22 Lightning Blinder: Trick an LSP into thinking one wallet is the sender or recipient when it’s really some other wallet [<a href="https://github.com/supertestnet/lightning_blinder">Github</a>]
    <ul>
      <li>The software aims to improve privacy on the Lightning Network by enabling mobile users with intermittent connectivity to route payments</li>
    </ul>
  </li>
  <li>01:02:32 Phoenixd MCP Server: Connect a phoenixd bitcoin lightning wallet to your LLM using Model Context Protocol [<a href="https://github.com/Sharmaz/phoenixd-mcp-server">Github</a>]
    <ul>
      <li>This tool helps integrate LN payments and node management into your AI workflows</li>
    </ul>
  </li>
  <li>01:03:27 <a href="https://amboss.tech/rails">Amboss Rails</a>: A liquidity provider service allowing Bitcoin treasuries and custodians to earn yield while maintaining self-custody of their assets [<a href="https://amboss.tech/blog/introducing-rails">Announcement</a>]
    <ul>
      <li>The service generates returns through payment routing fees and liquidity leases on the Magma Marketplace.</li>
      <li>“Amboss handles node operations with strictly limited permissions (receive lightning, open channel, close channel), using AI-driven insights derived from over five years of network data”</li>
    </ul>
  </li>
  <li>01:03:48 Sixty Nuts: A NIP-60 Cashu Wallet in Python [<a href="https://github.com/shroominic/sixty-nuts">Github</a>]
    <ul>
      <li>A lightweight, stateless Cashu wallet implementation following NIP-60 specification for Nostr-based wallet state management.</li>
      <li>Features:
        <ul>
          <li>NIP-60 Compliant: Full implementation of the NIP-60 specification</li>
          <li>NIP-44 Encryption: Secure encryption using the NIP-44 v2 standard</li>
          <li>Stateless Design: Wallet state stored on Nostr relays</li>
          <li>Multi-Mint Support: Can work with multiple Cashu mints</li>
          <li>Async/Await: Modern Python async implementation</li>
          <li>LNURL Support: Send to Lightning Addresses and other LNURL formats</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:03:54 BTCNutServer: A Cashu plugin for BTCPayServer allowing merchants to use Cashu Ecash as payment method [<a href="https://github.com/d4rp4t/BTCNutServer">Github</a>] (This plugin is in early beta and its cryptography has not been reviewed. Cashu is still experimental and not production-ready.)
    <ul>
      <li>BTCNutServer enables BTCPay Server to accept Bitcoin payments via Cashu tokens, offering two flexible payment models: ‘Trusted Mints’ (Swap) and ‘Melt Immediately’</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>LND <a href="https://github.com/lightningnetwork/lnd/releases/tag/v0.19.0-beta">v0.19.0-beta</a>
    <ul>
      <li>New Features
        <ul>
          <li>Add support for archiving channel backup in a designated folder which allows for easy referencing in the future. A new config is added disable-backup-archive, with default set to false, to determine if previous channel backups should be archived or not.</li>
        </ul>
      </li>
      <li>Protocol Updates
        <ul>
          <li><code class="language-plaintext highlighter-rouge">lnd</code> now supports the new RBF cooperative close flow</li>
          <li>Add support for experimental endorsement signal relay</li>
          <li>Add initial support for quiescence. This is a protocol gadget required for Dynamic Commitments and Splicing that will be added later.</li>
          <li>Fixed a case where the initial historical sync may be blocked due to a race condition in handling the syncer’s internal state</li>
          <li>The max fee rate is now respected when a coop close is initiated</li>
        </ul>
      </li>
      <li>Functional Enhancements
        <ul>
          <li>Add ability to paginate wallet transactions</li>
          <li>Make <code class="language-plaintext highlighter-rouge">MaxWaitNumBlocksFundingConf</code> configurable, allowing integration/development tests to set a lower value for faster funding confirmation timeout while keeping the default of 2016 blocks for production stability</li>
          <li>Add validation to ensure that MPP parameters are compatible with the payment amount before attempting the payment</li>
        </ul>
      </li>
      <li>And more: RPC Additions, lncli Additions, Functional/RPC/lncli Updates, Code Health, and Performance Improvements</li>
    </ul>
  </li>
  <li>Core Lightning <a href="https://github.com/ElementsProject/lightning/releases/tag/v25.05rc1">v25.05rc1</a>
    <ul>
      <li>Features for Users
        <ul>
          <li>Reduced latency of commit and revoke messages</li>
          <li>Reckless can update existing reckless-installed plugins via <code class="language-plaintext highlighter-rouge">reckless update</code></li>
          <li>Fixed routing of AskRene via high capacity channels</li>
          <li>More accurate anchor fees</li>
        </ul>
      </li>
      <li>Features for Developers
        <ul>
          <li><code class="language-plaintext highlighter-rouge">listhtlcs</code> pagination support with <code class="language-plaintext highlighter-rouge">index</code>, <code class="language-plaintext highlighter-rouge">start</code> and <code class="language-plaintext highlighter-rouge">end</code> parameters</li>
          <li>The <code class="language-plaintext highlighter-rouge">wait</code> api now supports the <code class="language-plaintext highlighter-rouge">listhtlcs</code> subsystem</li>
          <li>The beginnings of LSPS client and server plugins so far implementing the LSPS0 transport protocol</li>
          <li>New <code class="language-plaintext highlighter-rouge">signmessagewithkey</code> rpc to sign input messages with our wallet keys</li>
          <li><code class="language-plaintext highlighter-rouge">sendonion</code> is now compatible with <code class="language-plaintext highlighter-rouge">sendpay</code> with addition of <code class="language-plaintext highlighter-rouge">total_amount_msat</code> parameter</li>
        </ul>
      </li>
      <li>Protocol Updates
        <ul>
          <li>Peer storage graduates from experimental to default feature while bringing performance improvements</li>
          <li>Splicing interoperability with Eclair and splice RBF capability</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Cashu <a href="https://github.com/cashubtc/nutf/releases/tag/0.17.0">v0.17.0</a>
    <ul>
      <li>New Features
        <ul>
          <li>Blind Authentication
            <ul>
              <li>Limit mint access using Clear and Blind Authentication. Nutshell now supports NUT-21 and NUT-22, enabling the use of OAuth 2.0 identity providers like Keycloak (or any compatible provider).</li>
              <li>NUT-22 introduces Blind Authentication, which enhances user privacy by anonymizing authentication within the set of registered users</li>
            </ul>
          </li>
          <li>Improved Multi-Nut Payments
            <ul>
              <li>Multi-nut payments via LND are now more reliable. Nutshell queries multiple routes before failing, significantly improving payment success rates</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Removed Features: The wallet REST API has been removed from the project due to a low utility to maintenance cost ratio</li>
      <li>Additional Protocol Updates
        <ul>
          <li>SIG_ALL Multisig Flag: Users can now lock ecash to specific destinations (outputs)</li>
          <li>Mint and Melt Quote Enhancements: The update to NUT-04/05 introduces new fields (amount, unit, request) to mint and melt quotes</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>CDK <a href="https://github.com/cashubtc/cdk/releases/tag/v0.9.2">v0.9.2</a>
    <ul>
      <li>HTLC from hash support</li>
      <li>Optional transport and NUT-10 secret on payment request</li>
      <li>Multi-part payments support in cdk-cli</li>
    </ul>
  </li>
  <li>Phoenix Wallet <a href="https://github.com/ACINQ/phoenix/releases/tag/android-v2.6.0">v2.6.0</a>
    <ul>
      <li>Stateless offers with custom description: Phoenix can now generate any number of Bolt12 offers (a.k.a. reusable invoices)</li>
      <li>Custom feerate in channel closing: It’s now possible to set a feerate when closing a channel mutually</li>
      <li>(android) Manual import/export of the payments database: On Android a new export option is available in the Export screen</li>
      <li>Lightning addresses in contacts: You can now associate a Lightning address to a contact. In fact, a contact can have multiple Lightning addresses or Bolt12 offers attached.</li>
    </ul>
  </li>
  <li>Zeus <a href="https://github.com/ZeusLN/zeus/releases/tag/v0.11.0-beta2">v0.11.0-beta2</a>
    <ul>
      <li>Highlights:
        <ul>
          <li>Experimental Cashu ecash wallet</li>
          <li>Swaps: LN -&gt; on-chain, and vice versa</li>
          <li>Import and export wallet configs</li>
          <li>UTXO labeling</li>
          <li>Activity: filter for keysends</li>
          <li>CLN: support for generating Taproot addresses</li>
          <li>CLN: view closed channels</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>LDK <a href="https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.1.4">v0.1.4</a> - “Careful Validation of Bogus States”
    <ul>
      <li>Security: 0.1.4 fixes a funds-theft vulnerability in exceedingly rare cases</li>
    </ul>
  </li>
  <li>Breez SDK - Nodeless (Liquid Implementation) <a href="https://github.com/breez/breez-sdk-liquid/releases/tag/0.9.0">v0.9.0</a>
    <ul>
      <li>Receive via BOLT12 &amp; BIP353</li>
      <li>Support LNURL-Verify</li>
      <li>Add on-chain transaction ID when sending to a BTC address</li>
    </ul>
  </li>
  <li>Misty Breez <a href="https://github.com/breez/misty-breez/releases/tag/v0.1.5">v0.1.5</a> (A hybrid Lightning and Liquid network wallet built with the Nodeless Breez SDK)
    <ul>
      <li>Receive via BOLT12 &amp; BIP353</li>
      <li>Support LNURL-Verify</li>
      <li>Add on-chain transaction ID when sending to a BTC address</li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>Hub <a href="https://github.com/getAlby/hub/releases/tag/v1.17.0">v1.17.0</a> - Sean Hastings
        <ul>
          <li>Improve Friends &amp; Family</li>
          <li>Auto-swaps</li>
          <li>Sub wallet improvements</li>
          <li>Verify package signatures in install/update scripts</li>
          <li>Add onchain transactions to node page</li>
          <li>Add update banner</li>
          <li>Add info page to settings</li>
        </ul>
      </li>
      <li>Go <a href="https://github.com/getAlby/go/releases/tag/v1.13.0">v1.13.0</a>
        <ul>
          <li>Payments now show more information about recipient, payer and zaps</li>
          <li>Option to switch wallets in NWA flow</li>
          <li>Performance improvements and fixes in Send screen</li>
        </ul>
      </li>
      <li>lightning-browser-extension <a href="https://github.com/getAlby/lightning-browser-extension/releases/tag/v3.12.0">v3.12.0</a> - Herbig-Haro 24
        <ul>
          <li>Better onboarding for both master key and Nostr key</li>
          <li>“Batteries” removed from the extension</li>
          <li>New Wallet Settings menu for easier access and configuration</li>
        </ul>
      </li>
      <li>js-sdk <a href="https://github.com/getAlby/js-sdk/releases/tag/v5.1.0">v5.1.0</a>
        <ul>
          <li>feat: add hold invoice NWC methods and notification type</li>
          <li>chore: add recipient_data to tx metadata</li>
          <li>chore: add LN paywall esm example</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>LNbits <a href="https://github.com/lnbits/lnbits/releases/tag/v1.1.0">v1.1.0</a> - Alan Bits
    <ul>
      <li>New Features
        <ul>
          <li>i18n support for reset password messages</li>
          <li>Fetch all payments for a user</li>
          <li>Preimage handling for incoming payments</li>
          <li>Add verify_preimage utility</li>
          <li>Superuser setting no longer reset on delete</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>BlitzWallet <a href="https://github.com/BlitzWallet/BlitzWallet/releases/tag/Android-v0.4.5-beta">v0.4.5-beta</a>
    <ul>
      <li>Contact payments are now more private:
        <ul>
          <li>Previously: One address was stored and rotated weekly</li>
          <li>Now: 7 addresses are stored, and one is rotated out weekly</li>
          <li>Payments randomly select one of the 7 addresses to improve privacy</li>
        </ul>
      </li>
      <li>Add Items to POS Checkout: Admins can now save items and prices directly in their wallet</li>
      <li>Liquid Payments: Reduce minimum send amount for Liquid transactions to 100 sats</li>
      <li>Contact Experience:
        <ul>
          <li>You can now share someone else’s contact directly from their profile page</li>
          <li>Switch currency on contact page</li>
          <li>Uploaded contact profile images now appear during search</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>BitBanana <a href="https://github.com/michaelWuensch/BitBanana/releases/tag/v0.9.5">v0.9.5</a>
    <ul>
      <li>Simplify UTXO consolidation</li>
      <li>Add extended connection info via connection status indicator</li>
      <li>Core Lightning: Channel rebalancing feature added</li>
      <li>Core Lightning: Pick first hop on lightning payments</li>
      <li>Core Lightning: Reserved UTXOs now displayed as locked</li>
      <li>Improve compatibility with NWC</li>
      <li>Log view enhancements: Add sorting and auto-scroll options</li>
      <li>Add full Polish language support</li>
    </ul>
  </li>
  <li>Aqua Wallet <a href="https://github.com/AquaWallet/aqua-wallet/releases/tag/v0.3.0">v0.3.0</a>
    <ul>
      <li>New Features:
        <ul>
          <li>The Dolphin Card is here for beta testing</li>
          <li>New text scanner for addresses using Optical Character Recognition (OCR)</li>
          <li>Lower minimum peg-out amount from 0.001 to 0.00025 BTC (excluding fee)</li>
          <li>Reduce minimum amount for sending Liquid Bitcoin to 100 sats</li>
          <li>Addresses now have colored numbers</li>
          <li>Improve transaction tracking and fee estimates for BTC to L-BTC swaps</li>
          <li>Add the USDt swap order ID in the transaction detail page</li>
          <li>Lightning refunds are now specifically marked in the transaction list</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>RGB <a href="https://github.com/RGB-WG/rgb/releases/tag/v0.12.0-rc.1.1">v0.12.0-rc.1.1</a>
    <ul>
      <li>The 0.12 version has brought zk-STARK readiness to the RGB, a huge performance boost, and a lot of simplification and security improvements.</li>
      <li>The release candidate is for all developers working with RGB, so they can integrate it into their software, having guarantees of consensus and low-level API freeze</li>
      <li>What’s new:
        <ul>
          <li>The version 0.12 of RGB represents a result of 7 months of protocol re-design, aimed at the following:
            <ul>
              <li>Make protocol ready for zk-STARK compression;</li>
              <li>Simplify the protocol as much as possible, reducing any potential attack surface and helping protocol adoption;</li>
              <li>Ensure security of the protocol with thorough unit and integration test coverage, including tests for potential attacks;</li>
              <li>Make protocol fully production-ready by freezing consensus level changes and ensuring robustness and performance.</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>SimLN <a href="https://github.com/bitcoin-dev-project/sim-ln/releases/tag/v0.2.4">v0.2.4</a> - Let BOSSies eat Eclairs (A payment activity generator for the Lightning Network)
    <ul>
      <li>Minor release: adds support for running simulations on Eclair nodes, bringing sim-ln’s implementation support up to 3/4 major implementations.</li>
      <li>Changes:
        <ul>
          <li>Add Eclair node support</li>
          <li>Add Scorer to SimNode</li>
          <li>Unit tests for validate_activity and validate_node_network</li>
          <li>Do not allow defined activity with zero amount</li>
          <li>Parse address detecting if starts with https</li>
          <li>Validate channel policy and enforce unique scid</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li>Emptio P2P: A project to allow the purchase and sale of bitcoin p2p in a decentralized way through nostr [<a href="https://github.com/misesdev/emptio">Github</a>]
    <ul>
      <li>The application integrates with mempool.space for Bitcoin network transactions and wallet data display</li>
    </ul>
  </li>
  <li>TENEX: A context-first development tool built on Nostr [<a href="https://github.com/pablof7z/tenex">Github</a>] (A project by Pablof7z)
    <ul>
      <li>TENEX stores projects and tasks as nostr events, with each project receiving its own nsec key.</li>
      <li>It features context-first development, voice-to-code transcription, AI-powered orchestration with specialized modes, intelligent task management, project-specific nsec keys, real-time collaboration via Nostr, multi-column interface, extensible architecture, and smart context awareness.</li>
    </ul>
  </li>
  <li>Compass: An ansible configuration for setting up an indexer relay [<a href="https://github.com/coracle-social/compass">Github</a>] (A project by Coracle)
    <ul>
      <li>Ansible playbook to deploy a strfry nostr relay tailored to indexing kind 10002.</li>
    </ul>
  </li>
  <li>Publsp: A command-line tool that enables LN nodes and LSPs to advertise their liquidity offers through Nostr using kind 39735 events [<a href="https://github.com/smallworlnd/publsp">Github</a>]
    <ul>
      <li>LSPs advertise liquidity as addressable Kind 39735 events. Customers just pull and evaluate all those structured events, then NIP-17 DM an LSP of their choice to coordinate a liquidity purchase.</li>
    </ul>
  </li>
  <li><a href="https://liquiditystr.space/">liquiditystr</a>: A gateway to the Nostr P2P Lightning liquidity marketplace [<a href="https://github.com/smallworlnd/liquiditystr">Github</a>]
    <ul>
      <li>A single-page app that plugs into the customer-side publsp API to provide streamlined access to LSPs that advertise liquidity through Nostr</li>
    </ul>
  </li>
  <li>js-eventstore-benchmark: Browser benchmarks comparing different methods for storing Nostr events in the browser [<a href="https://github.com/fiatjaf/js-eventstore-benchmark">Github</a>] (A tool by fiatjaf)</li>
  <li>Nostratui: A terminal user interface (TUI) for browsing Nostr posts, written in Rust [<a href="https://github.com/adamm-xyz/nostratui">Github</a>]
    <ul>
      <li>Nostratui is a minimalist, responsive, and highly efficient terminal client for the nostr protocol</li>
    </ul>
  </li>
  <li><a href="https://nostrnips.com/">NIPs on Nostr</a>: A website for viewing official Nostr Implementation Possibilities (NIPs) and publishing custom NIPs on the Nostr network [<a href="https://gitlab.com/soapbox-pub/nostrnips">Gitlab</a>]</li>
  <li><a href="https://shosho.live/">Shosho</a>: A mobile app that enables live streaming over RTMP with Nostr integration, similar to Facebook Live but built on the Nostr protocol [<a href="https://github.com/r0d8lsh0p/shosho-releases">Github</a>]
    <ul>
      <li>Features:
        <ul>
          <li>RTMP Broadcasting: High-quality live video streaming</li>
          <li>Nostr Integration: Use your Nostr npub, announce your stream live on Nostr clients like Zap.stream and Amethyst</li>
          <li>Live Chat: See your mentions and stream chat live and respond in the app</li>
          <li>Zap Integration: Receive zaps from your viewers and get paid to stream</li>
        </ul>
      </li>
    </ul>
  </li>
  <li><a href="https://yakbak.app/">YakBak</a>: Voice message social platform [<a href="https://github.com/derekross/yakbak">Github</a>]
    <ul>
      <li>YakBak is a modern social platform built on the Nostr protocol that allows users to share and interact with voice messages</li>
      <li>Features:
        <ul>
          <li>Voice message recording and playback</li>
          <li>Threaded voice message conversations</li>
          <li>Lightning Network zaps for voice messages</li>
          <li>Reactions and engagement tracking</li>
          <li>Nostr protocol integration</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>rust-nostr
    <ul>
      <li><a href="https://github.com/rust-nostr/nostr/blob/master/CHANGELOG.md#v0421---20250526">v0.42.1</a>
        <ul>
          <li>nostr: add detailed error handling for NIP-47 response deserialization</li>
        </ul>
      </li>
      <li><a href="https://github.com/rust-nostr/nostr/blob/master/CHANGELOG.md#v0420---20250520">v0.42.0</a>
        <ul>
          <li>Breaking changes
            <ul>
              <li>nostr: rework nip46 module</li>
              <li>pool: drop support for deprecated negentropy protocol</li>
              <li>connect: encrypt NIP-46 events with NIP-44 instead of NIP-04</li>
              <li>connect: drop support for NIP-46 event decryption with NIP-04</li>
            </ul>
          </li>
          <li>Added
            <ul>
              <li>nostr: add <code class="language-plaintext highlighter-rouge">UnsignedEvent::id</code> method</li>
              <li>nostr: add <code class="language-plaintext highlighter-rouge">TagKind::single_letter</code> constructor</li>
              <li>nostr: add NIP-73 blockchain address and transaction</li>
              <li>blossom: add new crate with Blossom support</li>
              <li>mls-storage: add new crate with traits and types for mls storage implementations</li>
              <li>mls-memory-storage: add an in-memory implementation for MLS</li>
              <li>mls-sqlite-storage: a sqlite implementation for MLS</li>
              <li>mls: add new crate for implementing MLS messaging</li>
              <li>pool: add relay monitor</li>
              <li>sdk: add <code class="language-plaintext highlighter-rouge">Options::pool</code></li>
              <li>relay-builder: add support for NIP-70 protected events</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Primal
    <ul>
      <li><a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.2.20">v2.2.20</a>
        <ul>
          <li>Implement Redeem Code functionality</li>
          <li>Implement notes image gallery per latest design</li>
          <li>Implement loading and error states in ThreadScreen</li>
          <li>Add support for parsing BUD-08 upload responses</li>
        </ul>
      </li>
      <li>Implement <a href="https://primal.net/myarticles">Primal Article Editor</a>, a long form note editor interopable with other Nostr long form apps like Highlighter, Habla and Yakihonne.</li>
    </ul>
  </li>
  <li>Damus <a href="https://github.com/damus-io/damus/commit/580fa954b2d7bc4a5f18b14c8c784a0dd5f0aaa4">v1.14</a>
    <ul>
      <li>Add safety reminder to wallets with higher balance</li>
      <li>Add one-click Coinos wallet setup</li>
      <li>Add notification setting to hide hellthreads</li>
      <li>Add separated first aid option for relay lists that does not need a contact list reset</li>
      <li>Add NIP-65 relay list support</li>
      <li>Add Unicode 16 emoji reactions for iOS 18.4+ by upgrading EmojiPicker</li>
      <li>Add a search interface to the settings screen</li>
      <li>Add view introducing users to Zaps</li>
      <li>Add new wallet view with balance and transactions list</li>
      <li>Add copy technical info button to user visible errors, so that users can more easily share errors with developers</li>
      <li>Add dismiss button to wallet high balance reminders</li>
      <li>Zap receiver information now included for outgoing zaps</li>
      <li>Add inline note rendering of invoices to pull up wallet selector sheet</li>
      <li>Add route to profile page from wallet tx list</li>
    </ul>
  </li>
  <li>Coracle <a href="https://github.com/coracle-social/coracle/releases/tag/0.6.17">v0.6.17</a>
    <ul>
      <li>Show web of trust badge on DM items</li>
      <li>Make name on messages clickable</li>
      <li>Reduce duplicate dependencies</li>
      <li>Add relays to note options form</li>
    </ul>
  </li>
  <li>Zap.stream <a href="https://njump.me/nevent1qvzqqqqqqypzqcl7vvvdckzc8nlpdqg0smwsncvtl4m240py5qypec59dues2p8dqqsrz9gw66sknfukttur2hmlrgtuvwg22wfkmt2fkmmfv5tvdly4jccltsqyc">v0.8.0</a>
    <ul>
      <li>Add translations for 30 languages</li>
      <li>Add deep linking for all zap.stream links</li>
      <li>Add push notifications</li>
    </ul>
  </li>
  <li>Futr <a href="https://github.com/futrnostr/futr/releases/tag/v0.3.0">v0.3.0</a>
    <ul>
      <li>Rich Media Support
        <ul>
          <li>Image display and viewer: Images from URLs now display directly in posts with a dedicated image viewer</li>
          <li>Video player with fullscreen support: Embedded video player with play/pause controls, progress bar, and fullscreen mode</li>
          <li>Download images and videos: Save any image or video directly to your computer with a single click</li>
          <li>Video controls: Full video playback controls including time display and seeking</li>
        </ul>
      </li>
      <li>Enhanced Social Features
        <ul>
          <li>Comments &amp; Conversations
            <ul>
              <li>Nested comment threads: Comment on posts with full threaded conversation support</li>
              <li>Comment trees: Visual indentation shows conversation hierarchy and reply relationships</li>
            </ul>
          </li>
          <li>Reposts &amp; References
            <ul>
              <li>Referenced post display: Reposts and quote reposts now show the original post content inline</li>
              <li>Nested post references: Support for complex post reference chains</li>
              <li>Quote repost support: Create and view quote reposts with your commentary</li>
            </ul>
          </li>
          <li>Profile Integration
            <ul>
              <li>Smart profile rendering: npub addresses automatically display as profile names and pictures</li>
              <li>Clickable profile links: Click any profile reference to view that user’s feed</li>
              <li>Profile pictures everywhere: User avatars displayed consistently across the app</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>User Experience Improvements
        <ul>
          <li>Navigation &amp; Interface
            <ul>
              <li>Improved scrolling: Smooth scrolling behavior across all feeds and chats</li>
              <li>Collapsible sidebar: More screen space when you need it</li>
              <li>Auto-scroll intelligence: Feeds automatically scroll to new content when appropriate</li>
            </ul>
          </li>
          <li>Chat &amp; Messaging
            <ul>
              <li>Message anyone: Send private messages without requiring a follow relationship</li>
              <li>Better chat interface: Improved message display and input handling</li>
              <li>Enhanced scroll behavior: Smooth chat scrolling that remembers your position</li>
            </ul>
          </li>
          <li>Cross-Platform Support
            <ul>
              <li>Windows support: Full Windows compatibility with native installer</li>
              <li>Better performance: Reduced memory usage and faster loading</li>
              <li>Improved reliability: Better connection handling and error recovery</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nostr-PHP <a href="https://github.com/nostrver-se/nostr-php/releases/tag/1.8.0">v1.8.0</a>
    <ul>
      <li>feat: Implement NIP-05 lookups</li>
      <li>Add extra metadata fields for profile</li>
      <li>Finish implementing methods Relay and RelaySet</li>
      <li>Implement NIP-17 Private Direct Messages</li>
      <li>NIP 44 implementation fix and test improvements</li>
      <li>Remove CLI tool from library</li>
    </ul>
  </li>
  <li>Keychat <a href="https://github.com/keychat-io/keychat-app/releases/tag/1.32.6">v1.32.6</a>
    <ul>
      <li>[Ecash] Updated Keychat_rust_ffi library. Supports paid mint servers</li>
      <li>[Ecash] Added mint information page</li>
      <li>[Ecash] Added fee for Ecash billing</li>
      <li>[Browser] Enabled viewing of image URLs in WebView</li>
      <li>[Browser] Enabled PDF viewing on desktop</li>
      <li>Redesign the login page</li>
    </ul>
  </li>
  <li>Yumyume <a href="https://gitlab.com/digitalethicsagency/nostr/yumyume/-/tags/0.7.0">v0.7.0</a> - Mezze Platter with Labneh, Olives &amp; Spiced Lamb
    <ul>
      <li>Version 0.7.0 brings together bookmark insights, URL context, smarter tagging, and improved flows for new users</li>
      <li>Features:
        <ul>
          <li>Bookmark detail page: Click on a timestamp to open the new bookmark detail page</li>
          <li>URL detail page: Click the info icon in the feed or bookmark detail to open a dedicated page for the URL</li>
          <li>Update Bookmarklet to Kind 39701</li>
          <li>Nstart integration: “Create a Profile” button now supports dynamic return URLs</li>
          <li>Tags feed: Popular tags now only reflect the last 30 days</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nostur <a href="https://github.com/nostur-com/nostur-ios-public/releases/tag/1.21.0">v1.21.0</a>
    <ul>
      <li>Support Follow Packs</li>
      <li>Support Blossom servers (uploading and mirroring)</li>
      <li>Post Preview for Picture-only posts</li>
      <li>Audio-only bar</li>
      <li>Drag unread counter anywhere, tap to go to next unread post</li>
      <li>Show media info in iOS Now Playing control center</li>
    </ul>
  </li>
  <li>0xChat App <a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.10-release">v1.4.10</a>
    <ul>
      <li>Add support for creating MLS private groups</li>
    </ul>
  </li>
  <li>Samiz <a href="https://github.com/KoalaSat/samiz/releases/tag/v0.0.5-alpha">v0.0.5-alpha</a> (BLE mesh for nostr notes when the internet is down)
    <ul>
      <li>Add Logs view</li>
      <li>Add Help view</li>
    </ul>
  </li>
  <li>Runstr <a href="https://github.com/HealthNoteLabs/Runstr/releases/tag/new-features-0.4.5-20250530-135132">v0.4.7</a> - Bug Squashing 🐛
    <ul>
      <li>Step tracking: Improve step tracking and pedometer precision</li>
      <li>Nostr &amp; Privacy:
        <ul>
          <li>NIP-101h: Choose what fitness details to share on Nostr (intensity, cadence, heart rate)</li>
          <li>Remove fallback to public relays when using private relays for NIP-101h and NIP-101e events</li>
        </ul>
      </li>
      <li>Rewards System: Improve payouts reliability</li>
      <li>UI &amp; OS: GrapheneOS: Enhance location tracking with better permission handling and updated manifest requirements</li>
      <li>Countdown Controls: “Skip Start Countdown” Check Box</li>
    </ul>
  </li>
  <li>Pokey <a href="https://github.com/KoalaSat/pokey/releases/tag/v0.2.1-beta">v0.2.1-beta</a>
    <ul>
      <li>Subscription feature: Additionally listen to all notes published by an NPUB, all notes under an NEVENT or any note including a specific #HASHTAG. Notes are fetched in user’s inbox relays.</li>
      <li>If the note contains an image URL, it now displays</li>
    </ul>
  </li>
  <li>TollGate (Enables WiFi routers to accept Bitcoin payments for internet access)
    <ul>
      <li><a href="https://github.com/OpenTollGate/tollgate-os/releases/tag/v0.0.3">v0.0.3</a>
        <ul>
          <li>The router now automatically pays out accumulated funds to Lightning addresses</li>
          <li>Add support for splitting payments between multiple Lightning addresses</li>
          <li>Enhance configuration options for mints with more detailed settings for balance management and payout preferences</li>
        </ul>
      </li>
      <li><a href="https://github.com/OpenTollGate/tollgate-os/releases/tag/v0.0.2">v0.0.2</a>
        <ul>
          <li>Streamline build process with new GitHub Actions workflows, making it easier to create and publish releases</li>
          <li>Enhance configuration management system, allowing for more flexible and robust setup options</li>
          <li>The system now randomizes the LAN IP address on first boot</li>
          <li>Update first boot script to configure the network settings more effectively, including setting DNS servers to CloudFlare DNS</li>
          <li>Introduce new release.json file to manage module versions and dependencies</li>
          <li>Add package management files (packages_dev.json and packages_stable.json) to define external and custom packages for the OS</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:07:13 Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @AVERAGE_GARY (10,200 sats) “libbitcoinkernel maximalism” “That’s OSMU taking the bitaxe donations. Need more manufacturing implementations. Just like Core”</li>
      <li>@hgw39 (10,000 sats) “As NVK said, we have the option to not update and run an older version. But Core encourage us to update to more recent versions for security. <strong>This sounds reasonable to me so what are the security ramifications if you run an older version?</strong> <strong>Also, could you explain more about the Lebitcoin kernel project Craig was talking about.</strong> That sounds interesting. Thanks.”</li>
      <li>@Rod Palmer (5,000 sats) “scolding people who don’t run nodes wasn’t effective. telling people that running a specific flavor of node will make people they don’t like extremely mad may just work”</li>
      <li>@Chris (5,000 sats) “Would still love the ability to export a Secure Note encrypted with bip85 entropy that can be decrypted at any point in the future by a coldcard running the same seed/passphrase combo. A stacker news <a href="https://stacker.news/items/853095">poll</a> showed over 50% of users would be interested in this feature.”</li>
      <li>@Hech (1,000 sats) “Great episode”</li>
      <li>@Bob the Cow (500 sats) “Mooooo”</li>
      <li>@Plunger (343 sats) “Great panel, informative show.”</li>
      <li>@Homer Hodl (120 sats) “For the block clock refresh.. <strong>how about the ability to set a threshold to update the display quicker than the default if the new value exceeds the adjustable threshold?</strong>”</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tip-of-the-day">Tech Tip of the Day</h3>
<ul>
  <li>Signallama: Signal bot to chat with your ollama instance [<a href="https://github.com/aljazceru/signallama">Github</a>]
    <ul>
      <li>Signallama enables users to interact with LLMs via the Signal messaging platform</li>
      <li>It primarily supports Ollama but is compatible with various LLM providers through LiteLLM</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/05/30/">356</a>
        <ul>
          <li>Do attributable failures reduce LN privacy? Carla Kirk-Cohen <a href="https://delvingbitcoin.org/t/latency-and-privacy-in-lightning/1723">posted</a> to Delving Bitcoin an analysis of the possible consequences for the privacy of LN spenders and receivers if the network adopts attributable failures, particularly telling the spender the amount of time it took to forward a payment at each hop.</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/05/16/">354</a>
        <ul>
          <li>Vulnerability disclosure affecting old versions of Bitcoin Core: Antoine Poinsot <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/EYvwAFPNEfsQ8cVwiK-8v6ovJU43Vy-ylARiDQ_1XBXAgg_ZqWIpB6m51fAIRtI-rfTmMGvGLrOe5Utl5y9uaHySELpya2ojC7yGsXnP90s=@protonmail.com/">posted</a> to the Bitcoin-Dev mailing list to announce a vulnerability affecting Bitcoin Core versions before 29.0.
            <ul>
              <li>An attacker could send an excessive number of node address advertisements to force a 32-bit identifier to overflow, resulting in a node crash.</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li>Soft-fork proposal: Dust Expiry: Clean the UTXO set from spam [<a href="https://delvingbitcoin.org/t/dust-expiry-clean-the-utxo-set-from-spam/1707/1">Delving Bitcoin</a>]
    <ul>
      <li>Dust Expiry is a soft-fork proposal that prunes low-value, inactive UTXOs from the set unless the owner provides proof or pays an ongoing cost, effectively removing spam from those unwilling to maintain it.</li>
    </ul>
  </li>
  <li>BIP39 Extension for Manual Seed Phrase Creation [<a href="https://gnusha.org/pi/bitcoindev/a139ee2e-473c-487b-a9b0-e68013fdb7cen@googlegroups.com/">Bitcoin Dev discussion</a>]
    <ul>
      <li>The proposal uses every eighth word from existing wordlists to create 16-word phrases with 128 bits of entropy.</li>
      <li>The system encodes derivation paths in the least significant three bits of each word, allowing for specification of up to seven different paths or 48 bits of metadata.</li>
    </ul>
  </li>
</ul>

<h4 id="lightning--l2-1">Lightning + L2+</h4>
<ul>
  <li>Wallet of Satoshi teases the upcoming launch of a fully non-custodial Lightning wallet in the U.S. market [<a href="https://x.com/walletofsatoshi/status/1923875750165479768">Twitter post</a>]
    <ul>
      <li>WoS ceased its operations in the U.S. in November 2023.</li>
    </ul>
  </li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Block Inc. announces bitcoin payment integration for Square merchants, reaching all eligible sellers by 2026 [<a href="https://block.xyz/inside/block-to-roll-out-bitcoin-payments-on-square">Announcement</a>]
    <ul>
      <li>Follow-up: Block reveals their LN routing node generates 9.7% annual returns with 184 BTC capacity [<a href="https://atlas21.com/lightning-routing-yields-10-annually-blocks-announcement/">Atlas21</a>]</li>
    </ul>
  </li>
  <li>Breez and Spark announce a new implementation of the Breez SDK built on Spark’s Bitcoin-native Layer 2 infrastructure, enabling developers to integrate self-custodial Lightning payments into apps [<a href="https://blog.breez.technology/breez-spark-a-new-way-to-build-on-bitcoin-5abc3fb515cb">Announcement</a>]
    <ul>
      <li>The implementation provides support for all major programming languages, LNURL, Lightning addresses, and mobile notifications without relying on bridges or external consensus.</li>
    </ul>
  </li>
  <li>Ledn announces a strategic shift to focus solely on bitcoin-backed lending, effective July 1, 2025, as 95% of their loan clients currently use bitcoin as collateral [<a href="https://www.ledn.io/post/bitcoin-future">Announcement</a>]</li>
  <li>Casa app now allows users to connect bank accounts and buy bitcoin directly through its Zero Hash partnership, supporting ACH and wire transfers [<a href="https://blog.casa.io/buy-and-sell-bitcoin-with-casa/">Announcement</a>]</li>
  <li>GameStop Corp. announces the purchase of 4,710 bitcoin [<a href="https://investor.gamestop.com/news-releases/news-details/2025/GameStop-Announces-Purchase-of-Bitcoin/default.aspx">Press release</a>]</li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>OpenSats announces its <a href="https://opensats.org/blog/elevent-wave-of-bitcoin-grants">Eleventh Wave of Bitcoin Grants</a> to “support a diverse set of contributors advancing Bitcoin’s infrastructure, tooling, and accessibility.”
    <ul>
      <li>Three first-time projects have been choosen: BitShoka, Great Script Restoration, and 256 Foundation; alongside three renewed project grants for Payjoin, Mostro, and P2Pool v2.</li>
    </ul>
  </li>
  <li>Btrust <a href="https://blog.btrust.tech/introducing-the-btrust-2025-event-and-education-grants/">awards</a> a total of $1,004,010 to 10 grant recipients, including four for developer education, two for events, and four for conferences:
    <ul>
      <li>Summer of Bitcoin, Vinteum, Bitshala, Librería de Satoshi’s B4OS, Adopting Bitcoin Cape Town 2025, Bitcoin++ Florianopolis 2025, Dakar Bitcoin Days 2025, Africa Bitcoin Conference 2025, Africa Free Routing Lightning Bootcamps, and Base58’s LARP Tutor Session in Mauritius.</li>
    </ul>
  </li>
  <li>The Human Rights Foundation announces a 8 BTC donation to 22 projects and individuals working on Bitcoin and freedom tech [<a href="https://bitcoinmagazine.com/news/human-rights-foundation-donates-800-million-satoshis-to-22-worldwide-bitcoin-and-freedom-projects">Bitcoin Magazine</a>]
    <ul>
      <li>The recipients are: Mostro, SudaBit, Stringer News, Prices Today, Instamouse, Seedsigner, Spacebear, Padawan Wallet, Brink, Coin Center, Bitcoin Design Foundation, EmberOne, 2025 FROST Developer Support, Ecash UX Improvement Project, Summer of Bitcoin, Entropy, Evento, Brandon Odiwuor, Satoshi Sister Circle, Bitcoin Month, Bitcoin Pidgin &amp; Bitcoin Anambra, and Bitcoin Boma.</li>
    </ul>
  </li>
  <li>Bitcoin educational project My First Bitcoin receives a $1 million grant from #startsmall initiative [<a href="https://myfirstbitcoin.io/my-first-bitcoin-receives-1-million-grant-from-startsmall-to-advance-independent-bitcoin-education-around-the-world/">Press release</a>]</li>
  <li>Maelstrom Fund announces a $100,000 open source developer year-long grant to Ben Allen for his work on the Payjoin Dev Kit [<a href="https://cointelegraph.com/news/bitcoin-payjoin-privacy-grant-maelstrom">Coin Telegraph</a>]</li>
</ul>

<h4 id="bounty">Bounty</h4>
<ul>
  <li><a href="https://skibidi.cash/">Skibidi Wallet Bounty</a>: A bounty to build the first brainrot Bitcoin wallet for Gen Z and Gen Alpha
    <ul>
      <li>Skibidi Cash announces a $6,500 bounty for developing a mobile-first, self-custodial Bitcoin wallet targeting Gen Z and Gen Alpha.</li>
      <li>The wallet must feature a brutalist/meme/brainrot user experience, be open-source under the MIT license, and operate on mainnet.</li>
    </ul>
  </li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li>Bitlayer Labs partners with Antpool, F2Pool, and SpiderPool for BitVM bridge implementation [<a href="https://x.com/BitlayerLabs/status/1927187546448036216">Announcement</a>]
    <ul>
      <li>Mining partners (which together represent nearly 40% of Bitcoin’s global hashrate) will provide interfaces accepting non-standard transactions.</li>
    </ul>
  </li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>Telegram sees sharp rise in user data sharing with authorities in Q1 2025 [<a href="https://archive.ph/E2jBE">404 Media</a>]
    <ul>
      <li>Telegram provided data on 22,777 users to authorities in Q1 2025, a significant increase from 5,826 users in the same period of 2024.</li>
      <li><a href="https://te-k.github.io/telegram-transparency/">Telegram Transparency Data</a>: A webpage of crowdsourced data on Telegram transparency, displaying how many requests were accepted by Telegram and where [<a href="https://github.com/Te-k/telegram-transparency">Github</a>]</li>
    </ul>
  </li>
</ul>

<h4 id="quantum">Quantum</h4>
<ul>
  <li>How to factor 2048 bit RSA integers with less than a million noisy qubits [<a href="https://www.arxiv.org/abs/2505.15917#">ArXiv Research paper</a>]
    <ul>
      <li>A new research reduces qubit requirements for factoring 2048-bit RSA integers from 20 million to less than a million, though increasing runtime from eight hours to less than a week.</li>
      <li>The research maintains consistent assumptions about quantum hardware capabilities, including 0.1% gate error rate and specific timing parameters for surface code cycles.</li>
    </ul>
  </li>
</ul>

<h4 id="bitcoin-security-incidents">Bitcoin Security Incidents</h4>
<ul>
  <li>Attempted kidnapping of Bitcoin exchange executive’s daughter in Paris, France [<a href="https://www.lemonde.fr/en/france/article/2025/05/16/french-crypto-boss-hails-heroic-duo-who-foiled-kidnap-attempt-on-his-family_6741350_7.html">Le Monde</a>]
    <ul>
      <li>Four masked men attempt to kidnap the daughter of Paymium cryptocurrency exchange CEO and co-founder in Paris’ 11th district.</li>
    </ul>
  </li>
  <li>French police thwarts multiple kidnapping attempts targeting cryptocurrency entrepreneurs and their families [<a href="https://www.bfmtv.com/police-justice/cryptomonnaies-tentative-d-enlevement-commando-arrete-ce-que-l-on-sait-des-nouvelles-interpellations_AN-202505270839.html">BFM TV</a>]
    <ul>
      <li>Ten suspects were arrested Monday in Nantes just before attempting to abduct someone linked to cryptocurrencies.</li>
      <li>Police conducted a second raid Tuesday, arresting the commando responsible for a May 13 kidnapping attempt in Paris’s 11th district.</li>
    </ul>
  </li>
  <li>Crypto investor arrested for torturing Italian businessman in NYC, U.S. extortion plot [<a href="https://www.coindesk.com/policy/2025/05/26/u-s-crypto-investor-charged-with-kidnapping-and-torturing-victim-over-bitcoin">CoinDesk</a>]
    <ul>
      <li>John Woeltz is charged with kidnapping and assaulting a 28-year-old Italian businessman in a luxury SoHo apartment, attempting to extort cryptocurrency passwords through torture with electric shocks, drugs, and chainsaw threats.</li>
      <li>The victim, held captive for two weeks, escaped on Friday 23rd May believing he would be killed.</li>
    </ul>
  </li>
  <li>Man kidnapped in Sofia, Bulgaria for 14 bitcoin by fake police officers on October 7, 2024 [<a href="https://btvnovinite.bg/bulgaria/otvlichane-ot-mnimi-policai-za-14-bitkojna-razkaz-na-sluzhitel-na-sdvr-samo-pred-btv.html">BTV Novinite</a>]
    <ul>
      <li>A 35-year-old man is kidnapped on October 7 by individuals posing as police officers in Lyulin district. The victim is threatened with a gun and forced to transfer 14 bitcoin.</li>
      <li>Searches reveal fake police credentials, a CDCOC badge, an airsoft pistol, and a blue police lamp</li>
    </ul>
  </li>
  <li>U.S. tourist loses $123K in crypto after being drugged by fake Uber driver in London, UK following a night out [<a href="https://decrypt.co/321243/us-tourist-bitcoin-xrp-123k-stolen-ride-fake-uber-london">Decrypt</a>]
    <ul>
      <li>The driver offers a cigarette believed to contain scopolamine, causing the victim to unwittingly reveal his phone passcode, which allowed the attacker to access his Revolut account, stealing $72k in XRP tokens and $50k in bitcoin.</li>
    </ul>
  </li>
  <li>Russian entrepreneurs running a cryptocurrency business kidnapped in Palermo, Argentina [<a href="https://archive.is/2EHz4">TN</a>]
    <ul>
      <li>The victims, found tied up by police, paid a $43,000 cryptocurrency ransom through a friend. The suspects flee Argentina to the United Arab Emirates and are now subject to an Interpol red alert.</li>
    </ul>
  </li>
  <li>South Korean police arrest a Russian suspect following an attempted $730,000 crypto robbery at a Seoul hotel [<a href="https://archive.is/2kDp5">CoinTelegraph</a>]
    <ul>
      <li>Two other suspects fled the country before authorities could prevent their departure.</li>
      <li>The three Russians posed as crypto traders, luring 10 Korean investors to a hotel room where they ambushed victims with replica weapons and cable ties. One victim escaped, alerting police and causing the suspects to flee empty-handed.</li>
    </ul>
  </li>
  <li>Ugandan crypto founder abducted and robbed of $500,000 by armed men impersonating military officers [<a href="https://archive.is/UfCv4">Decrypt</a>]
    <ul>
      <li>Attackers forced him to transfer half a million USD in cryptocurrency and sell portions of his holdings under duress.</li>
      <li>The victim’s company reports this incident as part of a larger trend, claiming over 48 similar crypto-related attacks have occurred in Uganda.</li>
    </ul>
  </li>
  <li>Three Chinese nationals are expelled from Paraguay after an attempted assault on a crypto-mining company that led to a police chase and shooting [<a href="https://archive.is/rm7nw">Monumental</a>]
    <ul>
      <li>The prosecutor confirmed the foreigners entered Paraguay illegally through Bolivia and Brazil, stating that “They came as programmers to work at the company”.</li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #31622: psbt: add non-default sighash types to PSBTs and unify sighash type match checking [<a href="https://github.com/bitcoin/bitcoin/pull/31622">Merged</a>]</li>
  <li>Bitcoin Core #32155: miner: timelock the coinbase to the mined block’s height [<a href="https://github.com/bitcoin/bitcoin/pull/32155">Merged</a>]</li>
  <li>Bitcoin Core #31444: cluster mempool: add txgraph diagrams/mining/eviction [<a href="https://github.com/bitcoin/bitcoin/pull/31444">Merged</a>]</li>
  <li>Core Lightning #8140: Peer storage enable [<a href="https://github.com/ElementsProject/lightning/pull/8140">Merged</a>]</li>
  <li>Core Lightning #8021: Splice: Interop Final (probably) with Eclair [<a href="https://github.com/ElementsProject/lightning/pull/8021">Merged</a>]</li>
  <li>Core Lightning #8226: Signmessage: Add a new rpc called signmessagewithkey that can be used to sign messages using any key
from our wallet [<a href="https://github.com/ElementsProject/lightning/pull/8226">Merged</a>]</li>
  <li>LDK #3796: Do not dip into the funder’s reserve to cover the two anchors [<a href="https://github.com/lightningdevkit/rust-lightning/issues/3796">Merged</a>]</li>
  <li>NIPs #1919: NIP-79: Passkey-Wrapped Keys a.k.a. Nosskey [<a href="https://github.com/nostr-protocol/nips/pull/1919">Open</a>]</li>
  <li>NIPs #1934: Add NIP-XX: Static Payment Addresses [<a href="https://github.com/nostr-protocol/nips/pull/1934">Open</a>]</li>
  <li>NIPs #1923: Create NIP-XX.md: Voice Messages [<a href="https://github.com/nostr-protocol/nips/pull/1923">Open</a>]</li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>Bipartisan Blockchain Regulatory Certainty Act reintroduced in U.S. Congress [<a href="https://www.coincenter.org/torres-and-emmer-reintroduce-the-blockchain-regulatory-certainty-act/">Coin Center</a>]
    <ul>
      <li>The bill aims to provide clarity for non-custodial crypto infrastructure developers and protect crypto developers from undue regulation and misapplication of licensing laws that have impeded privacy tech development in the U.S.</li>
    </ul>
  </li>
  <li>UK’s new strict crypto reporting requirements raise data security concerns [<a href="https://lightning.news/uk-to-require-crypto-report-every-transaction/">Lightning News</a>]
    <ul>
      <li>Starting January 2026, UK implements extensive reporting requirements for all crypto firms serving UK customers, requiring collection of personal data and transaction details as part of OECD’s CARF initiative.</li>
    </ul>
  </li>
  <li>Pakistan announces creation of government-led Bitcoin Strategic Reserve, allocates 2,000 megawatts of excess energy to mining and establishes a Digital Asset Authority [<a href="https://cointelegraph.com/news/blockchain-explorers-embed-security-insights-to-protect-users-from-onchain-scams">Coin Telegraph</a>]</li>
</ul>

<h4 id="legal">Legal</h4>
<ul>
  <li>Samourai Wallet’s defense releases its <a href="https://storage.courtlistener.com/recap/gov.uscourts.nysd.615997/gov.uscourts.nysd.615997.95.0.pdf">motion to dismiss</a></li>
  <li>Roman Sterlingov’s defense requests the DOJ to drop charges, citing Todd Blanche’s memo against “victimless cryptocurrency regulatory prosecutions” [<a href="https://www.therage.co/sterlingov-defense-asks-doj-to-drop-charges-following-blanche-memo/">The Rage</a>]
    <ul>
      <li>Defense argues prosecution lacks victims or eyewitnesses, noting “no victims testified at Mr. Sterlingov’s trial or sentencing” and jury was instructed to disregard awareness of illicit activity.</li>
    </ul>
  </li>
  <li>Roman Storm’s defense re-petitions court to compel FinCEN communications, claiming government “misled this Court with regard to the scope of Section 1960 under relevant FinCEN guidance” [<a href="https://www.therage.co/roman-storm-re-petitions-court-to-compel-fincen-communications/">The Rage</a>]
    <ul>
      <li>Motion follows revelations in Samourai Wallet case where FinCEN officials indicated cryptocurrency mixing services without control are “NOT” money transmitting businesses, contradicting prosecution’s arguments.</li>
      <li><a href="https://www.therage.co/tornado-cash-sdny-abandons-financial-institution-theory/">Follow-up</a>: SDNY abandons the theory that Tornado Cash was a financial institution, dropping unlicensed money transmission charges but continues to pursue charges under the Patriot Act.</li>
      <li><a href="https://www.therage.co/failla-custody-issue-not-important-to-storms-defense/">Follow-up</a>: Judge Failla rejects Roman Storm’s defense argument that non-custodial status matters, stating “You haven’t persuaded me that the custody issue is as important as you say.”</li>
    </ul>
  </li>
  <li>The SEC formally dismisses its lawsuit against Binance and Changpeng Zhao, ending one of the last remaining crypto enforcement actions [<a href="https://www.cnbc.com/2025/05/29/sec-drops-binance-lawsuit-ending-one-of-last-remaining-crypto-actions.html">CNBC</a>]
    <ul>
      <li>Binance forges ties with World Liberty Financial, which funnels 75% of profits to Trump family-linked entities and receives a $2 billion investment from MGX.</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://www.glasgowbitcoin.co.uk/">Scottish Bitcoin Conference</a>: Glasgow is hosting Scotland’s very own Bitcoin Conference
    <ul>
      <li>August 23rd, 2025 in Glasgow, Scotland</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>UTXO Set Report, by orangesurf [<a href="https://research.mempool.space/utxo-set-report/">Mempool Research</a>]</li>
      <li>The 2015 Spam Attacks, by BitMEX Research [<a href="https://blog.bitmex.com/the-2015-spam-attacks/">Blog post</a>]</li>
      <li>Low Time Preference or Self-Neglect?, by Bitcoin Park [<a href="https://x.com/bitcoinpark_/status/1927022084267331801">Blog post</a>]</li>
      <li>Seedless is safer, by Jonathan Pollack [<a href="https://bitkey.build/seedless-is-safer/">Bitkey</a>]</li>
      <li>Nerd of the Month #3: Working on Longevity, by Nick Johnson [<a href="https://spiralbtc.substack.com/p/nerd-of-the-month-3-working-on-longevity">Spiral</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, FUTURE PAUL, PRAVEEN, BENTHECARMAN</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Praveen Perera, Future Paul &amp; Ben Carman to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR096 - OP_RETURN Debate, Bitcoin Core Governance, Alternative Implementations, Future Soft Forks, CTV Prospects, Core Vulnerabilities, COLDCARD Hardware Design, Testnet vs Signet + MORE ft. Rob, Odell &amp;amp; Craig</title><link href="https://bitcoin.review/podcast/episode-96/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR096 - OP_RETURN Debate, Bitcoin Core Governance, Alternative Implementations, Future Soft Forks, CTV Prospects, Core Vulnerabilities, COLDCARD Hardware Design, Testnet vs Signet + MORE ft. Rob, Odell &amp;amp; Craig" /><published>2025-05-15T13:00:00+00:00</published><updated>2025-05-15T13:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-96</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-96/"><![CDATA[<p>I’m joined by guests <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a>, <a href="https://twitter.com/craigraw">Craig Raw</a> &amp; <a href="https://primal.net/odell">Matt Odell</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>New Coldcard Q tutorial: How to use the COLDCARD key teleport function on the Coldcard Q [<a href="https://www.youtube.com/watch?v=Bg0r0DQVcDg">YouTube</a>]</li>
</ul>

<h3 id="op_return-drama">OP_RETURN Drama</h3>
<ul>
  <li>00:00:52 Odell’s thoughts</li>
  <li>00:04:29 Craig’s thoughts</li>
  <li>00:05:59 NVK’s thoughts</li>
  <li>00:07:47 Rob’s thoughts</li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:22:10 COLDCARD
    <ul>
      <li>Shared Improvements - Both Mk4 and Q
        <ul>
          <li>Enhancement: Text word-wrap done more carefully so never cuts off any text, and yet doesn’t waste space.</li>
          <li>Bugfix: Add current tmp option, which could be shown in Seed Vault menu under specific circumstances, would corrupt master settings if selected.</li>
          <li>Bugfix: PUSHDATA2 in bitcoin script caused yikes.</li>
          <li>Bugfix: Warning for unknown scripts was not shown at the top of the signing story.</li>
        </ul>
      </li>
      <li>Mk4 Specific Changes
        <ul>
          <li>5.4.3 - 2025-05-14
            <ul>
              <li>Bugfix: With both NFC &amp; Virtual Disk OFF, user cannot exit Export Wallet menu. Gets stuck in export loop and needs reboot to escape.</li>
              <li>Bugfix: Part of extended keys in stories were not always visible.</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Q Specific Changes
        <ul>
          <li>1.3.3Q - 2025-05-14
            <ul>
              <li>Bugfix: Do not allow to teleport PSBTs from SD card when CC has no secrets.
Bugfix: Calculator login mode: added “rand()” command, removed support for variables/assignments.</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:22:21 BDK <a href="https://github.com/bitcoindevkit/bdk/releases/tag/chain-0.22.0">v0.22.0</a> - Release chain
    <ul>
      <li>Improve syncing experience for electrum and esplora</li>
      <li>Relevant transactions that are missing can now be evicted with the help of <code class="language-plaintext highlighter-rouge">SyncRequestBuilder</code></li>
      <li><code class="language-plaintext highlighter-rouge">CanonicalizationParams</code> can be used to modify the behavior of <code class="language-plaintext highlighter-rouge">CanonicalIter</code> for a given query</li>
      <li>Update dependency on miniscript to 12.3.1 along with various fixes and improvements</li>
    </ul>
  </li>
  <li>00:22:35 Cove Wallet <a href="https://github.com/bitcoinppl/cove/releases/tag/v0.4.0">v0.4.0</a>
    <ul>
      <li>Support for importing hardware wallets with <a href="https://github.com/bitcoin/bips/blob/master/bip-0380.mediawiki#key-expressions">Key Expressions</a>: adds support for using Cove with Krux</li>
      <li>Create a CSV file of your transactions with fiat values for each transaction at the time of the transaction: useful for tax reporting</li>
      <li>Send flow improvements and bug fixes
        <ul>
          <li>Show proper formatting as you type</li>
          <li>Default to entering the amount in before the address</li>
        </ul>
      </li>
      <li>Testnet4 support</li>
    </ul>
  </li>
  <li>00:24:03 BTCPay Server <a href="https://github.com/btcpayserver/btcpayserver/releases/tag/v2.1.1">v2.1.1</a>
    <ul>
      <li>Add support for a subset of wallet policy output descriptors (BIP388, BIP389)</li>
      <li>Add support for hardware wallet taproot signing (BIP86)</li>
      <li>Enables linking payment requests to external invoices (e.g., QuickBooks, Xero) via a Reference Id</li>
      <li>Allows searching Payment Requests Reference Id</li>
      <li>Introduces a webhook triggered when a Payment Request is fully paid, useful for automating emails or other actions</li>
    </ul>
  </li>
  <li>00:24:06 Nunchuk Android <a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.68">v1.68</a>
    <ul>
      <li>Custom blockchain explorer</li>
      <li>Ability to archive wallets</li>
      <li>Ability to long-press &amp; reorder wallets on Home</li>
      <li>Anti-fee sniping setting</li>
    </ul>
  </li>
  <li>00:24:12 Bitcoin Keeper <a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v2.2.0">v2.2.0</a>
    <ul>
      <li>New Bitcoin Keeper branding</li>
      <li>New Keeper Private tier</li>
      <li>Add testnet support</li>
      <li>Allow using Server Key with multiple users</li>
      <li>Support import and export of BIP329 labels</li>
    </ul>
  </li>
  <li>00:24:14 Bitcoin Safe <a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.3.0">v1.3.0</a>
    <ul>
      <li>Redesign of Chart, Quick Receive, Icons, and Mempool Preview</li>
      <li>Interactive chart (clicking jumps to transaction and selected transactions are highlighted)</li>
      <li>Receive faster (CPFP)</li>
      <li>BDK 1.2 (upgraded from 0.32)</li>
      <li>Testnet4 support</li>
      <li>Preconfigured Testnet demo wallets</li>
    </ul>
  </li>
  <li>00:24:18  Wasabi Wallet <a href="https://github.com/WalletWasabi/WalletWasabi/releases/tag/v2.6.0">v2.6.0</a> - Prometheus
    <ul>
      <li>Support for Standard BIP 158 Block Filters: Wasabi can now synchronize using BIP 158 filters without requiring a backend/indexer</li>
      <li>Full Node Integration Rework: The previous integration was replaced with a simpler, more flexible system which is not limited to a specific Bitcoin node fork and doesn’t depend on the node running                          	  on the same machine as Wasabi, or require modifications to the node’s configuration.</li>
      <li>Create &amp; Recover SLIP 39 Shares: Create and recover wallets with multiple share backups using SLIP 39.</li>
      <li>Nostr Update Manager: Use the Nostr network to receive update information and download locations instead of relying on GitHub’s goodwill</li>
      <li>And more…
        <ul>
          <li>Add a configurable third-party fallback for broadcasting transactions if other methods fail</li>
          <li>Change Windows Code Signing Certificate, now using Azure Trusted Signing</li>
          <li>Provide the option to avoid using any third-party Exchange Rate and Fee Rate providers (Wasabi can work without them)</li>
          <li>Rebuild all JSON Serialization mechanisms avoiding default .NET converters. Serialization is now stricter</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:25:43 RoboSats <a href="https://github.com/RoboSats/robosats/releases/tag/v0.7.7-alpha">v0.7.7</a>
    <ul>
      <li>For Users
        <ul>
          <li>New coordinators view</li>
          <li>Available coordinator reviews signed by both the robot and the coordinator</li>
          <li>Coordinators now display in their profiles market price sources</li>
          <li>Users are now warned if they try to cancel a non taken order after a payment attempt</li>
          <li>Uzbekistani sum currency now available</li>
        </ul>
      </li>
      <li>For Coordinators
        <ul>
          <li>Library updates</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:25:46 Umbrel <a href="https://github.com/getumbrel/umbrel/releases/tag/1.4.1">v1.4.1</a>
    <ul>
      <li>File search: Search within the Files UI or from anywhere in umbrelOS with the global ⌘/Ctrl + K search</li>
      <li>Files widgets: Two new widgets - Favorites lets you open your pinned favorite folders, and Recents surfaces your recently modified files</li>
      <li>File transfers: Keep an eye on speed and ETA while copying or moving files in real-time</li>
    </ul>
  </li>
  <li>00:25:57 Zaprite
    <ul>
      <li><a href="https://help.zaprite.com/en/articles/11364054-zaprite-release-notes-2025-05-12">v2025-05-12</a>
        <ul>
          <li>Taproot: Add Taproot support for our Bitcoin (Wallet) connection</li>
          <li>Payment Profiles: Add the ability for Customers to manage saved Payment Methods at merchant accounts</li>
        </ul>
      </li>
      <li><a href="https://help.zaprite.com/en/articles/11154677-zaprite-release-notes-2025-04-28">v2025-04-28</a>
        <ul>
          <li>Orders Export: add CSV export feature for Orders</li>
          <li>Unchained SegWit Vaults: add support for Unchained’s new SegWit vaults</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:26:22 Blockstream Satellite <a href="https://github.com/Blockstream/satellite/blob/master/CHANGELOG.md#251">v2.5.1</a>
    <ul>
      <li>Added
        <ul>
          <li>Installation of gr-dvbs2rx on Debian Bookworm (12)</li>
          <li>User addition to video group when configuring a TBS USB receiver</li>
        </ul>
      </li>
      <li>Changed
        <ul>
          <li>Telstar 18V C-band downlink frequency</li>
          <li>Rename blockstream-satellite systemd service to blocksatd</li>
          <li>Add Lightning invoice payment status to GUI payment dialog</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:26:45 Stratum Work
    <ul>
      <li><a href="https://github.com/bboerst/stratum-work/pull/45">PR #45</a>: Add a page that displays full block template data as parsed from the mining.notify message for each pool</li>
      <li><a href="https://github.com/bboerst/stratum-work/pull/47">PR #47</a>: Add a hover tooltip to coinbase output field so that it’s easier to see a breakdown of &gt; 0 value outputs</li>
    </ul>
  </li>
  <li>00:26:58 SeedHammer II
    <ul>
      <li>Open sources the hardware design files for the SeedHammer II machine [<a href="https://github.com/seedhammer/hardware">Github</a>]</li>
      <li>“This includes the CAD STEP files as well as PCB schematics and layout in KiCad format.” [[Announcement](https://x.com/SeedHammer/status/1920496724042199121</li>
    </ul>
  </li>
  <li>00:27:11 ESP-Miner <a href="https://github.com/bitaxeorg/ESP-Miner/releases/tag/v2.7.0">v2.7.0</a>
    <ul>
      <li>Improve AP mode stability by stopping unnecessary Wi-Fi reconnections</li>
      <li>PID Fan Control</li>
      <li>Quicklink service init</li>
      <li>Remove under power failure</li>
      <li>Make “Latest Release” into a link for the changelog</li>
      <li>Share reject reasons tooltips</li>
      <li>Simplify share rejection explanations</li>
      <li>Track rejection reasons to avoid flickering</li>
      <li>Set <code class="language-plaintext highlighter-rouge">GAMMATURBO_POWER_OFFSET</code> to 10W</li>
      <li>Add default to supra model</li>
      <li>Use latest LTS release of Node</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>00:27:34 <a href="https://bitcoinops.org/en/matrix/">Bitcoin Feature Matrix</a>: A tool to track interoperability of Bitcoin products &amp; services
    <ul>
      <li>“Bitcoin Optech’s new ‘Bitcoin Feature Matrix’ is now live in production”</li>
    </ul>
  </li>
  <li>00:27:41 secp256k1lab: An INSECURE implementation of the secp256k1 elliptic curve and related cryptographic schemes written in Python, intended for prototyping, experimentation and education [<a href="https://github.com/secp256k1lab/secp256k1lab">Github</a>]
    <ul>
      <li>Contributors include Tim Ruffing, Sebastian Falbesoner, and Jonas Nick</li>
      <li>Features:
        <ul>
          <li>Low-level secp256k1 field and group arithmetic</li>
          <li>Schnorr signing/verification and key generation according to BIP-340</li>
          <li>ECDH key exchange</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:28:00 GPGap: Air-gapped GPG signing Bitcoin-style [<a href="https://github.com/odudex/gpgap">Github</a>]
    <ul>
      <li>A project by Odudex, Krux contributor.</li>
      <li>GPGap is an experimental Python application that lets you perform GPG signatures on an air-gapped device.</li>
      <li>It leverages a modified version of PGPy to offload the signing operation to an external hardware signer.</li>
    </ul>
  </li>
  <li>00:28:16 NVK Validation Tweet: A quick cooked demo response for a Bitcoin (Rust) Script for testing data on Signet [<a href="https://github.com/portlandhodl/nvk-validation-tweet">Github</a>]
    <ul>
      <li>In response to <a href="https://x.com/nvk/status/1915213562844242421">NVK’s Twitter post</a> by @PortlandHODL</li>
      <li>The script is setup as the following:
        <ul>
          <li>Xpub A has 10,000 txns at different block heights</li>
          <li>Xpub B has 100 utxos made from the 10k above at different block heights</li>
          <li>Then 20 txns out of xpub B to random addresses at different block heights</li>
          <li>Ideally all with a good amount of distance in height so its over a few months</li>
          <li>Don’t need PSBTs</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:28:54 BriberBrother: An ‘alternative mempool’ to help Bitcoin miners identify and include non-standard transactions that follow consensus rules but aren’t typically relayed through the P2P network [<a href="https://github.com/aoengin/BriberBrother">Github</a>]
    <ul>
      <li>“Briber Brother addresses this challenge by introducing a system that:
        <ul>
          <li>Allows miners to efficiently detect and process non-standard transactions.</li>
          <li>Enables users to provide incentives on another blockchain to encourage miners to include their transactions.</li>
          <li>Ensures proper verification of incentivized transactions once they are successfully mined.”</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:29:11 <a href="https://stackmath.xyz/">Stack Math</a>: The Bitcoin Modeling Engine [<a href="https://github.com/gildedpleb/ergodic-drawdown">Github</a>]
    <ul>
      <li>Stack Math is an open-source Monte Carlo framework that combines ergodic walk strategies with traditional Bitcoin pricing models to generate probabilistic financial planning scenarios.</li>
    </ul>
  </li>
  <li>emberOne/00: A 100W open source ASIC Bitcoin mining hashboard [<a href="https://github.com/256-Foundation/emberone00-pcb">Github</a>]
    <ul>
      <li>The 256 Foundation releases the KiCAD design files for the emberOne/00 hashboard, a 12-chip modular Bitcoin mining hashboard that consumes only 100 watts of power.</li>
    </ul>
  </li>
  <li><a href="https://mainnet.observer/">mainnet-observer</a>: Bitcoin Blockchain Statistics [<a href="https://github.com/0xB10C/mainnet-observer">Github</a>] (Hosted by 0xB10C)
    <ul>
      <li>This tool and website provides protocol-level statistics and insights about Bitcoin: blocks, transactions, script usage and more. Powered by a Rust backend and Hugo-based frontend.</li>
    </ul>
  </li>
  <li>NomadBuild: Self-sovereign Bitaxe firmware builder &amp; flasher [<a href="https://github.com/marsmensch/nomadbuild">Github</a>]
    <ul>
      <li>NomadBuild provides a tool for Bitaxe users to compile firmware directly from source rather than relying on pre-compiled binaries with trust assumptions.</li>
      <li>NomadBuild focuses on internally reproducible builds by pinning all dependency versions and controlling build timestamps within its environment.</li>
    </ul>
  </li>
  <li>00:30:11 HashCommand: An Electron application for controlling Bitcoin miners on your local network, mainly Bitaxes and esp-miner devices [<a href="https://github.com/bitaxeorg/hash-command">Github</a>]
    <ul>
      <li>“It sits between a stratum server and miner, decoding and possibly manipulating traffic. Stratum messages from closed source pools/miners are hidden most of the time, this will let you view both.” [<a href="https://x.com/Public_Pool_BTC/status/1921736748867940457">Announcement</a>]</li>
    </ul>
  </li>
  <li>P2Pool v2: Rebooting P2Pool for Bitcoin [<a href="https://github.com/pool2win/p2pool-v2">Github</a>]
    <ul>
      <li>Features:
        <ul>
          <li>Share chain with uncles: all your work is accounted for</li>
          <li>Pay large miners in coinbase: non custodial solution for top N miners</li>
          <li>Support transactions: pay all miners with atomic swaps by market makers</li>
          <li>Market makers buy shares from smaller miners: earning virgin coins</li>
        </ul>
      </li>
    </ul>
  </li>
  <li><a href="https://p2p.band/">P2P Band</a>: P2P Bitcoin exchanges decentralized aggregator [<a href="https://github.com/KoalaSat/p2pband">Github</a>]</li>
  <li><a href="https://bitraffle.sats4.life/">bitRaffle</a>: A trustless and verifiable Bitcoin-based raffle system [<a href="https://github.com/eddieoz/bitRaffle">Github</a>]
    <ul>
      <li>bitRaffle is a trustless, automated, Bitcoin-based raffle system that uses Bitcoin’s blockchain to provide transparent and verifiable raffle drawings that cannot be manipulated.</li>
    </ul>
  </li>
  <li><a href="https://www.bitcointravel.com/">BitcoinTravel</a>: A bitcoin-only Online Travel Agency, offering flights, hotels, and travel experiences exclusively payable in Bitcoin
    <ul>
      <li>Bitcoin Travel operates under dual legal structures: registered in El Salvador as S.A. de C.V. to leverage Bitcoin-friendly regulations, and in the U.S. as Airlines Travel LLC based in Texas for supplier partnerships.</li>
    </ul>
  </li>
  <li><a href="https://www.bitcoinisforcriminals.com/">Bitcoin is for criminals</a>: A list of case studies of real life examples of the ways criminals have used bitcoin across the globe [<a href="https://github.com/ttooccooll/bitcoinisforcriminals">Github</a>]</li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>00:30:23 CVE-2024-52919: Remote crash due to addr message spam (part 2) [<a href="https://bitcoincore.org/en/2025/04/28/disclose-cve-2024-52919/">Disclosure</a>]
    <ul>
      <li>The vulnerability allows remote crashes by spamming addr messages until a 32-bit identifier overflows, rated as Low severity.</li>
      <li>Bitcoin Core v22.0 implemented rate-limiting (1 address per peer every 10 seconds) in 2021, making the attack more expensive but not impossible.</li>
      <li>The vulnerability is fully addressed in Bitcoin Core v29.0 by changing to a 64-bit identifier, preventing overflow attacks.</li>
    </ul>
  </li>
  <li>00:33:02 CVE-2025-43707: Critical bug in rust-miniscript library causes transaction signing crashes [<a href="https://antoinep.com/posts/cve-2025-43707/">Blog post</a>]
    <ul>
      <li>Bug found by @Pythcoiner from the WizardSardine team, communicated by Antoine Poinsot to rust-miniscript maintainers Andrew Poelstra and Sanket Kanjalkar</li>
      <li>A vulnerability in rust-miniscript allows attackers to crash applications by crafting special descriptors, potentially creating denial-of-service for server applications.</li>
      <li>The bug involves an out-of-bounds read in the Satisfaction::thresh() function when threshold k equals the number of sub-fragments.</li>
    </ul>
  </li>
  <li>Coinos service disruption due to database loss and outage [<a href="https://njump.me/nevent1qqsd2wlx3wq94sqgh66u9hfsevym55mse87efunrc8qpr0syr8mfezqpzemhxue69uhhyetvv9ujucm0d9hx7uewd9hj7q3qh2qfjpnxau9k7ja9qkf50043xfpfy8j5v60xsqryef64y44puwnqxpqqqqqqzxxr7dv">Note</a>]
    <ul>
      <li>Coinos is back online but withdrawals remain frozen following complete database loss, with the latest backup being 24 hours old.</li>
      <li>The service also experienced a 4-hour outage yesterday related to data center internet connection upgrades, though connection to database loss is unclear.</li>
    </ul>
  </li>
  <li>00:34:46 Hackers breach LockBit ransomware gang’s dark web affiliate panels, exposing nearly 60,000 bitcoin wallet addresses and 4,400 negotiation messages between attackers and victims [<a href="https://www.forbes.com/sites/daveywinder/2025/05/08/60000-bitcoin-wallets-leaked-as-lockbit-ransomware-hackers-get-hacked/">Forbes</a>]
    <ul>
      <li>Database leak includes admin and affiliate actor information with plaintext passwords, though LockBitSupp claims private ransomware keys remain secure.</li>
    </ul>
  </li>
  <li>Signalgate (continued): TeleMessage’s modified Signal app exposes Trump officials’ chat logs after <a href="https://www.reutersconnect.com/item/us-national-security-advisor-mike-waltz-attends-a-cabinet-meeting-held-by-president-trump-at-the-white-house-in-washington/dGFnOnJldXRlcnMuY29tLDIwMjU6bmV3c21sX1JDMkg4RUFEOEtGRw%3D%3D">Reuters photo</a> emerges [<a href="https://micahflee.com/despite-misleading-marketing-israeli-company-telemessage-used-by-trump-officials-can-access-plaintext-chat-logs/">Micah Lee’s Analysis</a>] [<a href="https://www.heise.de/en/news/Signal-affair-Modified-messenger-ceases-operation-after-second-break-in-10372673.html">Heise</a>]
    <ul>
      <li>TeleMessage creates TM SGNL, a modified Signal app used by Trump officials that sends plaintext chat logs to their archive server despite claiming E2EE encryption.</li>
      <li>TM SGNL appears identical to regular Signal but archives every message to destinations like Microsoft 365, email servers, or file servers based on user archive plans. The archive server runs on public AWS cloud in Northern Virginia and was recently hacked.</li>
    </ul>
  </li>
  <li>AirBorne: Oligo Security discovers 23 vulnerabilities in Apple’s AirPlay protocol and SDK that enable various attacks including zero-click remote code execution on Apple and third-party devices [<a href="https://www.oligo.security/blog/airborne">Vulnerability analysis</a>]
    <ul>
      <li>Two vulnerabilities (CVE-2025-24252 and CVE-2025-24132) allow attackers to create wormable exploits that can spread malware across networks without user interaction, potentially affecting 2.35 billion Apple devices.</li>
      <li>MacOS devices with AirPlay receiver enabled, CarPlay systems, and third-party speakers are particularly vulnerable to attacks that could enable eavesdropping, tracking, and malware deployment.</li>
      <li>Apple has released software updates addressing the 17 CVEs issued from Oligo’s disclosures, following a responsible disclosure process from Oligo.</li>
    </ul>
  </li>
  <li>LLMs: ANSI terminal codes enable hidden malicious instructions in MCP [<a href="https://blog.trailofbits.com/2025/04/29/deceiving-users-with-ansi-terminal-codes-in-mcp/">Trail of Bits</a>]
    <ul>
      <li>Researchers discover ANSI escape sequences can be used to hide malicious payloads in MCP tool descriptions, making them invisible to users while still processed by LLMs</li>
      <li>Claude Code version 0.2.76 lacks filtering for ANSI codes, allowing attackers to create invisible instructions that could lead to supply chain attacks through manipulated dependencies.</li>
    </ul>
  </li>
  <li>XRP Ledger SDK compromised in supply chain attack [<a href="https://www.aikido.dev/blog/xrp-supplychain-attack-official-npm-package-infected-with-crypto-stealing-backdoor">Aikido’s Technical breakdown</a>]
    <ul>
      <li>Official XPRL (Ripple) NPM package infected with backdoor that steals cryptocurrency private keys through a suspicious function called <code class="language-plaintext highlighter-rouge">checkValidityOfSeed</code> that sends data to domain “0x9c[.]xyz”.</li>
      <li>Attackers released five unauthorized versions (4.2.1-4.2.4, 2.14.2) of the popular package with over 140,000 weekly downloads, progressively refining their malicious code injection techniques.</li>
    </ul>
  </li>
</ul>

<h3 id="audience-questions">Audience Questions</h3>
<ul>
  <li>Thanks to everyone who sent in questions. Remember to send yours to questions@bitcoin.review.
    <ul>
      <li>00:35:12 What’s the difference between test net and signet? And what are the benefits of each?</li>
      <li>00:37:15 Can you explain, in simple terms, what OP_CHECKCONTRACTVERIFY does?</li>
      <li>There’s been a lot of talk about the difference between using OP_RETURN and witness data. Specifically that OP_RETURN is prunable and witness data ends up in the chain. Can you explain in normie terms how this works?</li>
    </ul>
  </li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Sideband <a href="https://github.com/markqvist/Sideband/releases/tag/1.6.0">v1.6.0</a>
    <ul>
      <li>Add compatibility with new AES-256 modes in RNS</li>
      <li>Add transfer speed display to outgoing messages</li>
      <li>Add ability to exclude objects from telemetry collector responses</li>
      <li>Add interactive console option to daemon mode</li>
      <li>Add option to specify RNS config path</li>
      <li>Add Windows location plugin example</li>
      <li>Sideband now uses abstract domain sockets for IPC on supported platforms</li>
      <li>Improve memory consumption</li>
      <li>Improve I/O performance</li>
    </ul>
  </li>
  <li>SimpleX <a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.3.3">v6.3.3</a>
    <ul>
      <li>Add support for connecting via short connection links.
        <ul>
          <li>To create short connection links:
            <ul>
              <li>Enable Dev Tools</li>
              <li>Enable short links in Privacy &amp; Security settings</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li><a href="https://berty.tech/">Berty</a>: An open, secure, offline-first, peer-to-peer and zero trust messaging app [<a href="https://github.com/berty/berty">Github</a>]
    <ul>
      <li>Berty is a decentralized messaging app with end-to-end encryption that requires no phone number or email, works without internet connection, and remains functional on adversarial networks.</li>
      <li>Developed by Berty Technologies, a French nonprofit, Berty aims to serve users needing secure communication while traveling, wanting anonymity, avoiding third-party servers, or living under censorship.</li>
    </ul>
  </li>
  <li><a href="https://filekey.app/">Filekey</a>: Encrypt and share files securely with passkeys. Fully offline, easy-to-use, and zero-knowledge for ultimate file protection [<a href="https://github.com/RockwellShah/filekey">Github</a>]
    <ul>
      <li>“FileKey is an offline web app that lets you quickly encrypt and share files using passkeys. No accounts, no tracking, no backend servers. Just local, offline security powered by passkeys.”</li>
    </ul>
  </li>
  <li><a href="https://stefan-oltmann.de/pixelsafe/">PixelSafe</a>: A steganography tool for PNG images that uses the Least Significant Bit (LSB) algorithm [<a href="https://github.com/StefanOltmann/pixelsafe">Github</a>]
    <ul>
      <li>“It lets you embed hidden data inside PNG files - for example, storing a KeePass database inside a screenshot. You can use it to hide backup files, send private messages, embed digital signatures, or attach invisible metadata to your images.”</li>
    </ul>
  </li>
  <li>TorVPN Android app: A WIP from the Tor Project to replace Orbot [<a href="https://gitlab.torproject.org/tpo/applications/vpn">Gitlab</a>]
    <ul>
      <li>TorVPN project develops whole-device and app-specific anonymous communication [<a href="https://gitlab.torproject.org/tpo/applications/vpn/-/wikis/home">Wiki</a>]</li>
      <li>The initiative involves cross-team coordination with Arti, TPO teams for user experience, network health, and focuses initially on Android implementation with future platform expansion.</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>NodeGuard: A treasury management solution for Lightning nodes [<a href="https://github.com/Elenpay/NodeGuard">Github</a>]
    <ul>
      <li>NodeGuard is an open-source technology stack developed to simplify treasury operations for lightning nodes, focusing on both Security and UX.</li>
      <li>Features include asynchronous channel funding with multisig wallets, liquidity automation, remote signing, automatic fund sweeping, and hardware wallet support for transaction signing.</li>
    </ul>
  </li>
  <li><a href="https://0commons.com/">0Commons</a>: A V4V platform where creators can share digital files (photos, graphics, videos, fonts, 3D printing files) under CC0 license with unrestricted commercial use.
    <ul>
      <li>The platform operates on a Value-for-Value model, allowing users to download content for free and zap creators directly, with creators receiving 100% of the contributions.</li>
    </ul>
  </li>
  <li><a href="https://lightningnetworkprofitability.com/">Bitcoin Lightning Network Profitability Calculator</a>: An interactive tool designed to help users estimate their earnings from operating a Bitcoin Lightning Network node
    <ul>
      <li>It allows users to input various parameters to simulate different scenarios and assess the profitability of their investment.</li>
    </ul>
  </li>
  <li><a href="https://zapback.ekzy.is/">Zapback</a>: Last Pay Wins for Friends: A friend-based zap game with 24-Hour timer [<a href="https://github.com/ekzyis/zapback">Github</a>]
    <ul>
      <li>A project inspired by <a href="www.lastpaywins.com">lastpaywins.com</a></li>
      <li>Players must zap back within 24 hours to stay in the game. The pool grows over time until one player forgets to respond, with the last player winning everything.</li>
    </ul>
  </li>
  <li>Coinbase launches x402, a protocol enabling instant stablecoin payments over HTTP that allows APIs, apps, and AI agents to transact within the internet economy [<a href="https://www.coinbase.com/en-gb/developer-platform/discover/launches/x402">Announcement</a>]
    <ul>
      <li>The protocol addresses limitations of traditional payment systems by leveraging the HTTP “402 Payment Required” status code, making stablecoin payments a native web function with minimal coding required. [<a href="https://www.x402.org/x402-whitepaper.pdf">White paper</a>]</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>LND <a href="https://github.com/lightningnetwork/lnd/blob/master/docs/release-notes/release-notes-0.19.0.md">v0.19.0</a>
    <ul>
      <li>New Features
        <ul>
          <li>Add support for archiving channel backup in a designated folder which allows for easy referencing in the future. A new config is added disable-backup-archive, with default set to false, to determine if previous channel backups should be archived or not.</li>
          <li>Protocol Updates
            <ul>
              <li><code class="language-plaintext highlighter-rouge">lnd</code> now supports the new RBF cooperative close flow</li>
              <li>Add support for experimental endorsement signal relay</li>
              <li>Add initial support for quiescence</li>
              <li>The max fee rate is now respected when a coop close is initiated</li>
            </ul>
          </li>
          <li>Functional Enhancements
            <ul>
              <li>Add ability to paginate wallet transactions</li>
              <li>Make <code class="language-plaintext highlighter-rouge">MaxWaitNumBlocksFundingConf</code> configurable, allowing integration/development tests to set a lower value for faster funding confirmation timeout while keeping the default of 2016 blocks for production stability.</li>
              <li>Previously when sweeping inputs, the sweeper will wait until the specified budget can be covered by the inputs, which could cause the sweep to be delayed, and the sweeping tx ends up using large fees. This is now changed so the sweeper will always attempt the sweep as long as the budget can be partially covered.</li>
              <li>Add validation to ensure that MPP parameters are compatible with the payment amount before attempting the payment</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>LDK
    <ul>
      <li>ldk-node <a href="https://github.com/lightningdevkit/ldk-node/releases/tag/v0.5.0">v0.5.0</a>
        <ul>
          <li>The <code class="language-plaintext highlighter-rouge">PaymentSuccessful</code> event now exposes a <code class="language-plaintext highlighter-rouge">payment_preimage</code> field</li>
          <li>The node now emits <code class="language-plaintext highlighter-rouge">PaymentForwarded</code> events for forwarded payments</li>
          <li>Add ability to send custom TLVs as part of spontaneous payments</li>
          <li>Add ability to override the used fee rates for on-chain sending</li>
          <li>Add ability to set a description hash when creating a BOLT11 invoice</li>
          <li>Add ability to export pathfinding scores</li>
          <li>Add ability to request inbound channels from an LSP via the bLIP-51 / LSPS1 protocol</li>
          <li>The ChannelDetails returned by <code class="language-plaintext highlighter-rouge">Node::list_channels</code> now exposes fields for the channel’s SCIDs</li>
          <li>Lightning peer-to-peer gossip data is now being verified when syncing from a Bitcoin Core RPC backend</li>
          <li>The logging sub-system was reworked to allow logging to backends using the Rust log facade, as well as via a custom logger trait</li>
          <li>On-chain transactions are now added to the internal payment store and exposed via <code class="language-plaintext highlighter-rouge">Node::list_payments</code></li>
          <li>Inbound announced channels are now rejected if not all requirements for operating as a forwarding node have been met</li>
          <li>Add initial support for operating as an bLIP-52 / LSPS2 service</li>
          <li>The <code class="language-plaintext highlighter-rouge">Builder::set_entropy_seed_bytes</code> method now takes an array rather than a Vec</li>
          <li>The builder will now return a NetworkMismatch error in case of network switching</li>
          <li>The <code class="language-plaintext highlighter-rouge">Bolt11Jit</code> payment variant now exposes a field telling how much fee the LSP withheld</li>
          <li>Add ability to disable syncing Lightning and on-chain wallets in the background</li>
          <li>Add ability to configure the node’s announcement addresses independently from the listening addresses</li>
          <li>Add ability to choose whether to honor the Anchor reserves when calling <code class="language-plaintext highlighter-rouge">send_all_to_address</code></li>
          <li>Add ability to sync the node via an Electrum backend</li>
        </ul>
      </li>
      <li>rust-lightning <a href="https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.1.3">v0.1.3</a> - “Routing Unicode in 2025”
        <ul>
          <li>Bug Fixes
            <ul>
              <li><code class="language-plaintext highlighter-rouge">Event::InvoiceReceived</code> is now only generated once for each <code class="language-plaintext highlighter-rouge">Bolt12Invoice</code> received matching a pending outbound payment.</li>
              <li>LDK’s router now more fully saturates paths which are subject to HTLC maximum restrictions after the first hop.</li>
            </ul>
          </li>
          <li>Security
            <ul>
              <li>v0.1.3 fixes a denial-of-service vulnerability which cause a crash of an LDK-based node if an attacker has access to a valid <code class="language-plaintext highlighter-rouge">Bolt12Offer</code> which the LDK-based node created.</li>
              <li>A malicious payer which requests a BOLT 12 Invoice from an LDK-based node (via the <code class="language-plaintext highlighter-rouge">Bolt12InvoiceRequest</code> message) can cause the panic of the LDK-based node due to the way <code class="language-plaintext highlighter-rouge">String::truncate</code> handles UTF-8 codepoints.</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Ark <a href="https://github.com/ark-network/ark/releases/tag/v0.6.0">v0.6.0</a> - Indexer, RegisterIntent+BIP-322 support &amp; SDK SQLite db
    <ul>
      <li>Features:
        <ul>
          <li>[Server] Make round failed if there’s not enough liquidity</li>
          <li>[SDK] Retry settlement</li>
          <li>Return utxo/vtxo amount limits in <code class="language-plaintext highlighter-rouge">GetInfo</code></li>
          <li>Return updated <code class="language-plaintext highlighter-rouge">spentVtxos</code> list in <code class="language-plaintext highlighter-rouge">transactionEventsCh</code></li>
          <li>[SDK] Disable onchain features if server doesn’t allow them</li>
          <li>Add RegisterIntent + BIP0322 Proof of Funds &amp; Drop covenant &amp; SDK SQLite db</li>
        </ul>
      </li>
      <li><a href="https://docs.arklabs.xyz/ark/">Ark</a> partners with Austrian educational institution TU Wien on a formal specification of the Ark protocol [<a href="https://docs.arklabs.xyz/ark.pdf">Litepaper</a>]
        <ul>
          <li>“Ark Litepaper formalizes Ark’s technical foundation and provides additional clarity for researchers &amp; developers interested in contributing to its implementations.”</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Fountain <a href="https://blog.fountain.fm/p/1-2-1">v1.2</a>
    <ul>
      <li>Library design update:
        <ul>
          <li>Add new content-type filters at the top of the page</li>
          <li>Recently Played is now the default view in your library</li>
          <li>Music filter now makes it easier to find saved tracks and albums</li>
        </ul>
      </li>
      <li>Content pages design update: Redesign shows, episodes, artists, albums, tracks, clips and playlists pages</li>
      <li>Episode summaries:
        <ul>
          <li>Add Summary button above show notes</li>
          <li>Summaries and transcripts now come as a bundle</li>
        </ul>
      </li>
      <li>Playback improvements: Rebuilt the audio engine from the ground up
        <ul>
          <li>Tracks now load and play instantly when tapped</li>
          <li>Faster skipping in-between collection of tracks</li>
          <li>Replace scrollable player page with full-screen modals</li>
        </ul>
      </li>
      <li>Other bug fixes &amp; improvements:
        <ul>
          <li>Rebuilt payment stats for more complete and reliable transaction records</li>
          <li>Add new episode notification preferences in Settings</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Phoenixd <a href="https://github.com/ACINQ/phoenixd/releases/tag/v0.6.0">v0.6.0</a>
    <ul>
      <li>Support simple close</li>
      <li>Add support for linux arm64 target</li>
      <li>Update Dockerfile - fix casing warnings</li>
      <li>Support stateless offers with optional custom description and amount</li>
      <li>Upgrade to lightning-kmp 1.10.2</li>
    </ul>
  </li>
  <li>BoltzExchange boltz-client <a href="https://github.com/BoltzExchange/boltz-client/releases/tag/v2.6.0">v2.6.0</a> - Tiny
    <ul>
      <li>Allows lower swap limits for submarine swaps
        <ul>
          <li>Add support for a new minimal threshold (“MinimalBatched”) for batched swaps, allowing swaps below a certain amount to be handled differently.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Breez SDK
    <ul>
      <li>Nodeless <a href="https://github.com/breez/breez-sdk-liquid/releases/tag/0.8.2">v0.8.2</a>
        <ul>
          <li>Faster Lightning payment reception</li>
          <li>Critical fix to Bitcoin transaction fee calculation</li>
        </ul>
      </li>
      <li>Greenlight <a href="https://github.com/breez/breez-sdk-greenlight/releases/tag/0.7.1">v0.7.1</a>
        <ul>
          <li>Implement version 2 of Taproot swaps by unifying the swap execution interface under BTCReceiveSwap and extending support for taproot-specific logic</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Lightning Loop
    <ul>
      <li><a href="https://github.com/lightninglabs/loop/releases/tag/v0.31.1-beta">v0.31.1</a>
        <ul>
          <li>Autoloop now defaults to a slow publication deadline (30 minutes after initiation) to reduce fees. To revert to the previous behavior, users can run <code class="language-plaintext highlighter-rouge">loop setparams --fast</code>, which causes swap HTLCs to be published immediately after initiation.</li>
        </ul>
      </li>
      <li><a href="https://github.com/lightninglabs/loop/releases/tag/v0.31.0-beta">v0.31.0</a>
        <ul>
          <li>Enhance the <code class="language-plaintext highlighter-rouge">loop listswaps</code> command by improving the ability to filter the response</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>lightning-kmp <a href="https://github.com/ACINQ/lightning-kmp/releases/tag/v1.10.0">v1.10.0</a>
    <ul>
      <li>Implement option_simple_close</li>
      <li>Remove amount-based confirmation scaling</li>
      <li>Bolt11 invoices: do not re-encode amounts</li>
      <li>Add more force-close tests for HTLC settlement</li>
      <li>Send normal failures for Bolt12 payments</li>
      <li>Add test for Bolt11 features minimal encoding</li>
      <li>Peer storage</li>
      <li>Stateless offers</li>
      <li>Use the offer description as default payer note</li>
      <li>Add support for linux arm64 target</li>
    </ul>
  </li>
  <li>BlitzWallet <a href="https://github.com/BlitzWallet/BlitzWallet/releases/tag/Android-v0.4.4-beta">v0.4.4-beta</a>
    <ul>
      <li>eCash Improvements
        <ul>
          <li>Prevention of Duplicate eCash Payments: eCash transactions can no longer be paid twice</li>
          <li>Fix Background eCash Invoice Handling: When a user creates an eCash quote but fails to pay before the quote expires, the app no longer attempts to claim it with an incorrect proof index during the next wallet load</li>
        </ul>
      </li>
      <li>Payment Experience
        <ul>
          <li>Bolt12 Payments from Liquid: Users can now send payments to BOLT12 invoices directly from their Liquid balance</li>
          <li>Support for Blink QR Codes: Blink QR codes now open directly inside the Blitz native UI with LNURL-pay support</li>
          <li>Lower Minimum for Lightning-to-Liquid Payments: The minimum receive amount for Lightning-to-Liquid swaps has been reduced to 100 sats</li>
        </ul>
      </li>
      <li>App Enhancements
        <ul>
          <li>Manual Sync via Swipe Gesture</li>
          <li>Crash Reporting with User Control</li>
          <li>Blitz Social Tracking: A new section in settings shows how many users have downloaded Blitz and tracks its growth over time</li>
          <li>Half-modal Popups: Popups can now be dismissed</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nutshell <a href="https://github.com/cashubtc/nutshell/releases/tag/0.16.6-rc1">v0.16.6-rc1</a>
    <ul>
      <li>New Features
        <ul>
          <li>Blind Authentication
            <ul>
              <li>Limit mint access using Clear and Blind Authentication. Nutshell now supports NUT-21 and NUT-22, enabling the use of OAuth 2.0 identity providers like Keycloak (or any compatible provider)</li>
              <li>NUT-22 introduces Blind Authentication, which enhances user privacy by anonymizing authentication within the set of registered users.</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Improved Multi-Nut Payments
        <ul>
          <li>Multi-nut payments via LND are now more reliable</li>
        </ul>
      </li>
      <li>Additional Protocol Updates
        <ul>
          <li>SIG_ALL Multisig Flag: Users can now lock ecash to specific destinations (outputs)</li>
          <li>Mint and Melt Quote Enhancements: The update to NUT-04/05 introduces new fields (amount, unit, request) to mint and melt quotes</li>
          <li>ToS URL: Mints now have the option to enter a Terms of Service (ToS) URL in the mint info settings</li>
        </ul>
      </li>
      <li>Fixes and Improvements
        <ul>
          <li>Wallet Un-reservation: Nutshell wallet now un-reserves ecash after a failed Lightning payment more reliably</li>
          <li>Improved Keyset Rotation: Enhanced keyset rotation process for mints</li>
          <li>Pending Melt Quotes: Mints now check pending melt quotes in the background every hour</li>
          <li>Balance Tracking for Keysets: Mints can now track balances for each keyset separately</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Cashu-ts <a href="https://github.com/cashubtc/cashu-ts/releases/tag/v2.5.0">v2.5.0</a>
    <ul>
      <li>Cashu-TS 2.5 is out, adding NUT-22 Blinded Authentication and plenty of DX improvements.
        <ul>
          <li>Replace Enums with Const Objects</li>
          <li>Add getDecodedToken example in the README and an example of firebase API to receive cashu payments</li>
          <li>Support for proof witness field in token serialization</li>
          <li>Fix P2PK refund to reflect NUT-11 format</li>
          <li>Add NUT-22 BlindedAuth</li>
          <li>Melt: made blank output amount equal split length</li>
          <li>Bringing back cashu-crypto-ts code into cashu-ts</li>
          <li>Run format check on PR</li>
          <li>Make sure to always stringify URL object for WebSockets</li>
          <li>nut18: optional transport and add nut10 option</li>
          <li>Add API-Extractor to project and CI</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Minibits is now expanding to iOS <a href="testflight.apple.com/join/defJQgTD">TestFlight</a> [<a href="https://x.com/MinibitsCash/status/1915371935279595850">Announcement</a>]</li>
  <li>Geyser launches Bitcoin <a href="https://geyser.fund/launchpad">Launchpad</a>: A visibility platform for early-stage projects [<a href="http://njump.me/nevent1qvzqqqqqqypzpdkumh0cve6jslg6f6rzpkf24yzuykxc2zlcejfr6wwlrm07uhh8qythwumn8ghj7un9d3shjtnswf5k6ctv9ehx2ap0qqsp65slze7463xmlefganue0wg4nlryeyem8cpd090rxm0qnfjk4ggqzjl8u">Announcement</a>]
    <ul>
      <li>Launchpad introduces a system requiring Bitcoin projects to gather 21 followers within 30 days to officially launch, addressing the issue that “projects don’t fail because they lack funds” but because “no one knew they existed.”</li>
      <li>Each project receives a dedicated section for 30 days, with followers receiving email updates upon reaching the threshold of 21 followers; projects can alternatively launch manually for $21.</li>
      <li>The platform aims to “separate signal from noise” by creating a small challenge that may trigger momentum, giving visibility to meaningful projects before they go live.</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li><a href="https://following.space/">Nostr Follow List</a>: A minimalistic Nostr application for creating, sharing, and discovering Nostr Follow Packs [<a href="https://github.com/callebtc/nostr-follow-packs">Github</a>] by callebtc</li>
  <li><a href="https://relays.land/">Relays.land</a>: A customizable relay management tool for Nostr [<a href="https://git.fiatjaf.com/relays.land">Code repository</a>] by fiatjaf
    <ul>
      <li>Relays.land is a platform that enables users to create and manage custom Nostr relays with specific content curation and moderation rules. It offers three types of relays: curated, programmable, and moderated.</li>
    </ul>
  </li>
  <li><a href="https://castr.me/">(Pub)Caster</a>: Effortlessly turn your npub into a podcast feed [<a href="https://github.com/dergigi/pubcaster">Github</a>] by dergigi
    <ul>
      <li>“(Pub)Castr is a service that automatically generates podcast feeds from Nostr profiles. It converts kind1 events containing audio (and video) file links into a valid Podcasting 2.0 feed.”</li>
    </ul>
  </li>
  <li><a href="https://camelus.app/">Camelus</a>: A nostr client for Android and iOS (beta TestFlight) [<a href="https://github.com/leo-lox/">Github</a>] (WIP)
    <ul>
      <li>Features:
        <ul>
          <li>Nostr Protocol for Decentralized Data Storage: Ensures user data privacy and control</li>
          <li>Clean Architecture: Uses Dart and Flutter</li>
          <li>Dart_NDK Integration: Optimized for mobile battery</li>
          <li>In-Box and Out-Box Messaging: Optimized for gossip and database performance</li>
          <li>Open-Source Development: Community-driven project</li>
          <li>Riverpod for State Management: Efficient and testable state management</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>nparrot-chat: Integrate any command line tool with Nostr relays-as-groups [<a href="https://github.com/Leaf-Computer/nparrot">Github</a>]
    <ul>
      <li>Nostr Parrot Chat is a convenient CLI tool that facilitates messaging over Nostr relay chat rooms</li>
      <li>Use cases:
        <ul>
          <li>Talk to your Goose AI agent via DMs from your phone by using any Nostr client compatible with NIP-17</li>
          <li>Easily integrate almost any other command line tool with Nostr DMs</li>
          <li>Send yourself notifications easily from any environment that can run shell commands</li>
          <li>Use this as a test or troubleshooting tool for NIP-17 messages</li>
        </ul>
      </li>
    </ul>
  </li>
  <li><a href="https://anchor.coracle.social/#!/alerts">Anchor Alerts</a>: A notification and syncing server for flotilla.social [<a href="https://github.com/coracle-social/anchor">Github</a>]
    <ul>
      <li>The tool bridges nostr to email, offering notifications without requiring users to install additional software.</li>
    </ul>
  </li>
  <li><a href="https://chronostr.pages.dev/">Chronostr</a>: A scheduling adjustment and RSVP tool working on the Nostr [<a href="https://github.com/studiokaiji/chronostr">Github</a>]</li>
  <li>Nostash: A nostr signing extension for Safari [<a href="https://github.com/tyiu/nostash">Github</a>]
    <ul>
      <li>This is a NIP-07 compatible extension for signing nostr events, forked from (the no longer supported project) <a href="https://github.com/ursuscamp/nostore">nostore</a></li>
    </ul>
  </li>
  <li><a href="https://kinostr.com/">Kinostr</a>: A nostr client that renders kind 1 nostr notes and their attachments
    <ul>
      <li>Kinostr is a YouTube-like interface for Nostr videos using the #kinostr tag</li>
    </ul>
  </li>
  <li><a href="https://swae.live/">Swae</a>: A live streaming application built on the Nostr protocol, aiming to provide a censorship-resistant platform for content creators and viewers [<a href="https://github.com/suhailsaqan/swae">Github</a>] (WIP)
    <ul>
      <li>“Users are able to send bitcoin to streamers and other users over the lightning protocol.”</li>
    </ul>
  </li>
  <li><a href="https://team.trustroots.org/nostr.html">Nostroots</a>: An initiative to seamlessly transition <a href="https://www.trustroots.org/">Trustroots</a>, the platform for sharing, hosting, and community building, onto the nostr network [<a href="https://github.com/Trustroots/nostroots">Github</a>]
    <ul>
      <li>“Trustroots is a social network of travelers and hosts that offer couches. Founded in 2014, 112k+ members now.”</li>
    </ul>
  </li>
  <li><a href="https://sobrkey.vercel.app/">Sobrkey</a>: A decentralized sobriety tracking and community support application built on Nostr [<a href="https://github.com/spe1020/Sobrkey">Github</a>]
    <ul>
      <li>Features include: 12-step journey tracking, public community support, emergency resources, zap-based donations, and Decentralized identity.</li>
    </ul>
  </li>
  <li><a href="https://www.nostrly.com/">Nostrly</a>: A web-based service that allows users to register a verified Nostr address
    <ul>
      <li>Nostrly also provides various tools for Nostr and Cashu, including: NIP-09 Note Deleter, NIP-19 Decoder, and NIP-57 Web Zap</li>
      <li>Cashu tools: Cache, Gather, NutLock, Witness, and Redeem</li>
    </ul>
  </li>
  <li><a href="https://nostream.pub/">Nostream</a>: A media-only Nostr firehose stream, unfiltered (A project by @jack)</li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:46:55 Nostr Messaging Layer Security (MLS) <a href="https://github.com/rust-nostr/nostr/commits/master/crates/nostr-mls">Update</a> [<a href="https://njump.me/naddr1qvzqqqr4gupzq9eemymaerqvwdc25f6ctyuvzx0zt3qld3zp5hf5cmfc2qlrzdh0qqxnzde5xccryve3xuurxv3eply303">Note</a>]
    <ul>
      <li>Libraries released: nostr_mls_storage, nostr_mls_memory_storage, nostr_mls_sqlite_storage, and nostr_mls</li>
      <li>White Noise refactor</li>
      <li>Encrypted media with Blossom: Media in groups is encrypted using an MLS secret and uploaded to Blossom with a one-time use keypair</li>
      <li>Damn mobile: beta version coming live on Zapstore in a few weeks</li>
    </ul>
  </li>
  <li>00:48:42 Primal <a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.2.13">v2.2.13</a>
    <ul>
      <li>Login with public key</li>
      <li>Amber support</li>
      <li>Blossom media uploads &amp; settings</li>
      <li>Push notifications for Google builds (not available in Github APKs)</li>
      <li>Notifications revamp</li>
      <li>Image gallery in article details</li>
      <li>Muting words, hashtags &amp; threads</li>
      <li>New gallery rendering for media attachments in notes</li>
      <li>“Share note as image” option in note context menu</li>
      <li>Copy Url &amp; Copy Image in media gallery screen</li>
      <li>Copy to clipboard when tapping on bitcoin or lightning address in wallet</li>
      <li>Topological sort for FeedPost on threads</li>
      <li>Request Delete action for notes &amp; articles</li>
      <li>Simplified note context menu</li>
    </ul>
  </li>
  <li>00:48:43 Damus <a href="https://njump.me/nevent1qqsda4jympxet9p8mf6jl538mg5f89j6s39mnl9jcjcq2crvstwnc9szyql0mt4mrkyj867enj084n3mgx22k3239c4708qm045djfp7p5ngzqcyqqqqqqgxynqvd">v1.14</a> - TestFlight for Purple users
    <ul>
      <li>Introduce new one-click wallet setup, powered by Coinos</li>
      <li>Revamp wallet experience with balance and transactions view for your NWC wallet</li>
      <li>New notification setting to hide hellthreads</li>
      <li>Add NIP-65 relay list support</li>
      <li>Add Unicode 16 emoji reactions (only for iOS 18.4+)</li>
      <li>Blurred images now show some more information</li>
    </ul>
  </li>
  <li>Damus Notedeck <a href="https://cdn.jb55.com/hls/notedeck-beta-release/master.m3u8">Beta Release</a> [<a href="https://njump.me/nevent1qqs2dseuw3d4sqkyt97pzq3vg5ncx6zv2fk6ummejf88ezesa2exkrc8y4zm9">Announcement</a>]
    <ul>
      <li>New in Notedeck Beta:
        <ul>
          <li>Dave nostr AI assistant app</li>
          <li>GIFs</li>
          <li>Fulltext note search</li>
          <li>Zaps (NWC/ Wallet UI)</li>
          <li>Introduce last note per pubkey feed (experimental)</li>
          <li>Allow multiple media uploads per selection</li>
          <li>Major Android improvements (still wip)</li>
          <li>Add notedeck app sidebar</li>
          <li>User Tagging</li>
          <li>Note truncation</li>
          <li>Local network note broadcast, broadcast notes to other notedeck notes while you’re offline</li>
          <li>Mute list support (reading)</li>
          <li>Relay list support</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Coracle
    <ul>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.16">v0.6.16</a>
        <ul>
          <li>Add support for editing WOT feeds</li>
          <li>Change default blossom servers</li>
          <li>Add support for custom emojis</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.15">v0.6.15</a>
        <ul>
          <li>Improve remote signing</li>
          <li>Drop nip 96 support</li>
          <li>Use user blossom servers</li>
          <li>Avoid duplicate notes in feeds</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.13">v0.6.13</a>
        <ul>
          <li>Add safe areas for phones</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.12">v0.6.12</a>
        <ul>
          <li>Upgrade capacitor</li>
          <li>Allow use of ws:// relays on android</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.10">v0.6.10</a>
        <ul>
          <li>Use new version of network library</li>
          <li>Re-work storage adapter to minimize storage and improve performance</li>
          <li>Improve initial page load times</li>
          <li>Upgrade welshman</li>
          <li>Remove platform relay</li>
          <li>Show PoW</li>
          <li>Don’t fetch messages until decryption is enabled</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Flotilla
    <ul>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/1.0.3">v1.0.3</a>
        <ul>
          <li>Add light theme</li>
          <li>Use correct alerts server</li>
          <li>Ignore relay errors for claims</li>
          <li>Add custom emoji parsing and display</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/1.0.0">v1.0.0</a>
        <ul>
          <li>Add alerts via Anchor</li>
          <li>Allow use of cleartext relays on native builds</li>
          <li>Detect blossom support on community relays</li>
          <li>Use user blossom server list in settings</li>
          <li>Improve thunk indicator</li>
          <li>Update storage adapters</li>
          <li>Switch to pnpm</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>ndk-cache-sqlite-wasm <a href="https://github.com/nostr-dev-kit/ndk/commit/4682bcbe27737050521b45093456e1f594abf74e">v0.2.0</a> - Introduces the Sqlite WASM cache adapter package (feat: add SQLite WASM cache adapter with support for decrypted and unpublished events, including schema updates and migration logic)
    <ul>
      <li>Implements the full NDKCacheAdapter interface, including:
        <ul>
          <li>Event caching (setEvent, getEvent, etc.)</li>
          <li>Profile caching (fetchProfile, saveProfile, etc.)</li>
          <li>Synchronous and asynchronous APIs</li>
          <li>Relay status management</li>
          <li>Decrypted event cache (getDecryptedEvent, addDecryptedEvent)</li>
          <li>Unpublished event management (addUnpublishedEvent, getUnpublishedEvents, discardUnpublishedEvent)</li>
        </ul>
      </li>
      <li>Database schema and migration logic mirrors ndk-mobile’s implementation</li>
      <li>Uses sql.js (WASM) for cross-platform SQLite support in browsers and JS environments</li>
      <li>Database is persisted automatically to IndexedDB with debounced saves for performance</li>
      <li>Example page included for browser testing and benchmarking</li>
      <li>Documentation is symlinked into the main docs/cache directory</li>
    </ul>
  </li>
  <li>Amber
    <ul>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.4.1">v3.4.1</a>
        <ul>
          <li>Move from deprecated Autofill api</li>
          <li>Move from deprecated ClipboardManager api</li>
          <li>Move from encrypted shared preferences to DataStore and normal shared preferences</li>
          <li>Add more event translations</li>
          <li>Bigger qrcodes, increase brightness when showing the qrcode</li>
          <li>Add a option to accept/reject a permission temporarily</li>
          <li>Better connection handling when switching networks</li>
        </ul>
      </li>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.2.8">v3.2.8</a>
        <ul>
          <li>Use bunker response from quartz</li>
          <li>Include zapstore in the new bunker and initial message</li>
          <li>Add search to the activity screen</li>
          <li>Show option to never close the app when using bunker url</li>
          <li>Separate general prefs and account prefs keys</li>
          <li>Add loading indicator when trying to fetch profile picture</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>0xChat App <a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.9-release">v1.4.9</a>
    <ul>
      <li>Implement updated NIP-29 group logic with support for group admin roles</li>
      <li>Add support for Aegis URL scheme login on iOS</li>
    </ul>
  </li>
  <li>Kyoto
    <ul>
      <li><a href="https://github.com/rustaceanrob/kyoto/commit/322d81a0e0c0f5a2205606b14d3357302822447b">v0.11.0</a>
        <ul>
          <li>Fetch the Network from the node builder</li>
          <li>Configure the initial TCP connection timeout when trying new peers</li>
          <li>Add BDK integration links to the README</li>
          <li>Update resource usage and profiling in DETAILS.md</li>
        </ul>
      </li>
      <li><a href="https://github.com/rustaceanrob/kyoto/commit/6bffae6e5ee69aaf0b9f851952fe5784f2082e13">v0.10.0</a>
        <ul>
          <li>Template issue for bugs, enhancement requests, releases</li>
          <li>Mainnet, signet, testnet4 checkpoints</li>
          <li>Testnet4 DNS seeds</li>
          <li>Socks5 proxy connections supported</li>
          <li><code class="language-plaintext highlighter-rouge">justfile</code> improvements</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nostrmo <a href="https://github.com/haorendashu/nostrmo/releases/tag/3.0.0">v3.0.0</a>
    <ul>
      <li>Add support to nesigner (Windows, Linux and MacOS)</li>
      <li>Using ISar to recode local relay’s database</li>
      <li>Upgrade flutter versions</li>
      <li>Show comment event (kind: 1111)</li>
      <li>Add Relay Group Naddr and Follow Set Naddr str decode</li>
    </ul>
  </li>
  <li>Citrine <a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.8.0">v0.8.0</a>
    <ul>
      <li>Support for protected events</li>
      <li>Support for auth</li>
      <li>Option to disable listening to pokey broadcasts</li>
      <li>Option to disable start on boot</li>
      <li>Change how the last backup time is calculated</li>
    </ul>
  </li>
  <li>Keychat <a href="https://github.com/keychat-io/keychat-app/releases/tag/1.31.13%2B6370">v1.31.13</a>
    <ul>
      <li>browser: Save the status of the tab unless it is closed manually</li>
      <li>browser: Remove btcnav.org from mini app</li>
      <li>message: Automatically refresh the homepage when a new message is added</li>
      <li>desktop: Support packaging exe for windows platform. Optimize cmd+shift line break operation</li>
      <li>mls: Cache state for uploading mls key package</li>
      <li>android: The minimum supported Android version is now 12 (API level 31)</li>
    </ul>
  </li>
  <li>Nowser <a href="https://github.com/haorendashu/nowser/releases/tag/1.1.0">v1.1.0</a>
    <ul>
      <li>Add hardware signer (nesigner) support</li>
      <li>Android Signer package name method change</li>
      <li>Image and link add long press support</li>
      <li>Incognito Mode</li>
      <li>Add download support</li>
      <li>Url https check</li>
    </ul>
  </li>
  <li>YakiHonne - iOS/Android/Web/Zap.Store
    <ul>
      <li>Web <a href="https://njump.me/note1k35xzku6xmp3eswj400ax4n8qqnt6d20neylvqn2quvd6ujw5utss8gglu">v4.6.0</a>
        <ul>
          <li>Introducing Smart Widgets v2</li>
          <li>New Tools Smart Widgets section in note creation for advanced content editing</li>
          <li>Curations, videos, and polls are now Tools Smart Widgets, enabling quick creation and seamless embedding in notes</li>
          <li>Zap advertisements added—top zappers can now appear below notes</li>
          <li>Note translation button has been relocated next to the note options for easier access</li>
          <li>Follower and following lists are now visible directly on the dashboard home page</li>
        </ul>
      </li>
      <li>Mobile <a href="https://njump.me/note1k35xzku6xmp3eswj400ax4n8qqnt6d20neylvqn2quvd6ujw5utss8gglu">v1.7.0</a>
        <ul>
          <li>Introducing the fully upgraded smart widget with its expanded set of functionalities</li>
          <li>A set of tools to enhance content editing</li>
          <li>Curations, videos, and polls are now Tools Smart Widgets, enabling quick creation and seamless embedding in notes</li>
          <li>Shortened URLs for a better user experience</li>
          <li>Highest zappers in notes will be highlighted</li>
          <li>Zapper list now includes zaps messages</li>
          <li>Gossip model can be enabled and disabled</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Yumyume <a href="https://gitlab.com/digitalethicsagency/nostr/yumyume/-/releases/0.6.0">v0.6.0</a> - Biryani with Pickled Onion &amp; Raita
    <ul>
      <li>Optimized &amp; Interactive Tag Cloud: The tag cloud is now fully visualized with tag density and colors.</li>
      <li>Bookmark Cards Now Ordered by Publishing Time: Update the global feed to sort and display bookmarks based on their original publishing timestamp, rather than the last edit.</li>
      <li>Saving Client Info: Yumyume now saves the client name (“Yumyume”) in the background when publishing a bookmark.</li>
    </ul>
  </li>
  <li>Samiz <a href="https://github.com/KoalaSat/samiz/releases/tag/v0.0.4-alpha">v0.0.4</a>
    <ul>
      <li>Now Samiz will broadcast:
        <ul>
          <li>Notes of any Kind created up to 1 hour before the session started.</li>
          <li>User Metadata created at any time</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Shopstr <a href="https://njump.me/nevent1qqsfn40k6ham6vkpr76xslsmv76p6r8x8jvlgm2vg9r5qltuwv8e5ygpp4mhxue69uhkummn9ekx7mqzyz3hzx9y3z8q955wsanupr927ua5n276cwg66ll33gcy3y0yzmwrx3haavn">v0.4.2</a>
    <ul>
      <li>Add Blossom media support for image uploads with metadata stripping</li>
      <li>Add a terms of service and privacy policy</li>
      <li>Add pagination for product viewing</li>
    </ul>
  </li>
  <li>Nostur <a href="https://nostur.com/testflight">Update (TestFlight)</a>
    <ul>
      <li>Add blossom media server support</li>
      <li>Support multiple blossom servers as mirror</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:01:58  Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @Rod Palmer (5000 sats) “PODCONF Disapproved ❌(due to Rijndael)”</li>
      <li>@AVERAGE_GARY (1100 sats) “OpNext was great. Run your testnet4 CTV + CSFS client. [<a href="https://gitHub.com/average-gary/bitcoin">Code repository</a>] Has Sv2 enabled branch too.”  “dB near zero ⚡”</li>
      <li>@pink money (500 sats) “🔥🔥🔥”</li>
      <li>@user4 (500 sats) “🔥🔥🔥”</li>
      <li>@Wartime (333 sats) “Mon a not 🤔🤣”</li>
      <li>@btconboard (300 sats) “👍🏻⚡️🫡”</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tip-of-the-day">Tech Tip of the Day</h3>
<ul>
  <li>01:03:51 <a href="https://cryptography101.ca/">Cryptography 101</a>: A free online cryptography course repository, by Alfred Menezes
    <ul>
      <li>Includes “videos, slides, exercises and solutions, and news items.” [<a href="https://stacker.news/items/966634">Koob’s SN post</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/05/09/">353</a>
        <ul>
          <li>BIP30 consensus failure vulnerability: Ruben Somsen <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/CAPv7TjZTWhgzzdps3vb0YoU3EYJwThDFhNLkf4XmmdfhbORTaw@mail.gmail.com/">posted</a> to the Bitcoin-Dev mailing list about a theoretical consensus failure that could occur now that checkpoints have been removed from Bitcoin Core.</li>
          <li>Avoiding BIP32 path reuse: Kevin Loaec <a href="https://delvingbitcoin.org/t/avoiding-xpub-derivation-reuse-across-wallets-in-a-ux-friendly-manner/1644">posted</a> to Delving Bitcoin to discuss options for preventing the same BIP32 wallet path from being used with different wallets, which could lead to a loss of privacy due to output linking and a theoretical loss of security.</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/05/02/">352</a>
        <ul>
          <li>Comparison of cluster linearization techniques: Pieter Wuille <a href="https://delvingbitcoin.org/t/how-to-linearize-your-cluster/303/68">posted</a> to Delving Bitcoin about some of the fundamental tradeoffs between three different cluster linearization techniques.</li>
          <li>Increasing or removing Bitcoin Core’s <code class="language-plaintext highlighter-rouge">OP_RETURN</code> size limit: in a thread on Bitcoin-Dev, several developers discussed changing or removing Bitcoin Core’s default limit for OP_RETURN data carrier outputs.</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/04/25/">351</a>
        <ul>
          <li>Interactive aggregate signatures compatible with secp256k1: Jonas Nick, Tim Ruffing, Yannick Seurin <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/be3813bf-467d-4880-9383-2a0b0223e7e5@gmail.com/">posted</a> to the Bitcoin-Dev mailing list to announce a paper they’ve written about creating 64-byte aggregate signatures compatible with the cryptographic primitives already used by Bitcoin.</li>
          <li>Standardized backup for wallet descriptors: Salvatore Ingala <a href="https://delvingbitcoin.org/t/a-simple-backup-scheme-for-wallet-accounts/1607">posted</a> to Delving Bitcoin a summary of various tradeoffs related to backing up wallet descriptors and a proposed scheme that should be useful for many different types of wallets, including those using complex scripts.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li>Elliptic’s new <a href="https://www.elliptic.co/blog/sanctions-and-terrorism-how-the-cartels-use-crypto-to-launder-the-proceeds-of-narcotics-trafficking">report</a> shows cartels deposit cash into banks before converting to stablecoins, challenging the narrative that “unhosted wallets” are the primary problem [<a href="https://www.therage.co/new-elliptic-report-are-unhosted-wallets-really-the-problem/">The Rage</a>]
    <ul>
      <li>The report cautions lawmakers against relying on blockchain surveillance firm reports, noting these companies have “clear profit incentive to expand their services” into the non-custodial sector.</li>
    </ul>
  </li>
</ul>

<h4 id="lightning--l2-1">Lightning + L2+</h4>
<ul>
  <li>Aqua Wallet to introduce Dolphin Card: A KYC-free VISA card for spending [<a href="https://jan3.zendesk.com/hc/en-us/sections/36037146197019-Dolphin-Card-AQUA-Visa-Card">Blog post</a>]
    <ul>
      <li>Aqua Wallet’s upcoming Dolphin Card allows spending Bitcoin, Liquid Bitcoin, and Tether at VISA merchants without identity verification, with a monthly limit of $4,000.</li>
      <li>Initially launching as a virtual card with physical version to follow, the Dolphin Card will be available in most countries except the U.S. and Canada.</li>
    </ul>
  </li>
</ul>

<h4 id="nostr-1">Nostr</h4>
<ul>
  <li>Bitcoin-focused news desk No Bullshit Bitcoin integrates zapthreads-based Nostr comments [<a href="https://njump.me/nevent1qqsp38gkgrl8ascuxu9zmgn665886ttkmz8ct68mhc8xfl4676ek23spp4mhxue69uhkummn9ekx7mqzyzu62d6j8wazlndws47epk98vr0y7gfee8usmxr0w37w058vp5tn64xl3ze">Note</a>]
    <ul>
      <li>“Comments you leave under the original (quoted) post below should appear on our site, and comments you leave on our site should be visible under the post on Nostr.”</li>
    </ul>
  </li>
  <li><a href="https://njump.me/npub1jp3776ujdul56rfkkrv8rxxgrslqr07rz83xpmz3ndl74lg7ngys320eg2">Guide</a>: Self-hosted NIP-05 as a Lightning Zap Address for Nostr, by Avren [<a href="https://njump.me/naddr1qvzqqqr4gupzpyrraa4eymelf5xndvxcwxvvs8p7qxluxy0zvrk9rxmlat73axsfqq2hw4rkwsmxun2nv98rsv3dvem42mthfdpkunz6gn9">Note</a>]</li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Bitcoin-native holding company Nakamoto merges with KindlyMD to build Bitcoin treasury [<a href="https://bitcoinmagazine.com/news/david-bailey-and-bitcoin-native-holding-company-nakamoto-announce-merger-with-kindlymd-to-establish-bitcoin-treasury">Bitcoin Magazine</a>]
    <ul>
      <li>KindlyMD and Nakamoto Holdings announce $710 million merger deal with David Bailey becoming CEO of the combined entity while Tim Pickett continues managing healthcare operations.</li>
    </ul>
  </li>
  <li>Tether, SoftBank Group, and Jack Mallers launch Twenty One, a Bitcoin-native company, through a business combination with Cantor Equity Partners [<a href="https://www.businesswire.com/news/home/20250423962305/en/Tether-SoftBank-Group-and-Jack-Mallers-Launch-Twenty-One-a-Bitcoin-native-Company-Through-a-Business-Combination-With-Cantor-Equity-Partners">Business Wire</a>]
    <ul>
      <li>Twenty One Capital is launching with over 42,000 BTC in its treasury and plans to go public through a SPAC merger with Cantor Equity Partners.</li>
    </ul>
  </li>
  <li>Strike launches Strike Lending: Bitcoin-backed loans for individuals and businesses [<a href="https://strike.me/blog/announcing-bitcoin-backed-loans/"></a>]
    <ul>
      <li>Strike introduces bitcoin-backed loans allowing eligible customers to borrow $75k to 2m for up to 12 months at 12% APR.</li>
    </ul>
  </li>
  <li>Bull Bitcoin introduces brand new platform for Canadian customer base, following its extension in Costa Rica, Europe, and Mexico [<a href="https://www.bullbitcoin.com/blog/introducing-the-new-bull-bitcoin-platform">Blog post</a>]
    <ul>
      <li>New features include instant e-transfers, transparent price spreads instead of fees, and enhanced Bitcoin transaction options including Lightning Network support, with automatic data deletion for inactive accounts.</li>
      <li>Future developments include recurring buys over Lightning and Liquid networks, auto-buy/sell functions, Payjoin technology for privacy, and limit orders, all built on self-hosted infrastructure.</li>
    </ul>
  </li>
  <li>Relai brings Bitcoin-collateralized lending to the European market [<a href="https://relai.app/blog/relai-private-sygnum-bitcoin-loans/">Announcement</a>]
    <ul>
      <li>The service requires qualified investors under Swiss FinSA regulations, with minimum financial assets of CHF 500,000 and initial deposit of CHF 100,000, offering loans with 12-month minimum terms and up to 40% LTV ratios.</li>
    </ul>
  </li>
  <li>Coinbase agrees to purchase Dubai-based Deribit for $2.9bn, paying 700mn in cash and the remainder in shares, marking the digital market’s largest ever acquisition [<a href="https://www.ft.com/content/3c6dcb79-44a3-465d-9c15-9816fe85944a">FT</a>]
    <ul>
      <li>Deribit, the world’s largest cryptocurrency derivatives market, handled over $1tn in trading volumes last year as the industry prepares for anticipated demand from banks and asset managers.</li>
    </ul>
  </li>
  <li>Coinbase Asset Management launches the Coinbase Bitcoin Yield Fund (CBYF), aiming to generate 4-8% net returns in bitcoin annually [<a href="https://www.coinbase.com/en-fr/blog/coinbase-asset-management-launches-the-coinbase-bitcoin-yield-fund">Press release</a>]
    <ul>
      <li>Multiple investors including Abu Dhabi-based Aspen Digital have seeded the fund, which launched on May 1, 2025 with Aspen serving as initial distribution partner across UAE and Asia.</li>
    </ul>
  </li>
  <li>Lightspark announces partnership with Revolut to implement Bitcoin network payment infrastructure in the UK and select EEA countries, offering lower fees and faster transactions [<a href="https://www.lightspark.com/blog/news/revolut-lightspark-announcement">Press release</a>]</li>
  <li>Ruya bank partners with Fuze to become the first Islamic bank globally to offer Shari’ah-compliant virtual asset investments [<a href="https://bitcoinmagazine.com/news/ruya-becomes-first-islamic-bank-to-offer-bitcoin-and-virtual-asset-investments">Bitcoin Magazine</a>]</li>
  <li>Meta explores stablecoin integration three years after Diem project collapse [<a href="https://fortune.com/crypto/2025/05/08/meta-stablecoins-exploration-usdc-circle-diem-libra/">Fortune</a>]
    <ul>
      <li>Meta initiates talks with crypto infrastructure companies to potentially deploy stablecoins for cross-border payments to content creators</li>
    </ul>
  </li>
  <li>Spar now accepts Bitcoin payments at its Zug supermarket via LNURL, implemented by DFX Swiss through OpenCryptoPay solution that enables QR code transactions [<a href="https://bitcoinnews.com/adoption/spar-supermarket-switzerland-bitcoin/">Bitcoin News</a>]</li>
  <li>Citrea deploys Clementine Bridge on Bitcoin testnet using BitVM2 programming language to overcome the “bottleneck for using BTC in a programmable environment.” [<a href="https://www.coindesk.com/tech/2025/04/23/bitcoin-rollup-citrea-deploys-bridge-to-tackle-collateral-bottleneck-of-using-btc-in-defi">CoinDesk</a>]</li>
  <li>Apple changes U.S. App Store guidelines to allow apps to link users to their websites for purchases after losing court battle against Epic Games [<a href="https://techcrunch.com/2025/05/02/apple-changes-us-app-store-rules-to-let-apps-redirect-users-to-their-own-websites-for-payments/">TechCrunch</a>]
    <ul>
      <li>The ruling requires Apple to stop using “scare screens” and remove restrictive language guidelines, though the company states they will appeal the decision.s</li>
    </ul>
  </li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>Tether renews $100,000 grant to the BTCPay Server Foundation for the second consecutive year [<a href="https://tether.io/news/tether-awards-another-100000-grant-to-btcpay-server-foundation-reaffirming-its-commitment-to-free-and-open-source-software-development/">Announcement</a>]</li>
  <li>Spiral renews grant to <a href="https://x.com/spiralbtc/status/1920110108484173980">Dan Gould</a> (@bitgould) for his work on the Payjoin Dev Kit, and to <a href="https://x.com/spiralbtc/status/1914363508126515567">@joschisanbtc</a>, for “simplifying federations, allowing anyone to run Fedimint guardians on laptops, Start9s, whatever”.</li>
  <li>Btrust awards grant to Africa Free Routing to support five Bitcoin Lightning-focused developer bootcamps across Africa in 2025 [<a href="https://bitcoiners.africa/btrust-partners-with-africa-freee-routing/">Press Release</a>]
    <ul>
      <li>The bootcamps aim to onboard non-Bitcoin developers into the ecosystem, providing training, mentorship, and pathways to open-source contribution.</li>
      <li>The initiative seeks to build local developer communities, increase participation in global Bitcoin projects, and expand technical capacity across the continent.</li>
      <li>Participants will be funneled into long-term mentorship networks like Btrust Builders for continued growth.</li>
    </ul>
  </li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>France bans mixers and privacy coins [<a href="https://x.com/laurentmt/status/1917728418864435269">Twitter post</a>]
    <ul>
      <li>A new law adopted in France now considers mixers and privacy coins as an indicator of suspicious activity by default [<a href="https://www.assemblee-nationale.fr/dyn/17/textes/l17t0102_texte-adopte-provisoire.pdf">Adopted Law proposal</a>]</li>
    </ul>
  </li>
  <li>Jury orders NSO Group to pay WhatsApp $167 million in punitive damages for hacking 1,400 users in 2019 [<a href="https://techcrunch.com/2025/05/06/nso-group-must-pay-more-than-167-million-in-damages-to-whatsapp-for-spyware-campaign/">TechCrunch</a>]
    <ul>
      <li>Judge previously ruled NSO Group violated federal and California hacking laws, with researcher John Scott-Railton stating: “NSO makes many millions of dollars helping dictators hack people.”</li>
    </ul>
  </li>
</ul>

<h4 id="bitcoin-security-incidents">Bitcoin Security Incidents</h4>
<ul>
  <li>Elderly US citizen falls victim to 3,520 bitcoin social engineering theft [<a href="https://cointelegraph.com/news/elderly-us-victim-loses-330m-bitcoin-in-social-engineering-theft">Coin Telegraph</a>]
    <ul>
      <li>An elderly US investor loses $330 million worth of Bitcoin in a sophisticated social engineering attack, ranking as the fifth-largest crypto hack in history, as reported by <a href="https://x.com/zachxbt/status/1916756932763046273">ZachXBT</a></li>
      <li>The attacker then laundered the 3,520 stolen bitcoin through over six exchanges using peel chain methods and swapped significant portions into Monero, which spiked its price by 45% and lead to estimated slippage losses reaching $66 million.</li>
    </ul>
  </li>
  <li>Five dollar wrench attacks: (Credit goes to Jameson Lopp’s physical bitcoin attacks <a href="https://github.com/jlopp/physical-bitcoin-attacks">repository</a>)
    <ul>
      <li>Philippine National Police arrest three suspects for the kidnapping and murder of businessman and his driver [<a href="https://globalnation.inquirer.net/273226/3-suspects-arrested-in-tan-kidnap-slay">Global Nation</a>]
        <ul>
          <li>The victims were lured to a house on March 29, 2025 and held captive for 10 days. The group demanded a $20m ransom, then killed their victim despite receiving a sum totalling $3m paid in cryptocurrency.</li>
        </ul>
      </li>
      <li>Pakistani Counter-Terrorism Department arrests four individuals in Karachi for conducting short-term kidnappings while impersonating various law enforcement offices [<a href="https://archive.is/fpCPj">Ary News</a>]
        <ul>
          <li>The suspects used fake government number plates on their car, abducted citizens to a remote area, and extracted ransoms including bitcoin secrets and cash from ATMs before releasing victims. The event took place on April 13, 2025.</li>
        </ul>
      </li>
      <li>Father of crypto firm boss rescued in French police raid [<a href="https://www.lemonde.fr/en/france/article/2025/05/04/abducted-dad-of-crypto-firm-boss-freed-in-french-police-raid_6740891_7.html">Le Monde</a>]
        <ul>
          <li>French police free a kidnapped man during a weekend raid in Paris, arresting five suspects in their 20s. The victim’s finger was mutilated, with kidnappers demanding a €5-7 million ransom from his cryptocurrency-wealthy son. The event took place on May 1, 2025.</li>
        </ul>
      </li>
      <li>Three Florida teenagers kidnap Las Vegas business man at gunpoint, drive him to remote Arizona desert, and steal $4 million in cryptocurrency and other digital assets [<a href="https://www.8newsnow.com/investigators/florida-teens-kidnap-las-vegas-man-drive-him-to-arizona-desert-steal-4m-in-cryptocurrency-police/">8News Now</a>]
        <ul>
          <li>The victim, who was the organizer of a cryptocurrency-related event in downtown Las Vegas, was forced to reveal the passwords of his financial accounts. The event took place in November 2024.</li>
        </ul>
      </li>
      <li>Montreal police arrest three men for kidnapping and stealing $15,000 in cryptocurrency from a Verdun businessman [<a href="https://www.ctvnews.ca/montreal/article/3-men-facing-kidnapping-robbery-and-other-charges-in-crypto-theft-montreal-police/">CTV News</a>]
        <ul>
          <li>The suspects allegedly tied up the victim, a man in his 30s who ran his own cryptocurrency business and tortured him for hours before obtaining transfer details and fleeing the scene. The event took place on August 15, 2024</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #31250: wallet: Disable creating and loading legacy wallets [<a href="https://github.com/bitcoin/bitcoin/pull/31250">Merged</a>]</li>
  <li>Bitcoin Core #31247: psbt: MuSig2 Fields [<a href="https://github.com/bitcoin/bitcoin/pull/31247">Merged</a>] (Implements un/serialization of MuSig2 PSBT fields and prepares PSBT to be able to sign for MuSig2 inputs.)</li>
  <li>BIPs #1835: BIP48: Add p2tr script type derivation [<a href="https://github.com/bitcoin/bips/pull/1835">Merged</a>]</li>
  <li>BIPs #1555: BIP 321: URI Scheme (Replace BIP 21 with a new BIP containing information about more modern usage of it) [<a href="https://github.com/bitcoin/bips/pull/1555">Merged</a>]</li>
  <li>BTCPay Server #6684: Add support for wallet policy descriptors (BIP388) [<a href="https://github.com/btcpayserver/btcpayserver/pull/6684">Merged</a>]</li>
  <li>Eclair #3064: Simplify channel keys management [<a href="https://github.com/ACINQ/eclair/pull/3064">Merged</a>]</li>
  <li>NIPs #1890: Adds optional nip60.signSecret() and kind 10019 filter tag [<a href="https://github.com/nostr-protocol/nips/pull/1890">Open</a>] (The PR clarifies and improves Nostr &lt;-&gt; Cashu interoperability)</li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>Spain’s new banking regulations clarified: no pre-approval needed for cash withdrawals [<a href="https://cryptoslate.com/spain-demands-tighter-bank-oversight-fuels-bitcoin-appeal/">Cryptoslate</a>]
    <ul>
      <li>Spain’s Royal Decree 253/2025 requires financial institutions, not individuals, to report cash transactions over €3,000 monthly to tax authorities.</li>
      <li>Financial institutions must now report all cash movements over €3,000 to tax authorities in monthly reports, offering the tax agency “granular, near‑real‑time data on every sizable cash movement and virtually every card transaction.”</li>
    </ul>
  </li>
  <li>European Union plans to ban anonymous crypto accounts and privacy-preserving coins by 2027 under new AML regulation [<a href="https://cointelegraph.com/news/eu-crypto-ban-anonymous-privacy-tokens-2027">Coin Telegraph</a>]
    <ul>
      <li>Credit institutions, financial institutions, and crypto asset service providers will be prohibited from maintaining any anonymous accounts or handling privacy-enhancing cryptocurrencies.</li>
      <li>Customer due diligence will be mandatory for transactions above €1,000 as part of the EU’s expanded regulatory framework building on the Markets in Crypto-Assets Regulation.</li>
    </ul>
  </li>
  <li>German prosecutors confiscate Bitcoin, Ether, Litecoin, and Dash worth $38.2 million from privacy-focused crypto platform eXch, which operated without AML protocols [<a href="https://www.theblock.co/post/353782/german-authorities-seize-38-million-worth-of-crypto-from-exch-exchange">The Block</a>] [<a href="https://www.presseportal.de/blaulicht/pm/7/6029813">Presse Portal</a>]
    <ul>
      <li>Authorities claim approximately 1.9bn in crypto moved through eXch since 2014, with some funds originating from criminal sources, including part of 1.4 billion stolen from Bybit.</li>
      <li>eXch operators, who announced shutdown on May 1, argue privacy is not a crime and that their “privacy-centered goals were being misinterpreted” by authorities.
  (See BR095 for added context on their planned shutdown after announcing a 50 BTC open-source fund to support privacy-enhancing projects:
“eXch is shutting down operations and changing owners on May 1st, 2025 after learning they are the target of a transatlantic operation aiming to prosecute them for money laundering and terrorism.”)</li>
    </ul>
  </li>
  <li>France now allows crypto-backed Lombard credit [<a href="https://www.bfmtv.com/crypto/bitcoin/la-france-autorise-desormais-le-credit-lombard-adosse-a-des-cryptomonnaies_AN-202505100225.html">BFMTV</a>]
    <ul>
      <li>France legalizes using cryptocurrencies as collateral for euro loans starting April 30, 2025, enabling investors to access liquidity without selling their digital assets.</li>
    </ul>
  </li>
  <li>U.S.: Florida lobbyist Brian Ballard faces Trump’s ire regarding the Truth Social post promoting a “Crypto Strategic Reserve” [<a href="https://www.politico.com/news/2025/05/08/ballard-trump-wiles-lobbyist-00333953">Politico</a>]
    <ul>
      <li>The Truth Social incident involved a Ballard employee at Mar-a-Lago persuading Trump to promote cryptocurrency, providing him with text to post, which promoted Ripple Labs, a Ballard client.</li>
    </ul>
  </li>
  <li>U.S.: Arizona Governor Katie Hobbs signs House Bill 2749 allowing the state to claim ownership of digital assets abandoned for three years and create a Bitcoin Reserve Fund [<a href="https://cointelegraph.com/news/arizona-governor-signs-bitcoin-reserve-keep-unclaimed-crypto">Coin Telegraph</a>]
    <ul>
      <li>The new law follows Hobbs’ veto of a similar bill citing concerns over “untested assets,” while another pending bill would allow investment of up to 10% of state funds into Bitcoin [<a href="https://cointelegraph.com/news/arizona-bitcoin-reserve-bill-vetoed-by-governor">Coin Telegraph</a>]</li>
    </ul>
  </li>
  <li>U.S.: Missouri House Bill 594 passes state House vote, proposing 100% income tax deduction for capital gains as the state tax code doesn’t distinguish between capital gains and income tax [<a href="https://cointelegraph.com/news/missouri-could-become-first-state-eliminate-capital-gains">Coin Telegraph</a>]</li>
  <li>Bhutan introduces its nation-wide digital currency tourism payment system in partnership with Binance Pay and DK Bank [<a href="https://www.binance.com/en/blog/payments/one-wallet-one-journey-bhutan-and-binance-pay-launch-worlds-first-national-tourism-payment-system-5232649784122488038">Blog post</a>]
    <ul>
      <li>Over 100 local merchants accept crypto payments for services from flights and visas to street market goods, with instant settlement in local currency.</li>
    </ul>
  </li>
  <li>Nigerian Government signs Investment and Securities Act 2025, bringing regulatory clarity to digital assets in Nigeria, recognizes Bitcoin as Security [<a href="https://www.forbes.com/sites/digital-assets/2025/04/30/nigerian-gov-passes-law-recognizing-bitcoin-as-a-security/">Forbes</a>]
    <ul>
      <li>The new law classifies all virtual assets as securities under SEC oversight, with penalties of ₦20 million ($12,430) and up to 10 years imprisonment for Ponzi schemes.</li>
    </ul>
  </li>
</ul>

<h3 id="prosecution">Prosecution</h3>
<ul>
  <li>FinCEN told prosecutors Samourai Wallet developers likely didn’t need MSB license [<a href="https://www.therage.co/fincen-to-sdny-samourai-wallet-did-not-need-msb-license/">The Rage</a>]
    <ul>
      <li>Recent court filing reveals FinCEN informed SDNY prosecutors that Samourai Wallet “would not qualify as a ‘Money Services Business’ requiring a FinCEN license” six months before developers were charged.</li>
      <li>Defense attorneys claim prosecutors “suppressed this information for over a year,” only disclosing it on April 1, 2025, after a specific Brady request for exculpatory evidence.</li>
      <li>Update: SDNY prosecutors refuse to grant hearing requested by Samourai Wallet developers after FinCEN opinions suggesting non-custodial wallets might not need MSB licenses were withheld for nearly a year [<a href="https://www.therage.co/sdny-petitions-court-to-deny-samourai-wallet-hearing-seeking-remedy-for-withheld-evidence/">The Rage</a>]
        <ul>
          <li>Prosecutors claim the withheld FinCEN statements were merely “informal, individual opinions” and “not Brady material,” while maintaining the case focuses on alleged money laundering conduct.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Related: New Jersey District Court dismisses charges against Christopher James Scalon, citing the DOJ’s April 7 “Ending Regulation by Prosecution” memo that discourages prosecution where “ambiguity exists.” [<a href="https://www.therage.co/districts-dropping-blanche-memo-cases-sdny-still-wont-comply/">The Rage</a>]
    <ul>
      <li>Scanlon is a businessman who founded and operated Aurae Lifestyle and Club Swann, providing financial services to high-net-worth clients through various entities that allegedly functioned as an unlicensed money transmitting business between 2015 and 2019, resulting in criminal charges that have now been dismissed.</li>
      <li>Indiana court previously dropped charges against AurumXchange operator Maximiliano Pilipis, ruling he couldn’t be held accountable for regulations that were ambiguous or non-existent at the time.</li>
    </ul>
  </li>
  <li>Texas District Court rules against Treasury’s attempt to retain power to re-list Tornado Cash on sanctions list after its removal last month [<a href="https://www.therage.co/court-bans-treasury-from-sanctioning-tornado-cash/">The Rage</a>]
    <ul>
      <li>Court rejects Treasury’s argument that final ruling was unnecessary, noting they “do not suggest they will not sanction Tornado Cash again.”</li>
      <li>Fifth Circuit previously determined Treasury overstepped authority by sanctioning immutable smart contract software, stating Treasury would need Congress to amend the IEEPA.</li>
    </ul>
  </li>
  <li>The DeFi Education Fund launches a <a href="https://section1960.defieducationfund.org/">petition</a> urging Trump administration to end prosecution of software developers [<a href="https://x.com/fund_defi/status/1916814129395871818">Announcement</a>]
    <ul>
      <li>“The SDNY is attempting to hold software developers criminally liable for how others use their code,” contradicting previous FinCEN guidance that developers of self-custodial protocols are not money transmitters.</li>
      <li>The petition argues this prosecution “sets a precedent that potentially chills all crypto development in the United States” and threatens technological innovation.</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://freerouting.africa/kaduna-bootcamp/">Kaduna Lightning Developer Bootcamp</a>: A 4-day hands-on Bitcoin Lightning Developer Bootcamp
    <ul>
      <li>Organized by Africa Free Routing, in partnership with Btrust, Tether, and African Bitcoiners.</li>
      <li>14-17 May, 2025 in Kaduna, Nigeria</li>
    </ul>
  </li>
  <li><a href="https://x.com/BitcoinforAI">Bitcoin for AI Conference</a>: One-day virtual conference exploring how Bitcoin meets AI
    <ul>
      <li>June 21, 2025</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>Removing Bitcoin’s Guardrails, by BitMEX Research [<a href="https://blog.bitmex.com/removing-bitcoins-guardrails/">Blog post</a>]</li>
      <li>Relay policy drama, by Antoine Poinsot [<a href="https://antoinep.com/posts/relay_policy_drama/">Blog post</a>]</li>
      <li>The MEVil of Relay Policy, by Matt Corallo [<a href="https://spiralbtc.substack.com/p/the-mevil-of-relay-policy">Spiral</a>]</li>
      <li>When Prosecutors Ignore the Regulators, by Peter Van Valkenburgh [<a href="https://www.coincenter.org/when-prosecutors-ignore-the-regulators/">Coin Center</a>]</li>
      <li>Taplocks, Policy-Signer Wallets &amp; the Anchor Era, by Murray Rudd [<a href="https://www.murrayrudd.pro/taplocks-policy-signer-wallets-the-anchor-era/">Blog post</a>]</li>
      <li>Decentralized Media Hosting via Blossom, by Miljan [<a href="https://njump.me/naddr1qvzqqqr4gupzp4sl80zm866yqrha4esknfwp0j4lxfrt29pkrh5nnnj2rgx6dm62qqnkgetrv4h8gunpd35h5ety94kk2erfvysxsmmnw35kueeqwe5kzgrzd3hhxum0d5aphqvq">Note</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, ODELL, ROB HAMILTON, CRAIG RAW</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Rob Hamilton, Craig Raw &amp; Matt Odell to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR095 - OP_NEXT Recap, COLDCARD, Bitcoin Core, Ephemeral Dust, Ephemeral Anchors, Pay-to-Anchor outputs, Taplocks, Electrum, Cove Wallet, Mempool.space, Liana, Bitcoin Privacy Accounting, ESP32.Review + MORE ft. Rob &amp;amp; Rijndael</title><link href="https://bitcoin.review/podcast/episode-95/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR095 - OP_NEXT Recap, COLDCARD, Bitcoin Core, Ephemeral Dust, Ephemeral Anchors, Pay-to-Anchor outputs, Taplocks, Electrum, Cove Wallet, Mempool.space, Liana, Bitcoin Privacy Accounting, ESP32.Review + MORE ft. Rob &amp;amp; Rijndael" /><published>2025-04-23T12:00:00+00:00</published><updated>2025-04-23T12:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-95</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-95/"><![CDATA[<p>I’m joined by guests <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a> &amp; <a href="https://twitter.com/rot13maxi">Rijndael</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>00:01:09 OP_Next recap</li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:15:18 Coldcard
    <ul>
      <li>Shared Improvements - Both Mk4 <a href="https://github.com/Coldcard/firmware/releases/tag/2025-04-16T1908-v5.4.2">v5.4.2</a> and Q <a href="https://github.com/Coldcard/firmware/releases/tag/2025-04-16T1906-v1.3.2Q">v1.3.2Q</a>
        <ul>
          <li>New Feature: Multisig transactions are finalized when sufficiently signed. Allows use of PushTX with multisig wallets</li>
          <li>New Feature: Signing artifacts re-export to various media. Now you have the option of exporting the signing products (transaction/PSBT) to different media than the original source. Incoming PSBT over QR can be signed and saved to SD card if desired.</li>
          <li>New Feature: Multisig export files are signed now</li>
          <li>Enhancement: NFC export usability upgrade: NFC keeps exporting until CANCEL/X is pressed</li>
          <li>Enhancement: Add Bitcoin Safe option to Export Wallet</li>
          <li>Enhancement: 10% performance improvement in USB upload speed for large files</li>
          <li>(Q only) Enhancement: Always choose the biggest possible display size for QR</li>
        </ul>
      </li>
      <li>Two New Heavyweight Features
        <ul>
          <li>CCC: COLDCARD can now Co-sign like collaborative multisig HSMs, no centralized servers needed</li>
          <li>KeyTeleport: Send secrets on a video call to other COLDCARD! Securely move seeds, secure notes/passwords, multisig PSBTs, even full backups (full clone), between two Q using QR or NFC</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:42:53 Bitcoin Core <a href="https://github.com/bitcoin/bitcoin/releases/tag/v29.0">v29.0</a>
    <ul>
      <li>Notable changes
        <ul>
          <li>P2P and Network Changes
            <ul>
              <li>Support for UPnP was dropped</li>
              <li>libnatpmp was replaced with a built-in implementation of PCP and NAT-PMP</li>
              <li>When the -port configuration option is used, the default onion listening port will now be derived to be that port + 1 instead of being set to a fixed value</li>
              <li>Upon receiving an orphan transaction, the node will attempt to download missing parents from all peers who announced the orphan</li>
            </ul>
          </li>
          <li>Mempool Policy and Mining Changes
            <ul>
              <li>Ephemeral dust is a new concept that allows a single dust output in a transaction, provided the transaction is zero fee</li>
            </ul>
          </li>
          <li>Updated RPCs
            <ul>
              <li>The RPC <code class="language-plaintext highlighter-rouge">testmempoolaccept</code> response now includes a <code class="language-plaintext highlighter-rouge">reject-details</code> field in some cases, similar to the complete error messages returned by <code class="language-plaintext highlighter-rouge">sendrawtransaction</code></li>
              <li>Duplicate blocks submitted with <code class="language-plaintext highlighter-rouge">submitblock</code> will now persist their block data even if it was previously pruned</li>
              <li><code class="language-plaintext highlighter-rouge">getmininginfo</code> now returns <code class="language-plaintext highlighter-rouge">nBits</code> and the current target in the <code class="language-plaintext highlighter-rouge">target</code> field. It also returns a <code class="language-plaintext highlighter-rouge">next</code> object which specifies the <code class="language-plaintext highlighter-rouge">height</code>, <code class="language-plaintext highlighter-rouge">nBits</code>, <code class="language-plaintext highlighter-rouge">difficulty</code>, and <code class="language-plaintext highlighter-rouge">target</code> for the next block</li>
              <li><code class="language-plaintext highlighter-rouge">getblock</code> and <code class="language-plaintext highlighter-rouge">getblockheader</code> now return the current target in the <code class="language-plaintext highlighter-rouge">target</code> field</li>
              <li><code class="language-plaintext highlighter-rouge">getblockchaininfo</code> and <code class="language-plaintext highlighter-rouge">getchainstates</code> now return <code class="language-plaintext highlighter-rouge">nBits</code> and the current target in the <code class="language-plaintext highlighter-rouge">target</code> field</li>
              <li>the <code class="language-plaintext highlighter-rouge">getblocktemplate</code> RPC <code class="language-plaintext highlighter-rouge">curtime</code> (BIP22) and <code class="language-plaintext highlighter-rouge">mintime</code> (BIP23) fields now account for the timewarp fix proposed in BIP94 on all networks</li>
            </ul>
          </li>
          <li>New RPCs
            <ul>
              <li><code class="language-plaintext highlighter-rouge">getdescriptoractivity</code> can be used to find all spend/receive activity relevant to a given set of descriptors within a set of specified blocks</li>
            </ul>
          </li>
          <li>Updated Settings
            <ul>
              <li>The maximum allowed value for the <code class="language-plaintext highlighter-rouge">-dbcache</code> configuration option has been dropped due to recent UTXO set growth</li>
              <li>Starting with v28.0, the <code class="language-plaintext highlighter-rouge">-mempoolfullrbf</code> startup option was set to default to <code class="language-plaintext highlighter-rouge">1</code>. With widespread adoption of this policy, users no longer benefit from disabling it, so the option has been removed, making full replace-by-fee the standard behavior</li>
              <li>Setting <code class="language-plaintext highlighter-rouge">-upnp</code> will now log a warning and be interpreted as <code class="language-plaintext highlighter-rouge">-natpmp</code>. Consider using <code class="language-plaintext highlighter-rouge">-natpmp</code> directly instead</li>
              <li>As a safety check, Bitcoin core will <strong>fail to start</strong> when <code class="language-plaintext highlighter-rouge">-blockreservedweight</code> init parameter value is lower than <code class="language-plaintext highlighter-rouge">2000</code> weight units. Bitcoin Core will also <strong>fail to start</strong> if the <code class="language-plaintext highlighter-rouge">-blockmaxweight</code> or <code class="language-plaintext highlighter-rouge">-blockreservedweight</code> init parameter exceeds consensus limit of <code class="language-plaintext highlighter-rouge">4,000,000 WU</code></li>
            </ul>
          </li>
          <li>Build System
            <ul>
              <li>The build system has been migrated from Autotools to CMake</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:47:21 BDK <a href="https://github.com/bitcoindevkit/bdk/releases/tag/wallet-1.2.0">v1.2.0</a>
    <ul>
      <li>TxBuilder <code class="language-plaintext highlighter-rouge">add_recipient</code> function now accepts anything that implements <code class="language-plaintext highlighter-rouge">Into&lt;ScriptBuf&gt;</code></li>
      <li>The wallet considers a coinbase output eligible for selection if it will mature in the next block</li>
      <li>Wallets persisted with a <code class="language-plaintext highlighter-rouge">rusqlite::Connection</code> are checked to be thread-safe</li>
      <li>The <code class="language-plaintext highlighter-rouge">bdk_chain</code> dependency is updated to version 0.21.1, plus a number of internal cleanups</li>
    </ul>
  </li>
  <li>00:48:12 Coinswap <a href="https://github.com/citadel-tech/coinswap/releases/tag/v0.1.1">v0.1.1</a>
    <ul>
      <li>Core Protocol &amp; Performance Improvements
        <ul>
          <li>UTXO Management: A major source of latency due to frequent Core RPC calls have been removed by having custom in-memory UTXO indexes. These maps are also persisted in the disk, reducing wallet sync time.</li>
          <li>Coin Selection: State of art coin-selection algorithms, similar to Bitcoin Core, is integrated, making various kind of tx creation more efficient.</li>
          <li>Fidelity Management: Fidelity bond management tasks, like bond expiry checks, redemtion, recreation, is now automated in the maker servers. Reducing user responsibilities of managing Fidelity Bonds.</li>
          <li>Taker Liveness: A new message WaitingFundingConfirmation have been introduced to mainatin swap connections between Takers and Makers to handle variable block confirmation delay</li>
        </ul>
      </li>
      <li>User Experience &amp; Compatibility
        <ul>
          <li>Compatibility: The crate and the apps are now fully compatible with Mac</li>
          <li>Tor: Tor operation is streamlined providing faster and more resilient tor connections. Tor addresses are now deterministically linked with the wallet seed, ensuring constant onion address across system reboots</li>
          <li>UI/UX: Improved display of various user facing structures like, balances, utxos, offer data, fidelity bonds and overall improvements in system logs. Making the apps more fun to play with</li>
          <li>API Design: Streamlined various transaction creation routines to use a single common API. Reducing technical debts and removing redundant code</li>
          <li>Protocol Spec Documentation: Details how CoinSwap breaks the transaction graph and improves privacy through routed swaps and amount splitting. Includes diagrams for clarity</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:48:56 Electrum Wallet
    <ul>
      <li><a href="https://github.com/spesmilo/electrum/pull/9675">NIP47 plugin</a>
        <ul>
          <li>Implements Nostr Wallet Connect (NIP47) plugin, which supports remote control of Electrum lightning wallet through Nostr protocol as a plugin with CLI and QT gui compatibility.</li>
          <li>Users can set a 24-hour budget and connection expiry date when connecting Electrum as a funding source for clients like Amethyst, Alby, Bitbanana, and lnbits.</li>
        </ul>
      </li>
      <li><a href="https://github.com/spesmilo/electrum/pull/9718">Userspace plugins</a>
        <ul>
          <li>The next release of Electrum Wallet will make it possible to install plugins developed and distributed by third-parties.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:52:45 BTCPay Server <a href="https://github.com/btcpayserver/btcpayserver/releases/tag/v2.1.0">v2.1.0</a>
    <ul>
      <li>Add better MultiSig flow when all users are using BTCPay Server</li>
      <li>Remove ZCash and Monero from core code</li>
      <li>Disable cold wallet creation by default</li>
      <li>Add support for RBF and improve UX for CPFP</li>
      <li>Greenfield: Add <code class="language-plaintext highlighter-rouge">refundBOLT11Expiration</code> to Get/Update store endpoint</li>
      <li>Greenfield: Add <code class="language-plaintext highlighter-rouge">invitationLink</code> and <code class="language-plaintext highlighter-rouge">disabled</code> properties to user APIs</li>
    </ul>
  </li>
  <li>00:53:33 Nunchuk Android
    <ul>
      <li><a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.67">v1.9.67</a>
        <ul>
          <li>Option to disable key path spending in Taproot/MuSig2 multisig wallets</li>
          <li>Fee estimates for key path spend versus script path spend</li>
          <li>Option to export transaction history to CSV file</li>
          <li>Option to create a Software key now and back up later</li>
          <li>Fee settings</li>
        </ul>
      </li>
      <li><a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.9.66">v1.9.66</a>
        <ul>
          <li>New and improved encrypted group wallet</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:54:04 Liana <a href="https://github.com/wizardsardine/liana/releases/tag/v10.0">v10.0</a>
    <ul>
      <li>This version does not introduce any breaking changes in the database schema</li>
      <li>Two new features are implemented: Backup and Third party keys fetching during the install</li>
      <li>Liana GUI
        <ul>
          <li>During the install process, the xpub of a key provider can be fetch from a Wizardsardine service by entering a token</li>
          <li>This Xpub can be used as a “Safety Net”, a paid product where a third party keeps a recovery key for you in case you lose your access to your funds</li>
          <li>We changed the default value of the “standard” recovery paths to ~1y, so the safety net can be quickly set with the maximum timelock without conflicting with an other recovery path</li>
          <li>Due to rust-miniscript compiler changes, for the same keys setup the output descriptor may differ from one generated by a v9 Liana. Both descriptors are supported by Liana v9 and v10 versions</li>
          <li>A new backup system for wallet configurations, including descriptors, has been introduced</li>
          <li>Users can now back up their wallet configurations by downloading a file during the wallet creation process</li>
          <li>They can also update their backup (for changes in labels, aliases, etc.) by downloading it from the Wallet settings</li>
          <li>This backup file can be used to restore the wallet or keep it synchronized across different devices</li>
          <li>This backup does not include hot keys (computer generated mnemonics)</li>
          <li>A new “Export/Import” section will be available in the settings, consolidating all export and import options</li>
          <li>This section will include the backup and restore wallet functions, as well as new features like “Export Labels” and “Export Descriptor.”</li>
          <li>The export of labels adheres to the BIP329 standard, both in the wallet backup and the “Export Labels” function</li>
          <li>Replace by fee action can now be executed on transactions without any related PSBT in the database</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:54:51 The Mempool Open Source Project <a href="https://github.com/mempool/mempool/releases/tag/v3.2.0">v3.2.0</a>
    <ul>
      <li>Highlights:
        <ul>
          <li>Support for v3 transactions</li>
          <li>Support for anchor outputs</li>
          <li>New UTXO bubble chart on the address page</li>
          <li>DATUM miner tags</li>
          <li>Tags to identify runestone messages and inscriptions</li>
          <li>Package broadcast</li>
          <li>Stratum job data visualizations</li>
          <li>Taproot multisig labels</li>
          <li>Transaction &amp; PSBT preview feature</li>
          <li>Address poisoning detection</li>
          <li>And more</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Cove <a href="https://github.com/bitcoinppl/cove/releases/tag/v0.3.0">v0.3.0</a>
    <ul>
      <li>Upgrade BIP329</li>
      <li>Check for the next 30 addresses for txns even if not revealed</li>
      <li>TAPSIGNER setup initial pin</li>
      <li>TAPSIGNER import already initialized card</li>
      <li>TAPSIGNER change PIN</li>
      <li>TAPSIGNER create download backup</li>
      <li>Readable card ident</li>
      <li>Sign PSBT using TAPSIGNER</li>
      <li>Watch for changes on unconfirmed txns</li>
    </ul>
  </li>
  <li>00:57:01 BoltzExchange boltz-web-app <a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.7.3">v1.7.3</a>
    <ul>
      <li>Include rescue key in backup</li>
      <li>Add Portuguese translations</li>
      <li>Improve UX for copying address/invoice on click</li>
    </ul>
  </li>
  <li>00:57:16 RoboSats <a href="https://github.com/RoboSats/robosats/releases/tag/v0.7.6-alpha">v0.7.6</a>
    <ul>
      <li>For Users
        <ul>
          <li>Dispute statement now requires a contact method to be submitted</li>
          <li>Coordinator rating over nostr (BETA)</li>
          <li>Token input now clears up blank spaces</li>
          <li>Add some messages to the trade workflow to answer the most common questions</li>
        </ul>
      </li>
      <li>For Coordinators
        <ul>
          <li>Add cancel_status param to the cancel order action</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:57:21 Bitcoin Safe
    <ul>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.2.3">v1.2.3</a>
        <ul>
          <li>Expand QR SignMessage Compatibility: SignMessage now supports all QR-UR-compatible hardware signers, including SpecterDIY, KeyStone, Passport, and Jade (additional to previous supported Coldcard Q)</li>
          <li>Wallet Import via QR: Add the ability to import wallet-export-files via QR code, ensuring compatibility with Keystone’s latest firmware</li>
        </ul>
      </li>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.2.2">v1.2.2</a>
        <ul>
          <li>Add Address poisoning detection and warning</li>
          <li>Nostr sync&amp;chat alias now also appears in share menu of the TX/PSBT</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:57:58 Blockstream Green
    <ul>
      <li>Android <a href="https://github.com/Blockstream/green_android/releases/tag/release_4.1.8">v4.1.8</a>
        <ul>
          <li>Add Language preference in App Settings</li>
          <li>Enable Android data backup for disaster recovery</li>
          <li>Allow setting custom Electrum gap limit with default server</li>
        </ul>
      </li>
      <li>iOS <a href="https://github.com/Blockstream/green_ios/releases/tag/release_4.1.8">v4.1.8</a>
        <ul>
          <li>Rename L-BTC to LBTC</li>
          <li>Improve notifications translations</li>
          <li>Persist wallet list across app reinstallation</li>
          <li>Reduce login time</li>
          <li>Improve background lightning payments</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:58:08 Rust Payjoin <a href="https://github.com/payjoin/rust-payjoin/releases/tag/payjoin-0.23.0">v0.23.0</a>
    <ul>
      <li>This release features a first-class persistence abstraction, wire protocol changes for RFC 9540 support, and better compliance with the BIP78 specification. It also pays back a whole bunch of tech debt including enhanced error handling, expanded functionality with new modules and additive features, and improved test infrastructure. There are breaking API and protocol changes as a result.</li>
      <li>Changelog
        <ul>
          <li>Make features additive</li>
          <li>Make receiver errors replyable to the sender</li>
          <li>Introduce “directory” feature module</li>
          <li>Accomodate updated BIP78 spec</li>
          <li>Introduce experimental multiparty sender behind the “_multiparty” feature flag</li>
          <li>Add support for RFC 9540</li>
          <li>Add first-class persistence abstraction</li>
          <li>Add many more tests, significantly improving test coverage</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:01:15 Zaprite <a href="https://help.zaprite.com/en/articles/11080992-zaprite-release-notes-2025-04-14">v2025.04.14</a>
    <ul>
      <li>Added
        <ul>
          <li>Client Updates: Add new messaging in the browser to alert users when a new version of Zaprite is available</li>
          <li>API: Add a new disablePaymentNotifs option to our API Order creation fields</li>
        </ul>
      </li>
      <li>Changed
        <ul>
          <li>New Organizations: Add the Organization Name field to the New Organization form to make it easier to identify Organizations after being created</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:01:41 ESP Miner <a href="https://github.com/bitaxeorg/ESP-Miner/releases/tag/v2.6.1">v2.6.1</a>
    <ul>
      <li>New Features
        <ul>
          <li>Wi-Fi
            <ul>
              <li>SSID WiFi lookup</li>
              <li>Expose Wifi RSSI to API endpoint</li>
              <li>Init AxeOS AP mode</li>
            </ul>
          </li>
          <li>User Interface (UI)/Display
            <ul>
              <li>feat: add tooltip for pwm invert and flip screen by @WantClue (#709)</li>
              <li>Add sorting switch to swarm page for hostname and ip</li>
              <li>Show share reject reasons</li>
              <li>Add asic failure status screen</li>
            </ul>
          </li>
          <li>Mining/Pool/Stratum
            <ul>
              <li>Keep old pool config synchronized until reboot</li>
              <li>Add support for extranonce2_len&lt;4</li>
              <li>Improve pool fallback code</li>
              <li>Update confusing connect to pool log message</li>
              <li>Refactor Stratum code for Seamless Failover</li>
            </ul>
          </li>
          <li>Hardware/Power/Overclocking
            <ul>
              <li>Use url params to unlock overclock</li>
              <li>Overclock url params</li>
              <li>GammaTurbo support and HW abstraction</li>
              <li>Create TPS546 VCORE alerts</li>
              <li>Get combined current (power) for multi-phase TPS546</li>
            </ul>
          </li>
          <li>And more: API/Backend, Development/Build/Testing, Configuration/System, Documentation/Miscellaneous, and Fan Control.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:01:48 Krux <a href="https://x.com/odudex/status/1910020450555408558">Update</a>
    <ul>
      <li>Krux achieves first air-gapped PGP signature using secp256r1 NIST P256 curve, which requires a coordinator for metadata support.</li>
      <li>The developer chose secp256r1 for “size and efficiency for running on microcontrollers” after abandoning RSA due to processing-intensive steps.</li>
    </ul>
  </li>
  <li>01:02:29 Iris Wallet Desktop <a href="https://github.com/RGB-Tools/iris-wallet-desktop/releases/tag/0.2.0">v0.2.0</a>
    <ul>
      <li>RLN Node Compatibility: The app now checks if the RLN node version is compatible at startup</li>
      <li>Backup and Restore Improvements: Backup and restore now use a temporary folder, which gets deleted automatically after the process finishes</li>
      <li>Error Reporting: Add an error dialog to report issues when unlocking the node</li>
      <li>Data Directory Separation: Separate data storage paths for the application and the RLN node</li>
      <li>Logs Cleanup: Remove unnecessary QProcess logs of the RLN node to reduce logs</li>
      <li>GitHub Actions Update: Update GitHub Actions workflow to build the RLN node using a specific commit ID</li>
    </ul>
  </li>
  <li>01:02:46 Bitcoin Core Config Generator <a href="https://jlopp.github.io/bitcoin-core-config-generator/">Update</a>
    <ul>
      <li>Now compatible with Bitcoin Core v29.0</li>
    </ul>
  </li>
  <li>01:02:52 UTXOracle is <a href="https://x.com/stevesimple/status/1909982476895715802">Now live</a></li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>01:04:14 <a href="https://gist.github.com/RubenSomsen/a61a37d14182ccd78760e477c78133cd">SwiftSync</a>: Smarter synchronization with hints [<a href="https://groups.google.com/g/bitcoindev/c/FpSWUxItXQs">Discussion</a>]
    <ul>
      <li>SwiftSync provides near-stateless, fully parallelizable validation of the Bitcoin blockchain using hints about unspent outputs (&lt;100MB total), verifying validity through a hash aggregate that equals zero when successful.</li>
      <li>Unlike traditional Bitcoin Core validation, SwiftSync eliminates database lookups, reduces memory usage, and enables parallel processing.</li>
    </ul>
  </li>
  <li>01:04:43 PrivatePond: A Bitcoin Payjoin application to optimize transaction rails for services, such as deposits, withdrawals, and automated wallet rebalancing [<a href="https://github.com/Kukks/PrivatePond">Github</a>]
    <ul>
      <li>Private Pond optimizes Bitcoin transactions by queuing withdrawals and processing them at fixed intervals, enabling batching while user deposits can fund withdrawals through Meta Payjoin, reducing hot wallet liquidity requirements.</li>
    </ul>
  </li>
  <li>01:05:00 <a href="https://m0wer.github.io/joinmarket-fidelity-bond-simulator/">JoinMarket Fidelity Bond Simulator</a>: A tool for JoinMarket makers to evaluate their competitive position in the market based on fidelity bonds [<a href="https://github.com/m0wer/joinmarket-fidelity-bond-simulator">Github</a>]
    <ul>
      <li>Features include simulating maker selection probability using real orderbook data, calculating bond values based on amount and lock time, and comparing different bond strategies.</li>
    </ul>
  </li>
  <li>01:05:52 DahLIAS: Discrete Logarithm-Based Interactive Aggregate Signatures [<a href="https://eprint.iacr.org/2025/692.pdf">Research paper</a>]
    <ul>
      <li>DahLIAS allows multiple signers to produce a single constant-size signature that verifies all messages simultaneously.</li>
      <li>The scheme features a two-round signing protocol with possible preprocessing and verification that is asymptotically twice as fast as batch verification of individual Schnorr signatures.</li>
      <li>DahLIAS supports key tweaking for Bitcoin applications and is proven secure under the algebraic one-more discrete logarithm assumption in the random oracle model.</li>
    </ul>
  </li>
  <li>01:06:00 <a href="https://scrow.exchange/">Satoshi Escrow (scrow)</a>: A Bitcoin non-custodial peer-to-peer dispute resolution using only Nostr keys [<a href="https://github.com/storopoli/scrow">Github</a>]
    <ul>
      <li>Satoshi Escrow offers Bitcoin transactions through 2-of-2 multisig addresses where buyers and sellers lock BTC using only their Nostr keys (nsec/npub)</li>
      <li>The system utilizes Pay-to-Taproot multisig technology and can be used offline on air-gapped computers</li>
    </ul>
  </li>
  <li>01:06:12 Taplocks: Verifiable but Unspendable Tapleafs via Hashlock Mechanism
    <ul>
      <li>A recent proposal introduces Taplocks, a method to enforce unspendability of Taproot script paths containing OP_SUCCESS before opcode activation. The technique prevents premature spending while allowing smooth migration to new opcodes (e.g., CAT, CTV, or OP_WASM).</li>
      <li>Key Mechanism:
        <ul>
          <li>Problem: Post-Taproot, OP_SUCCESS makes any script containing it immediately spendable, even before intended opcode activation.</li>
          <li>Solution: A hashlock-like construct is applied over the script (not within it) using SHA-256 length extension.</li>
        </ul>
      </li>
      <li>The oracle pre-images a secret, which must be revealed to construct a valid spending script.</li>
      <li>A ZKP (e.g., STARK) proves the script header contains only a data push and padding, ensuring no hidden malicious logic.</li>
      <li>Benefits:
        <ul>
          <li>Eliminates manual UTXO migration post-activation.</li>
          <li>Maintains security under the same trust assumptions as signing oracles.</li>
        </ul>
      </li>
      <li><a href="https://x.com/rot13maxi/status/1909252898170564621">Rijndael Explainer</a></li>
      <li>Full technical details available on <a href="https://github.com/taproot-wizards/taplocks/blob/main/README.md">Github</a>.</li>
    </ul>
  </li>
  <li><a href="https://censorshipresistant.com/">Censorship Resistance Threshold</a>: A calculator estimating how many guerrilla miners are required to secure Bitcoin against censorship
    <ul>
      <li>The tool factors in existing guerrilla hashrate and calculates additional miners needed to reach the critical 51% threshold for censorship resistance.</li>
    </ul>
  </li>
  <li>01:15:48 <a href="https://bitcoin.softforks.org/">bitcoin.softforks.org</a>: Easily compare various features, facts, and figures for the many soft fork proposals under consideration [<a href="https://github.com/john-light/bitcoin.softforks.org">Github</a>]
    <ul>
      <li>The website serves as a research database educating the Bitcoin community about active soft fork proposals and helping evaluate them comparatively.</li>
    </ul>
  </li>
  <li>01:15:52 CTV and CSFS Enabled Bitcoin Node: Mutiny Signet Docker Setup [<a href="https://github.com/arshbot/ctv-csfs-signet-docker">Github</a>]
    <ul>
      <li>“A Docker-based Bitcoin node configured with CheckTemplateVerify (CTV) and CheckSigFromStack (CSFS) capabilities enabled.”</li>
      <li>“This node runs on a special signet (MutinyNet) that allows developers to test and build applications using these proposed Bitcoin protocol upgrades.”</li>
    </ul>
  </li>
  <li>01:16:03 UTXOscope: A text-only BTC price heatmap built only from UTXOs, inspired by UTXOracle [<a href="https://github.com/Drew72-ita/UTXOscope">Github</a>]
    <ul>
      <li>UTXOscope analyzes newly created UTXOs to visualize Bitcoin price trends without relying on external exchanges or price feeds.</li>
    </ul>
  </li>
  <li>01:16:13 <a href="https://bitcoin.block.xyz/">Block Bitcoin Treasury</a>: A visualization of Block’s Bitcoin treasury holdings [<a href="https://github.com/block/bitcoin-treasury">Github</a>]
    <ul>
      <li>Block <a href="https://block.xyz/inside/block-releases-open-source-tools-for-bitcoin-treasury-management">launches</a> a bitcoin corporate holdings dashboard with BTC-to-USD real-time price quote API on GitHub, enabling companies to track bitcoin treasury assets.</li>
    </ul>
  </li>
  <li>01:16:47 <a href="https://www.waye.dev/">Waye</a>: A website to discover tools, programs, and support systems designed to help open-source developers thrive. Waye empowers builders to stay clear-headed, motivated, and aligned for long-term impact [<a href="https://github.com/waye-dev/website">Github</a>]
    <ul>
      <li>The OS Waye Foundation operates as a 501(c)(3) nonprofit providing tools, research, and frameworks to support open-source developers in the decentralized ecosystem.</li>
    </ul>
  </li>
  <li>01:17:08 <a href="https://sovereigncraft.com/">Sovereign Craft</a>: A bitcoin-based Minecraft server offering an educational gaming experience
    <ul>
      <li>Sovereign Craft is a Minecraft server integrating Bitcoin as in-game currency that functions in the real world through custom wallets powered by LNBits</li>
    </ul>
  </li>
</ul>

<h3 id="not-a-vulnerability-disclosure">(Not) a Vulnerability Disclosure</h3>
<ul>
  <li>01:17:17 Pay-to-Anchor outputs now exploited for blockchain spam [<a href="https://x.com/mononautical/status/1911572337436336341">Twitter post</a>]
    <ul>
      <li>Pay-to-Anchor outputs in Bitcoin’s Lightning Network, designed to allow fee adjustments for channel closures, are being used to spam the blockchain with low-value transactions.</li>
    </ul>
  </li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>01:18:10 CVE-2025-27840: New ESP32 vulnerability threatens Bitcoin security? [<a href="https://securityonline.info/cve-2025-27840-how-a-tiny-esp32-chip-could-crack-open-bitcoin-wallets-worldwide/">Daily CyberSecurity</a>]
    <ul>
      <li>Researchers at Crypto Deep Tech discover a cryptographic vulnerability in ESP32 microcontrollers that could put of IoT devices and Bitcoin-related hardware at risk.</li>
      <li>Six major flaws are identified, including invalid private key acceptance, weak random number generation, and signature forgery capabilities, with researchers demonstrating a successful attack recovering a private key from a wallet.</li>
    </ul>
  </li>
  <li>01:20:49 Breaking ECDSA with two affinely related nonces [<a href="https://eprint.iacr.org/2025/705">Research paper</a>]
    <ul>
      <li>Researchers demonstrate a new vulnerability in ECDSA where private keys can be compromised when two nonces have an affine relationship, even if they are distinct and used for the same message.</li>
      <li>The attack method requires only two signatures and uses algebraic techniques without needing lattice reduction or brute-force searches when the relationship between nonces is known.</li>
      <li>Additional resource: Why Schnorr signatures should be preferred over ECDSA [<a href="https://alinush.github.io/schnorr-vs-ecdsa">Schnorr vs. ECDSA</a>]</li>
    </ul>
  </li>
  <li>01:21:02 Chinese SHOWJI phones contain pre-installed malware targeting cryptocurrency users [<a href="https://thehackernews.com/2025/04/chinese-android-phones-shipped-with.html">The Hacker News</a>]
    <ul>
      <li>Cheap Chinese Android phones, particularly SHOWJI brand models, ship with pre-installed trojanized apps disguised as WhatsApp and Telegram that swap cryptocurrency wallet addresses during conversations.</li>
      <li>The malware campaign has stolen approximately $1.6 million in cryptocurrency over two years, with attackers using about 30 domains and 60 command-and-control servers to manage the operation.</li>
    </ul>
  </li>
  <li>01:21:44 X users discover hidden data access beyond official API [<a href="https://securityexpress.info/hidden-twitter-data-users-uncover-access-to-dms-and-more/">Security Express</a>]
    <ul>
      <li>Users access hidden X data through browser developer tools by filtering network requests for “UserByScreenName” responses, revealing comprehensive datasets for public accounts.</li>
      <li>The technique exposes sensitive metadata including NSFW flags, regional restrictions, and “protected” account status, plus access to direct messages including from blocked or deleted users.</li>
    </ul>
  </li>
</ul>

<h3 id="audience-questions">Audience Questions</h3>
<ul>
  <li>Thanks to everyone who sent in questions. Remember to send yours to questions@bitcoin.review.
    <ul>
      <li>01:23:46 “How do we use open time stamps for transfer of assets using two party integrity between holders?” -@AVERAGE_GARY</li>
      <li>01:24:50 “Does Cove have testnet4?” -@AVERAGE_GARY</li>
      <li>01:25:15 “Can you explain like I’m 5 what opcodes are, how they are used on the network, and the level of optionality that applies to them?” -@anon</li>
      <li>01:26:49 “Please discuss this idea: Block-based TOTP for bitcoin wallet passphrase validation [<a href="https://njump.me/nevent1qvzqqqqqqypzpyrraa4eymelf5xndvxcwxvvs8p7qxluxy0zvrk9rxmlat73axsfqyt8wumn8ghj7etyv4hzumn0wd68ytnvv9hxgtcprpmhxue69uhkv6tvw3jhytnwdaehgu3wwa5kuef0qqsf3fx3wfzv58t87e6yjcp8hseh0t5crgwvaqtkc3zd5cwr6fctdnscncwqy">Note</a>]” -@anon</li>
    </ul>
  </li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>01:28:48 Tor Browser <a href="https://blog.torproject.org/new-release-tor-browser-145/">v14.5</a>
    <ul>
      <li>Connection Assist now on Android</li>
      <li>Add Belarusian, Bulgarian &amp; Portuguese</li>
      <li>Improve log readability</li>
      <li>Better performance when quitting the app</li>
    </ul>
  </li>
  <li>01:28:51 TailsOS
    <ul>
      <li><a href="https://tails.net/news/version_6.14.2/">v6.14.2</a>
        <ul>
          <li>Update Linux to 6.1.133, which fixes multiple security vulnerabilities that may lead to a privilege escalation or information leaks.</li>
          <li>Update perl to 5.36.0-7+deb12u2, which fixes a heap-based buffer overflow vulnerability, which may result in denial of service, or potentially the execution of arbitrary code.</li>
        </ul>
      </li>
      <li><a href="https://tails.net/news/version_6.14.1/">v6.14.1</a>
        <ul>
          <li>Improve confinement technology used to protect files from possible security vulnerabilities in Tor Browser.
            <ul>
              <li>With Tails 6.14.1, you can safely access any folder in your Home folder or Persistent Storage from Tor Browser.</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:28:53 NymVPN <a href="https://nym.com/blog/nymvpn-v2025.6">v2025.6</a> - Rhubarb release
    <ul>
      <li>Connection
        <ul>
          <li>Connection times have been reduced by registering Wireguard keys entry and exit gateways in parallel to improve NymVPN connection times</li>
          <li>An always-on kill switch toggle has been added to settings so you can be sure unprotected traffic is blocked</li>
          <li>NymVPN for Linux, macOS and Windows will launch without network connectivity to improve connection time by using available networks and caching the network environment between app run times</li>
        </ul>
      </li>
      <li>Improve in-app assistance</li>
      <li>Improvements to existing features
        <ul>
          <li>Linux and Windows: Auto-start for NymVPN and nym-vpnd at device startup</li>
          <li>Mixnet mode enhancements: New changes to ensure privacy and improve performance in Anonymous Mode (e.g., with fixes to Poisson delays, backpressure, SURBs)</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:28:55 MapleAI [<a href="https://blog.trymaple.ai/maple-ai-desktop-apps-now-available-for-macos-and-linux/">Update</a>]
    <ul>
      <li>Maple AI chat product is now available as native apps for macOS and Linux users, offering end-to-end encryption, secure enclaves, and cross-device syncing.</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li>01:28:59 Git With Me: Peer-to-peer, encrypted, ephemeral Git collaboration (git daemon with encryption) [<a href="https://git.sr.ht/~meejah/git-withme">Code repository</a>]
    <ul>
      <li>Git withme provides a way for a single host to invite numerous peers with short, one-time secure codes. The peers connect directly via Dilated Magic Wormhole channels, allowing collaborators to git clone git://localhost/<repo-name>.</repo-name></li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>01:29:17 Misty Breez: A hybrid Lightning and Liquid network wallet built with the Nodeless Breez SDK [<a href="https://github.com/breez/misty-breez">Github</a>]
    <ul>
      <li>The wallet supports multiple payment options including BOLT 11/12 invoices, LNURL-Pay, Lightning Addresses, BTC addresses, and offline payments via mobile notifications.</li>
    </ul>
  </li>
  <li>01:29:25 <a href="https://sovereigntools.com/">Sovereign Tools</a>: A comprehensive Bitcoin and Lightning Network wallet comparison tool built with React, Express, and TypeScript [<a href="https://github.com/gustavojfe/sovereigntools">Github</a>]
    <ul>
      <li>The platform currently evaluates 18 Lightning Network wallets across 43 features including platform availability, invoice compatibility, payment routing, and privacy features.</li>
    </ul>
  </li>
  <li>01:29:28 <a href="https://silkroadonlightning.com/">Silk Road on Lightning</a>: A marketplace for legal items and services using Bitcoin on the Lightning Network
    <ul>
      <li>The platform requires no KYC for registration, withdrawals, or purchases.</li>
      <li>Sellers receive all payments in Bitcoin through the Lightning Network, even when buyers pay in USD. The platform automatically converts USD payments to Bitcoin.</li>
    </ul>
  </li>
  <li>01:29:37 <a href="https://decode.8333.space/">Cashu Token Decoder</a>: A web tool for parsing and editing Cashu tokens</li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>CLN <a href="https://github.com/ElementsProject/lightning/releases/tag/v25.02.1">v25.02.1</a> - Onion Packet Filler Accreditation II
    <ul>
      <li>Several bug-fixes were addressed in this release, including:
        <ul>
          <li>wallet: we could miss our own returned outputs on mutual closes if our peer didn’t support <code class="language-plaintext highlighter-rouge">option_shutdown_anysegwit</code></li>
          <li><code class="language-plaintext highlighter-rouge">lightningd</code> now properly handles duplicate HTLCs on closing and no longer spams the log</li>
          <li>Unilateral closes now calculate fees with the correct HTLC timeout and no longer pay egregious fees</li>
          <li><code class="language-plaintext highlighter-rouge">topology</code> crash on invoice creation if a peer had a really high feerate</li>
          <li><code class="language-plaintext highlighter-rouge">make</code> cleans up the old clnrest directory prior to building and installing the new rust version of the plugin</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>LNbits <a href="https://github.com/lnbits/lnbits/releases/tag/v1.0.0">v1.0.0</a> - Alan Bits
    <ul>
      <li>Key Highlights
        <ul>
          <li>LNbits now at v1.0.0: the software is stable, hardened, and production-ready</li>
          <li>Vue 3 migration: a complete frontend overhaul for performance and long-term maintainability</li>
          <li>WebSocket payments: faster and more efficient, replacing older SSE and long-polling methods</li>
          <li>New lnbits.sh install script: simplifies setup and local deployment</li>
          <li>Access Control Lists (ACL): token-based permissions for powerful role and scope control</li>
          <li>Admin tools:
            <ul>
              <li>Admin payments overview</li>
              <li>Toggle outgoing payments</li>
              <li>View payments from deleted wallets</li>
            </ul>
          </li>
          <li>NWC (Nostr Wallet Connect) support</li>
          <li>Login with Nostr or OAuth: expanding integration and authentication options</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:29:48 Zeus
    <ul>
      <li><a href="https://github.com/ZeusLN/zeus/releases/tag/v0.10.1">v0.10.1</a>
        <ul>
          <li>NameDesc/bLIP-11 support: add receiver name to invoices</li>
          <li>Locales: Hindi</li>
          <li>UI: Add dynamic background/text colors to Android NFC modal</li>
        </ul>
      </li>
      <li><a href="https://x.com/ZeusLN/status/1907084936856662061">v0.11.0</a> - Rolling out to community sponsors and contributors
        <ul>
          <li><a href="https://github.com/ZeusLN/zeus/pull/2946">PR #2946</a> introduces support for Cashu
            <ul>
              <li>Add support for an optional Cashu ecash wallet for Embedded LND users</li>
              <li>Add support for all backends to sweep Cashu tokens to self-custody</li>
              <li>New Cashu Lightning addresses added alongside our existing Zaplocker address (switch between as you wish)</li>
              <li>New ZEUS Pay+ service for premium features, incl. custom handles, web POS, early access, LSP discounts</li>
              <li>Modal messages to prompt users to upgrade to self-custody</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:29:49 LDK <a href="https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.1.2">v0.1.2</a> - “Foolishly Edgy Cases”
    <ul>
      <li>API Updates
        <ul>
          <li><code class="language-plaintext highlighter-rouge">lightning-invoice</code> is now re-exported as <code class="language-plaintext highlighter-rouge">lightning::bolt11_invoice</code></li>
        </ul>
      </li>
      <li>Performance Improvements
        <ul>
          <li><code class="language-plaintext highlighter-rouge">rapid-gossip-sync</code> graph parsing is substantially faster, resolving a regression in 0.1</li>
          <li><code class="language-plaintext highlighter-rouge">NetworkGraph</code> loading is now substantially faster and does fewer allocations, resulting in a 20% further improvement in <code class="language-plaintext highlighter-rouge">rapid-gossip-sync</code> loading when initializing from scratch</li>
          <li><code class="language-plaintext highlighter-rouge">ChannelMonitors</code> for closed channels are no longer always re-persisted immediately after startup, reducing on-startup I/O burden</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>LNDg <a href="https://github.com/cryptosharks131/lndg/releases/tag/v1.10.0">v1.10.0</a>
    <ul>
      <li>Improve performance with LND using an updated forwards query</li>
      <li>AutoFees now uses aggregated pubkey metrics for those that have multiple channels with the same peer</li>
      <li>New metrics page: Unprofitable/Stuck Channels</li>
      <li>Automates inbound fee updates when using AutoFees (enable with AF-InboundFees)</li>
      <li>Batch Open Warnings</li>
      <li>P&amp;L Chart updated with on-chain costs</li>
      <li>Advanced settings added for those who would like their channel db size to be read remotely (default remains local)</li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>Js-SDK <a href="https://github.com/getAlby/js-sdk/releases/tag/v5.0.0">v5.0.0</a>
        <ul>
          <li>In this release, we introduce a new LN class which makes it even easier to get quickly started sending and receiving bitcoin payments. We also add a NWCWalletService class which allows wallet developers to add NWC support without having to implement the low-level NWC code of creating and signing events, relay connection, etc.</li>
          <li>Features
            <ul>
              <li>feat: add NWC Wallet Service</li>
              <li>feat: add simpler LNClient class</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Hub <a href="https://github.com/getAlby/hub/releases/tag/v1.16.0">v1.16.0</a> - Rop Gonggrijp
        <ul>
          <li>Features
            <ul>
              <li>Alby pro subscriptions</li>
              <li>Add bitrefill to app store</li>
              <li>New sidebar</li>
              <li>App store submission: ZEUS</li>
              <li>Add lightning messageboard to app store</li>
              <li>Improve settings pages UI</li>
              <li>Add healthcheck alert</li>
              <li>Add update button to what’s new widget</li>
              <li>Show channel duration on open channel pages</li>
              <li>Add funding txid and amount to LDK channel closed event</li>
              <li>Show date on lightning messageboard messages</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Go <a href="https://github.com/getAlby/go/releases/tag/v1.12.0">v1.12.0</a>
        <ul>
          <li>Wallet switcher to swap wallets during payments, withdrawals, and connections</li>
          <li>Enhance number formatting for locales that use decimal commas</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Ark <a href="https://github.com/ark-network/ark/releases/tag/v0.5.4">v0.5.4</a> - New SubscribeForAddress API, Fixes and Optmiziations
    <ul>
      <li>SubmitRedeemTx: remove useless extra PSBT decode</li>
      <li>Add SubscribeForAddress explorer API</li>
      <li>hotfix: TapscriptsVtxoScript.Decode returns an error in case array is empty</li>
      <li>hotfix: GetTaprootTree use bytes.Contains instead of bytes.Equal</li>
      <li>hotfix: CLTV locktime decoding</li>
      <li>[Server] Move db write ops to background</li>
    </ul>
  </li>
  <li>Ark Labs HQ wallet-sdk
    <ul>
      <li><a href="https://github.com/ArkLabsHQ/wallet-sdk/releases/tag/v0.0.12">v0.0.12</a>
        <ul>
          <li><code class="language-plaintext highlighter-rouge">DefaultVtxo.Script</code> add default exit timelock</li>
        </ul>
      </li>
      <li><a href="https://github.com/ArkLabsHQ/wallet-sdk/releases/tag/v0.0.11">v0.0.11</a>
        <ul>
          <li><code class="language-plaintext highlighter-rouge">VtxoScript</code> abstraction</li>
          <li>Mark as side-effect-free to allow Tree Shaking</li>
          <li>Add <code class="language-plaintext highlighter-rouge">ArkNote</code> class</li>
          <li>Reveal tapscripts in virtual transactions</li>
          <li>SubscribeForAddress RPC + service worker database</li>
          <li>feat: optimize ESM and CommonJS dual package support</li>
          <li>ServiceWorker: support concurrent calls</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Fedimint
    <ul>
      <li><a href="https://github.com/fedimint/fedimint/releases/tag/v0.7.0">v0.7.0</a> - Going Full-Stack
        <ul>
          <li>Highlights
            <ul>
              <li>Initial recurring payment support through LNURL (to be extended to BOLT12)</li>
              <li>Integrated guardian and setup UI to simplify deployment</li>
              <li>Beta support for running <code class="language-plaintext highlighter-rouge">fedimintd</code> behind firewalls and NAT routers without opening ports and registering domains</li>
              <li>Lower on-chain fees through better estimation</li>
            </ul>
          </li>
        </ul>
      </li>
      <li><a href="https://github.com/fedimint/fedimint/releases/tag/v0.6.2">v0.6.2</a>
        <ul>
          <li>Allow overwriting blockchain API supplied to clients</li>
          <li>Add parse_invite_code function in fedimint-client-wasm</li>
          <li>Expose additional backup metrics via prometheus</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Breez SDK <a href="https://github.com/breez/breez-sdk-liquid/releases/tag/0.8.0">v0.8.0</a> - Nodeless
    <ul>
      <li>Add WASM support (Node.js and Web)</li>
      <li>Lower the minimum payment amount for sending</li>
      <li>Enable fee payments in USDT</li>
    </ul>
  </li>
  <li>BlitzWallet <a href="https://github.com/BlitzWallet/BlitzWallet/releases/tag/Android-v0.4.3-beta">v0.4.3-beta</a>
    <ul>
      <li>Ecash Improvements
        <ul>
          <li>Increased eCash Limits: Users can now customize their maximum receive and balance amounts for eCash transactions. Previously, eCash payments were restricted below the minimum Boltz swap amount of 1,000 sats. Now, users can define:</li>
          <li>Expanded Manual Swap Options: The manual swap page now supports:
            <ul>
              <li>Liquid to eCash transfers</li>
              <li>eCash to Lightning transfers</li>
              <li>eCash to Liquid transfers</li>
            </ul>
          </li>
          <li>Store Payments with eCash: Users can now pay for items in supported stores using eCash.</li>
          <li>Wallet Balance Visibility: The remove wallet function now displays the entire eCash balance when enabled.</li>
        </ul>
      </li>
      <li>Payment Experience
        <ul>
          <li>SMS Payment Update Messages: Users receive SMS updates on payment progress, improving transparency of background progress.</li>
          <li>Direct Tip Payments: Employees who use an LNURL or Blitz contact name can now be sent tips directly from the app.</li>
          <li>Improved App Access with LN Issues: If the Lightning Network (LN) connection fails and LN is enabled, users can still access the app instead of being locked out.</li>
        </ul>
      </li>
      <li>Performance Optimizations
        <ul>
          <li>Optimized Transaction Sorting: Transaction processing has been improved for better app performance.</li>
          <li>Bulk Requests for Contact Address Updates: Instead of making multiple single requests, the app now processes contact address changes in bulk, reducing network usage by 10x.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>CDK <a href="https://github.com/cashubtc/cdk/releases/tag/v0.9.0">v0.9.0</a>
    <ul>
      <li>Features
        <ul>
          <li>Added
            <ul>
              <li>Amountless invoices NUT PR</li>
              <li>create_time, paid_time to mint and melt quotes PR</li>
              <li>cdk-mint-rpc: Added get mint and melt quotes ttl PR</li>
            </ul>
          </li>
          <li>Changed
            <ul>
              <li>cashu: Move wallet mod to cdk-common</li>
              <li>Export Mint DB Traits PR</li>
              <li>Move Mint and Melt quote to cdk commit from cashu PR</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:31:40 Minibits Wallet <a href="https://github.com/minibits-cash/minibits_wallet/releases/tag/v0.2.2-beta.5">v0.2.2-beta.5</a>
    <ul>
      <li>This is a new native Minibits release with huge amount of changes needed to adjust the project to the planned release on iOS devices. However, it still comes with useful features and fixes for Android as well, notably:
        <ul>
          <li>New feature to lock ecash to a receiver’s pubkey</li>
          <li>Faster confirmations of ecash minting and payments thanks to websockets</li>
          <li>Major upgrade of all libraries, switch to React native’s new architecture</li>
          <li>Planned iOS release-related platform checks and changes for android</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:31:42 Hydrus <a href="https://github.com/aftermath2/hydrus/releases/tag/v0.2.0">v0.2.0</a>
    <ul>
      <li>Channels routing policies adjustments= Channels routing policies are adjusted based on the channel state (capacity, local balance) and the amount of satoshis forwarded in the last activity period (agent.intervals.routing_policies).</li>
      <li>CLI commands: Agent instructions and scores queries now have their own command to execute them separately. To run all agent tasks (open/close/updates) use the agent run command.</li>
      <li>Built-in tasks scheduling: Choose how often to open/close channels or update routing policies without having to use systemd timers or cron jobs.</li>
      <li>New open heuristic: This release introduces a new open channel heuristic called channels.block_height.</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li>01:31:44 <a href="https://njump.me/naddr1qq4kzar0d45kxttnd9nkuct5w4ex2ttnwashqueddamx2u3ddehhxarj956z7vfs9uerqv34qgsrkwjz6dx0pg2q95vd2dkf62kzavwxqxdfz5a72uyyeqt96xfwxfgrqsqqqa28w7fkhn">Atomic Signature Swaps over Nostr</a>: A protocol for exchanging Schnorr signatures using Nostr events
    <ul>
      <li>The protocol supports applications like paid Nostr events, payment receipts, contract signing, asset exchanges, and credential access tokens through specific event kinds (455, 456, 457, and 30455).</li>
      <li>The cryptographic mechanism allows two parties to swap signatures by having one party provide a public nonce and the other provide an adaptor signature, with safeguards needed for Taproot UTXOs and Cashu tokens.</li>
    </ul>
  </li>
  <li>01:31:51 Lantern: A layered annotations noting tool and emphasizer of readables on nostr [<a href="https://git.fiatjaf.com/lantern">Code repository</a>
    <ul>
      <li>“Lantern is a fork of Hypothesis that publishes page notes, annotations and highlights to Nostr.”</li>
      <li>“URLs are normalized and we follow NIP-84 for Highlights and NIP-22 for replies, annotations and page notes. NIP-65 relay lists are used for publishing the events in the common case and NIP-51 relay sets for custom relay groups of annotations.”</li>
    </ul>
  </li>
  <li>01:31:59 Promenade: Provider of multisig for events on nostr and destroyer of encryption [<a href="https://git.fiatjaf.com/promenade">Github</a>]</li>
  <li><a href="https://loudr.me/">Loudr</a>: Reference client implementation that uses Atomic Signature Swaps over Nostr for sponsoring the publication of Nostr events [<a href="https://github.com/vstabile/loudr">Github</a>]
    <ul>
      <li>“A reference client that implements the Atomic Signature Swap NIP for sponsoring the publication of Nostr events in exchange for Cashu payments.”</li>
    </ul>
  </li>
  <li>01:32:09 Noauth-enclaved: A safe Nostr nip46 signer to be deployed on AWS Nitro Enclave [<a href="https://github.com/nostrband/noauth-enclaved">Github</a>]
    <ul>
      <li>Noauth-enclaved is a NIP46 signer deployed in AWS Nitro Enclaves, providing isolated compute environments where clients can verify code integrity cryptographically.</li>
      <li>Users can verify instance attestations containing code hashes and builder/launcher identities, manage app permissions through encrypted Nostr events, and communicate with the service using end-to-end encryption via Nostr relays.</li>
    </ul>
  </li>
  <li>01:32:27 <a href="https://gm-nostr.vercel.app/">GM Swap</a>: Atomic exchange of GM notes using Schnorr adaptor signatures [<a href="https://github.com/vstabile/gm-swap">Github</a>]
    <ul>
      <li>“A proof of concept implementation of the Atomic Signature Swaps NIP. This project enables users to swap GM notes, ensuring that both parties’ signatures are exchanged simultaneously or not at all.”</li>
    </ul>
  </li>
  <li><a href="https://tajava2006.github.io/sync-nostr-relay/">Nostr Event Synchronizer</a>: Syncs past events to your designated write and read relays based on NIP-65
    <ul>
      <li>The service synchronizes nostr events between relays using the outbox model, retrieving past events chronologically and republishing them only to relays where they’re missing.</li>
    </ul>
  </li>
  <li>Aegis: A simple and cross-platform Nostr signer that supports multiple connection methods [<a href="https://github.com/ZharlieW/Aegis">Github</a>]</li>
  <li>Morning Glory: A paid blossom server that only stores blobs for a day… just like the flower [<a href="https://github.com/hzrd149/morning-glory">Github</a>]</li>
  <li>Nostr4j: A high-performance Nostr library for the JVM, crosscompilable to javascript [<a href="https://github.com/NostrGameEngine/nostr4j">Github</a>]</li>
  <li>Flotilla-Budabit: A fork of Flotilla which aims to provide a first class, git-centric community experience for developers [<a href="https://github.com/Pleb5/flotilla-budabit">Github</a>]
    <ul>
      <li>The platform offers eleven core features including repository browsing, branch views, issues tracking, patch threads, and real-time git chat for enhanced collaboration.</li>
    </ul>
  </li>
  <li>Zark: A tool to send sats to npub using Bark [<a href="https://gitlab.com/1440000bytes/zark">Gitlab</a>]</li>
  <li><a href="https://ngengine.org/">Nostr Game Engine</a>: A game engine and framework for building games and applications integrated with the Nostr ecosystem [<a href="https://github.com/NostrGameEngine">Github</a>]
    <ul>
      <li>NGE is an open-source, royalty-free game engine designed for building games and applications integrated with the Nostr ecosystem</li>
    </ul>
  </li>
  <li><a href="https://bitcoin-calendar.org/">Bitcoin Calendar Bot</a>: Archiving and relaying every Bitcoin milestone [<a href="https://github.com/Bitcoin-Calendar/calendar-bot">Github</a>]
    <ul>
      <li>Bitcoin Calendar Bot is an open source Go-based application that tracks and posts historical Bitcoin events daily to Nostr.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>rust-nostr <a href="https://github.com/rust-nostr/nostr/releases/tag/v0.41.0">v0.41.0</a>
    <ul>
      <li>Breaking changes
        <ul>
          <li>nostr: add optional relay URL arg to <code class="language-plaintext highlighter-rouge">Tag::coordinate</code></li>
          <li>nostr: update <code class="language-plaintext highlighter-rouge">TagStandard::Label</code> and <code class="language-plaintext highlighter-rouge">EventBuilder::label</code></li>
          <li>nostr: update <code class="language-plaintext highlighter-rouge">custom</code> field type in <code class="language-plaintext highlighter-rouge">Metadata</code> struct</li>
          <li>pool: remove <code class="language-plaintext highlighter-rouge">Error::Failed</code> variant</li>
          <li>pool: returns <code class="language-plaintext highlighter-rouge">Output</code> instead of an error if the message/event sending fails for all relays</li>
          <li>pool: add <code class="language-plaintext highlighter-rouge">reason</code> field to <code class="language-plaintext highlighter-rouge">AdmitStatus::Rejected</code> variant</li>
        </ul>
      </li>
      <li>Changed
        <ul>
          <li>lmdb: enable POSIX semaphores for macOS and iOS targets</li>
          <li>ndb: bump nostrdb to 0.6.1</li>
          <li>pool: extend unit tests</li>
          <li>pool: better handling of <code class="language-plaintext highlighter-rouge">CLOSED</code> message for REQs</li>
          <li>relay-builder: send <code class="language-plaintext highlighter-rouge">CLOSED</code> if all possible events have been served</li>
        </ul>
      </li>
      <li>Added
        <ul>
          <li>nostr: add NIP-C0 (Code Snippets) support</li>
          <li>nostr: add <code class="language-plaintext highlighter-rouge">TagKind::u</code> constructor</li>
          <li>nostr: derive <code class="language-plaintext highlighter-rouge">Copy</code> for <code class="language-plaintext highlighter-rouge">HttpMethod</code></li>
          <li>nostr: add <code class="language-plaintext highlighter-rouge">nip98::verify_auth_header</code></li>
          <li>nostr: add <code class="language-plaintext highlighter-rouge">push</code>, <code class="language-plaintext highlighter-rouge">pop</code>, <code class="language-plaintext highlighter-rouge">insert</code> and <code class="language-plaintext highlighter-rouge">extend</code> methods to the <code class="language-plaintext highlighter-rouge">Tag</code> struct</li>
          <li>nostr: add <code class="language-plaintext highlighter-rouge">nip47::Notification</code></li>
          <li>nostr: add <code class="language-plaintext highlighter-rouge">MachineReadablePrefix::as_str</code> method</li>
          <li>nostr: derive <code class="language-plaintext highlighter-rouge">Hash</code> for <code class="language-plaintext highlighter-rouge">EventBuilder</code> and <code class="language-plaintext highlighter-rouge">Metadata</code></li>
          <li>pool: add <code class="language-plaintext highlighter-rouge">Relay::ban</code> method</li>
          <li>pool: add <code class="language-plaintext highlighter-rouge">AdmitPolicy::admit_connection</code> method</li>
          <li>keyring: add <code class="language-plaintext highlighter-rouge">NostrKeyring</code></li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Primal iOS <a href="https://njump.me/nevent1qqsz6fjwdcrhqpvrtgrvy8p4uphyc5sr6fs0uc0mul3asg4hv7u0gaqzyqfr47h86xrm5dkkmhxe0kl54nze4ml7yslhsfvjl78jtm2hnhesvqcyqqqqqqg83k046">v2.1.49</a>
    <ul>
      <li>Support for animated GIF uploads</li>
      <li>Resolve issues with zap.stream URLs</li>
      <li>Improve deep linking to threads</li>
      <li>Fix rendering of mentioned events with unknown kinds</li>
    </ul>
  </li>
  <li>Nostur <a href="https://github.com/nostur-com/nostur-ios-public/releases/tag/1.20.0">v1.20.0</a>
    <ul>
      <li>Add support for Lists (kind 30000)</li>
      <li>Show preview of feed from list</li>
      <li>Turn list into feed tab with 1 tap</li>
      <li>Subscribe toggle to keep updating the feed from original maintainer, or keep list as-is</li>
      <li>Share List: Toggle to make list public</li>
      <li>Lists tab on Profile view</li>
      <li>‘Add all contacts to feed/list’ post menu item</li>
      <li>Discover tab now shows Lists shared by your follows</li>
      <li>Enable manual ordering of custom feeds/tabs</li>
      <li>New Top Zapped feed</li>
      <li>New onboarding screens</li>
      <li>New default color scheme/adjusted backgrounds</li>
      <li>Lower delays and timeouts for fetching things</li>
      <li>Improved hellthread handling</li>
      <li>Support for comment on highlights (kind 9802)</li>
      <li>Toggle to post to restricted/locked relay when starting post from single relay feed</li>
      <li>Support relay auth for bunker/remote signer accounts</li>
      <li>And more</li>
    </ul>
  </li>
  <li>Keychat App
    <ul>
      <li><a href="https://github.com/keychat-io/keychat-app/releases/tag/1.31.9%2B6364">v1.31.9</a> - Multi browser tabs
        <ul>
          <li>Multi browser tabs for desktop</li>
          <li>Add pull_refresh to room list</li>
          <li>Update style for browser home page</li>
        </ul>
      </li>
      <li><a href="https://github.com/keychat-io/keychat-app/releases/tag/1.31.2%2B6356">v1.31.2</a> - MLS Group &amp;&amp; Macos dmg
        <ul>
          <li>Support desktop layout: Add DMG file for Mac OS</li>
          <li>Desktop: Support pasting images and files into input fields</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nostr PHP <a href="https://github.com/nostrver-se/nostr-php/releases/tag/1.7.0">v1.7.0</a>
    <ul>
      <li>Add support for NIP-19 encoding and decoding bech32-encoded entities with identifiers and metadata.</li>
      <li>Features
        <ul>
          <li>Implement NIP-19</li>
          <li>Notes on naddr decoder (NIP-19)</li>
          <li>Support all encodings, especially naddr</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Citrine <a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.7.3">v0.7.3</a>
    <ul>
      <li>Improve performance when exporting events</li>
      <li>Improve memory usage when downloading your events</li>
      <li>Improve query performance</li>
    </ul>
  </li>
  <li>Pokey <a href="https://github.com/KoalaSat/pokey/releases/tag/v0.1.6-alpha">v0.1.6</a>
    <ul>
      <li>Now notifications include NIP-05 mentions</li>
    </ul>
  </li>
  <li>Nstart <a href="https://njump.me/nevent1qqsqqqpfq60q0r3jrqg7u72jvqscacdvf9lugmutm0ssvf8zg8a33ucprfmhxue69uhkx6rjdahxjcmvv5hxgar0dehkutnrdaksygrmmmmmugka3evlgcqwq3922wsul966nhrayl04svauwldhsjjcq52zg7z7">Update</a>
    <ul>
      <li>Nstart is now multilingual: Currently available in English, Español, Italiano, Français, Deutsch and 日本語.</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:33:04 Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @Rod Palmer Bugle News (10,000 sats) “PODCONF ✅”</li>
      <li>@pink monkey (1,000 sats) “Whoa! 🔥👌💯👏”</li>
      <li>@btconboard (300 sats) “Happy to discover this AI and coding podcast”</li>
      <li>@jespada (100 sats) “Feeding the show to DVM rn, then asking o1 to write the spec then cursor = profit 🥉”</li>
      <li>@AVERAGE_GARY (200 sats) “Does ecash enable blinded auditing for bitcoin books? 🤔” “First 30min is 🤌🤝🔥”</li>
      <li>@larryoshi finkamoto (100 sats)</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tips-of-the-day">Tech Tips of the Day</h3>
<ul>
  <li>Hide My Email (with Cloudflare): A browser extension to create unique, random email addresses that forward to your real inbox [<a href="https://github.com/webmonch/hide-my-mail-cloudflare">Github</a>]
    <ul>
      <li>Create up to 200 anonymous emails</li>
      <li>Instantly creates new mailboxes</li>
      <li>Works on any OS</li>
    </ul>
  </li>
  <li><a href="https://tosdr.org/en/">Terms of Service; Didn’t Read</a>, a website that helps users decipher complicated ToS, has just released an <a href="https://tosdr.org/en/sites/download">Android app</a> for mobile users</li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/04/11/">349</a>
        <ul>
          <li>SwiftSync speedup for initial block download: Sebastian Falbesoner <a href="https://delvingbitcoin.org/t/ibd-booster-speeding-up-ibd-with-pre-generated-hints-poc/1562/">posted</a> to Delving Bitcoin a sample implementation and performance results for SwiftSync</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/04/04/">348</a>
        <ul>
          <li>News
            <ul>
              <li>Educational and experimental-based secp256k1 implementation: Sebastian Falbesoner, Jonas Nick, and Tim Ruffing <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/d0044f9c-d974-43ca-9891-64bb60a90f1f@gmail.com/">posted</a> to the Bitcoin-Dev mailing list to announce a Python implementation of various functions related to the cryptography used in Bitcoin.</li>
            </ul>
          </li>
          <li>Changing consensus
            <ul>
              <li>Multiple discussions about quantum computer theft and resistance: several conversations examined how Bitcoiners could respond to quantum computers becoming powerful enough to allow stealing bitcoins.</li>
              <li>Multiple discussions about a CTV+CSFS soft fork: several conversations examined various aspects of soft forking in the OP_CHECKTEMPLATEVERIFY (CTV) and OP_CHECKSIGFROMSTACK (CSFS) opcodes.</li>
              <li>OP_CHECKCONTRACTVERIFY semantics: Salvatore Ingala posted to Delving Bitcoin to describe the semantics of the proposed OP_CHECKCONTRACTVERIFY (CCV) opcode, link to a first draft BIP, and link to an implementation draft for Bitcoin Core.</li>
              <li>Draft BIP published for consensus cleanup: Antoine Poinsot posted to the Bitcoin-Dev mailing list a link to a draft BIP he’s written for the consensus cleanup soft fork proposal.</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li>Bitcoin entropy puzzles: 68-bit challenge solved for 6.8 BTC [<a href="https://x.com/Kowala24731/status/1909320999235096764">Twitter post</a>]
    <ul>
      <li>The 68-bit puzzle was solved on April 7, 2025, by the same team that cracked <a href="https://x.com/Kowala24731/status/1892831634921082991">the 67-bit puzzle</a> in February, earning them 6.8 BTC.</li>
    </ul>
  </li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>ACINQ resumes making its products available to customers in the United States, mentioning the “Ending Regulation By Prosecution” memo issued by the U.S. Deputy Attorney General [<a href="https://x.com/acinq_co/status/1909651903421554833">Announcement</a>]</li>
  <li>Bull Bitcoin launches in Mexico, allowing users to send pesos instantly to Mexican bank accounts using self-custodial BTC, LN, or Liquid wallets [<a href="https://x.com/BullBitcoin_/status/1910361487140356205">Announcement</a>]</li>
  <li>Tether plans to implement OCEAN’s DATUM Gateway across global mining operations [<a href="https://tether.io/news/tether-to-deploy-hashrate-on-ocean-advancing-decentralized-bitcoin-mining-infrastructure/">Press release</a>]</li>
  <li>U.S.-based Bitcoin mining chip designer Auradine raises $153M in series C funding for Bitcoin and AI expansion [<a href="https://www.theminermag.com/news/2025-04-17/auradine-mara-bitcoin">The Miner Mag</a>]</li>
  <li>Bakkt investors sue over revenue loss from non-renewed contracts [<a href="https://cointelegraph.com/news/bakkt-class-action-lawsuit-webull">Coin Telegraph</a>]
    <ul>
      <li>Investors file class-action lawsuit against Bakkt Holdings, alleging the crypto firm violated securities laws by failing to disclose its heavy dependence on Webull and Bank of America contracts.</li>
    </ul>
  </li>
  <li>BitGo and Voltage partner to scale Lightning Network for Bitcoin payments [<a href="https://www.voltage.cloud/blog/bitgo-and-voltage-team-up-to-deliver-instant-bitcoin-and-stablecoin-payments-via-lightning">Press release</a>]
    <ul>
      <li>The partnership aims to bridge institutional security with Lightning infrastructure, allowing exchanges, neobanks, and fintech platforms to integrate instant Bitcoin payments.</li>
    </ul>
  </li>
  <li>Voltage announces Voltage Payments, a new API for bitcoin and stablecoin transactions [<a href="https://www.voltage.cloud/blog/new-voltage-platform-enables-fastest-way-to-enable-bitcoin-and-soon-stablecoin-transactions">Announcement</a>]
    <ul>
      <li>The service features flexible custody models, USD settlement options, and built-in compliance with SOC 2 Type II certification.</li>
    </ul>
  </li>
  <li>Bitcoin Keeper introduces <a href="https://bitcoinkeeper.app/private/">Keeper Private</a>, a premium self-custody service for high-net-worth individuals and organizations seeking long-term Bitcoin holdings guidance [<a href="https://medium.com/bitbees/introducing-keeper-private-where-wealth-meets-sovereignty-278e93332b32">Blog post</a>] and <a href="https://medium.com/bitbees/introducing-keeper-learn-your-simple-expert-guided-path-to-understanding-bitcoin-be53470be069">Keeper Learn</a>, a service offering a three-session educational program teaching Bitcoin fundamentals to beginners and teams.</li>
  <li>Theya launches Bitcoin management solutions for businesses [<a href="https://blog.theya.us/theya-announces-bitcoin-management-solutions-for-businesses/">Announcement</a>]
    <ul>
      <li>The platform features flexible vault architecture supporting single-key or 2-of-3 multisig vaults for both cold storage and daily operations</li>
    </ul>
  </li>
  <li>Bitcoin on-ramp and custody service Magnolia completes Lightning Network implementation and will support it from launch, pending regulatory approval [<a href="https://x.com/joinMagnolia/status/1912146256488521998">Announcement</a>]</li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>OpenSats announces two new grant waves:
    <ul>
      <li>The <a href="https://opensats.org/blog/fourth-wave-of-education-grants">Fourth Wave of Education Grants</a>, supporting three projects that make Bitcoin education more accessible, practical, and useful: Librería de Satoshi, Crack the Orange, and FREE Madeira</li>
      <li>The <a href="https://opensats.org/blog/eleventh-wave-of-nostr-grants">Eleventh Wave of Nostr Grants</a>, supporting five projects focused on decentralized live streaming, off-grid connectivity, web-of-trust infrastructure, private messaging, and open tools for game development: Swae, HAMSTR, Vertex, Nostr Double Ratchet, and Nostr Game Engine</li>
    </ul>
  </li>
  <li>Brink announces supporting Bitcoin developer <a href="https://x.com/bitcoinbrink/status/1909238416232874192">Sebastian Falbesoner (@theStack)</a>’s transition to full-time open source work and that <a href="https://brink.dev/blog/2025/04/01/eugene/">Eugene Siegel</a> is joining Brink as an open source engineer for Bitcoin Core, bringing security experience from Lightning Network work and previous vulnerability disclosures.</li>
  <li>Spiral <a href="https://x.com/spiralbtc/status/1912176891609362505">announces</a> <a href="https://x.com/L0RINC">@L0RINC</a> as its newest grantee for his work on Bitcoin Core, “emphasizing performance benchmarking and optimizations, along with code quality enhancements, code reviews, block download time reductions, memory optimization, and code refactoring.”</li>
  <li>Vinteum renews grant to now appointed BDK maintainer Leonardo Lima for his contributions to BDK and Fedimint [<a href="https://medium.com/vinteum-org/leonardo-lima-named-bdk-maintainer-and-renews-his-vinteum-grant-65df014e9292">Announcement</a>]</li>
  <li>Einundzwanzig grants funding to Bitcoin Safe [<a href="https://x.com/coinjoined/status/1906050537927164277">Announcement</a>]
    <ul>
      <li>Bitcoin Safe, created by former Specter developer Andreas Griffin, receives 1,000,000 satoshis funding to continue development of this open-source multisig wallet.</li>
    </ul>
  </li>
  <li>The Human Rights Foundation <a href="https://hrf.org/latest/hrf-bitcoin-development-fund-supports-20-projects-worldwide/">announces</a> 1 billion satoshis in gifts from its Bitcoin Development Fund to support 20 projects worldwide: NetBlocks, TollGate, Vinteum, BTCPay Server, Africa Bitcoin Institute, Bitcoin Core Graphical User Interface (GUI), Rkrux, Elsat, Relay Wizard, Waye, Hashpool, Cashu KVAC, Brandon Black (Rearden), Tony Klausing’s Stable Channels, Bitsacco, The Core, Bitcoin Babies, East Asia Bitcoin Developer Apprenticeship Program, TalentLand 2025, Base58’s Bitcoin Live Action Role Play (LARP), BTCenEspañol, Bitcoin researcher Daniel Batten, and Bitcoin for Good.</li>
  <li>Instant exchange eXch announces a 50 BTC open-source fund to support privacy-enhancing projects [<a href="https://bitcointalk.org/index.php?topic=577207.msg65286839#msg65286839">Bitcoin Talk Announcement</a>]
    <ul>
      <li>eXch is shutting down operations and changing owners on May 1st, 2025 after learning they are the target of a transatlantic operation aiming to prosecute them for money laundering and terrorism.</li>
    </ul>
  </li>
  <li>OpenCash Association offers a 2 million satoshi <a href="https://opencash.dev/projects">bounty</a> for developing an open-source BTCPayServer plugin for Cashu payments
    <ul>
      <li>The plugin must include features to melt incoming tokens automatically to Lightning wallets and allow whitelisting of trusted mints to mitigate risks for merchants.</li>
    </ul>
  </li>
  <li>256 Foundation <a href="https://x.com/256FOUNDATION/status/1908585602968170598">announces</a> 2025 open-source Bitcoin mining grant projects: Ember One hashboard, Hydra Pool, Libre Board, and Mujina Firmware, each led by specialized developers.
    <ul>
      <li>Grant cycles for the projects begin in April/May 2025 with end dates ranging from September to December, while a fifth project called Block Watcher is paused.</li>
    </ul>
  </li>
  <li>BDK Foundation adds AnchorWatch, CleanSpark, and Proton Foundation as new corporate members for 2025, joining founding members Spiral and OpenSats [<a href="https://bitcoindevkit.org/blog/_2025q1-new-foundation-members/">Announcement</a>]
    <ul>
      <li>Corporate membership dues fund open source developers who maintain BDK libraries and related FOSS projects supporting Bitcoin technology.</li>
    </ul>
  </li>
  <li>Bitcoin Legacy Project: A new funding initiative for Bitcoin ecosystem by Unchained [<a href="https://www.unchained.com/blog/introducing-the-bitcoin-legacy-project">Blog post</a>]
    <ul>
      <li>Financial commitments include $50,000 to the Bitcoin Policy Institute, $150,000 for a university endowment at University of Austin, and up to $250,000 in research grants through the Bitcoin Scholars program.</li>
    </ul>
  </li>
  <li>Project Eleven launches <a href="https://www.qdayprize.org/">Q-Day Prize</a> offering 1 BTC to the first team that breaks bitcoin’s elliptic curve cryptography using Shor’s algorithm on a quantum computer before April 2026 [<a href="https://bitcoinmagazine.com/news/project-eleven-to-award-1-btc-to-tackle-bitcoins-quantum-vulnerability">Bitcoin Magazine</a>]</li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li><a href="https://b10c.me/blog/015-bitcoin-mining-centralization/">Bitcoin Mining Centralization in 2025</a>: A new publication by researcher B10c reveals that six pools control 95% of the network
    <ul>
      <li>Currently, Foundry (30%) and AntPool (19%) dominate Bitcoin mining, with the top four pools controlling 75% of the hashrate compared to a more decentralized era in 2017.</li>
      <li>When accounting for “AntPool &amp; friends” proxy pooling, the centralization becomes even more extreme, with six mining pools mining 96-99% of all blocks in 2025.</li>
    </ul>
  </li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>Gmail introduces simplified E2EE for business customers [<a href="https://workspace.google.com/blog/identity-and-security/gmail-easy-end-to-end-encryption-all-businesses">Google Blog post</a>]
    <ul>
      <li>Gmail offers end-to-end encryption without complex S/MIME implementation, allowing users to send encrypted emails with just a few clicks regardless of recipient.</li>
    </ul>
  </li>
  <li>UK Court rejects secret hearing in Apple encryption challenge [<a href="https://www.openrightsgroup.org/press-releases/ipt-supports-orgs-call-for-open-hearing-in-apple-encryption-case-uk/">Open Rights Group</a>]
    <ul>
      <li>The Investigatory Powers Tribunal rejects the Home Office’s application for a secret hearing in Apple’s challenge against UK Government demands to break encryption.</li>
    </ul>
  </li>
  <li>European Commission unveils <a href="https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A52025PC0148">ProtectEU</a>, a strategy aiming to establish Europol as “a truly operational police agency” for investigating cross-border threats [<a href="https://therecord.media/european-commission-takes-aim-encryption-europol-fbi-proposal">The Record</a>]
    <ul>
      <li>The Commission plans to create roadmaps for lawful access to encrypted data while “safeguarding cybersecurity and fundamental rights” despite potential controversy and member states’ reluctance to surrender sovereignty.</li>
    </ul>
  </li>
</ul>

<h4 id="security">Security</h4>
<ul>
  <li>CISA renews MITRE’s Common Vulnerabilities and Exposures Program contract hours before expiration [<a href="https://www.nextgov.com/cybersecurity/2025/04/cisa-extends-mitre-backed-cve-contract-hours-its-lapse/404601/">NextGov</a>]
    <ul>
      <li>The CVE Program, a 25-year global standard for cataloging cybersecurity vulnerabilities, faces uncertainty as a subset of the CVE Board plans to form an independent CVE Foundation.</li>
      <li>CISA faces potential budget reductions amid political scrutiny. Homeland Security Secretary Noem aims to make CISA “much more effective, smaller, more nimble, to really fulfill their mission.”</li>
    </ul>
  </li>
  <li>The European Union Agency for Cybersecurity launch its own CVE database, the [<a href="https://euvd.enisa.europa.eu/">European Union Vulnerability Database (EUVD)</a>]
    <ul>
      <li>It serves as a centralized platform for the collection, management, and dissemination of information regarding vulnerabilities in information and communication technology products and services.</li>
    </ul>
  </li>
  <li>Android adds auto-reboot security feature after three days of inactivity [<a href="https://techcrunch.com/2025/04/15/for-security-android-phones-will-now-auto-reboot-after-three-days/">TechCrunch</a>]
    <ul>
      <li>Google updates Android with new security feature that automatically reboots phones locked for three consecutive days, following Apple’s similar implementation last year.</li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #31363: cluster mempool: introduce TxGraph [<a href="https://github.com/bitcoin/bitcoin/pull/31363">Merged</a>]</li>
  <li>Bitcoin Core #31278: wallet, rpc: deprecate settxfee and paytxfee [<a href="https://github.com/bitcoin/bitcoin/pull/31278">Merged</a>]</li>
  <li>Rust Bitcoin #4302: Add push_relative_lock_time() and deprecate push_sequence() [<a href="https://github.com/rust-bitcoin/rust-bitcoin/pull/4302">Merged</a>]</li>
  <li>LND #9669: Downgrade to legacy coop close for taproot channels [<a href="https://github.com/lightningnetwork/lnd/pull/9669">Merged</a>]</li>
  <li>LND #9620: chain: add testnet4 support [<a href="https://github.com/lightningnetwork/lnd/pull/9620">Merged</a>]</li>
  <li>LDK #3670: Handle receiving payments via Trampoline [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3670">Merged</a>]</li>
  <li>LDK #3593: [RFC] Implement a way to do BOLT 12 Proof of Payment [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3593">Merged</a>]</li>
  <li>Eclair #3045: Optional <code class="language-plaintext highlighter-rouge">payment_secret</code> in trampoline outer payload [<a href="https://github.com/ACINQ/eclair/pull/3045">Merged</a>]</li>
  <li>Eclair #2963: Use package relay for anchor force-close [<a href="https://github.com/ACINQ/eclair/pull/2963">Merged</a>]</li>
  <li>BOLTs #1242: Make payment_secret mandatory and ASSUMED [<a href="https://github.com/lightning/bolts/pull/1242">Merged</a>]</li>
  <li>NIPs #1881: Allow multi-user AUTH [<a href="https://github.com/nostr-protocol/nips/pull/1881">Open</a>]</li>
  <li>NIPs #1875: Add Diff and Permalink kinds [<a href="https://github.com/nostr-protocol/nips/pull/1875">Open</a>]</li>
  <li>NIPs #1873: Add guidelines tag to NIP-29 group metadata [<a href="https://github.com/nostr-protocol/nips/pull/1873">Open</a>]</li>
</ul>

<h4 id="quantum">Quantum</h4>
<ul>
  <li>OpenSSL v3.5.0 introduces post-Quantum cryptography support [<a href="https://cybersecuritynews.com/openssl-3-5-0-released/">Cyber Security News</a>]
    <ul>
      <li>OpenSSL v3.5.0 integrates three major post-quantum cryptography algorithms: ML-KEM, ML-DSA, and SLH-DSA</li>
      <li>The update enhances TLS support with hybrid PQC Key Encapsulation Mechanism groups and adds server-side QUIC protocol support</li>
      <li>Version 3.5.0 introduces new configuration options including no-tls-deprecated-ec and enable-fips-jitter, while changing default encryption from des-ede3-cbc to aes-256-cbc for some applications</li>
    </ul>
  </li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>Justice Department dismantles cryptocurrency enforcement team as part of Trump’s regulatory pullback [<a href="https://fortune.com/crypto/2025/04/08/doj-ncet-disbands-memo-todd-blanche-trump/">Fortune Crypto</a>]
    <ul>
      <li>The DOJ disbands its National Cryptocurrency Enforcement Team (NCET), established in 2021 under Biden that prosecuted major crypto-related felonies including Tornado Cash and North Korean laundering operations.</li>
      <li>Deputy Attorney General Todd Blanche calls for ending “regulation by prosecution,” but the memo contains numerous caveats that may still allow prosecution of developers if their services are deemed to facilitate criminal activity [<a href="https://www.therage.co/doj-crypto-mixers-memo/">The Rage</a>]</li>
    </ul>
  </li>
  <li>Trump signs resolution to repeal IRS DeFi reporting requirements [<a href="https://www.reuters.com/world/us/trump-signs-bill-nullify-expanded-irs-crypto-broker-rule-2025-04-11/">Reuters</a>]
    <ul>
      <li>President Trump signs H.J.Res.25, nullifying Biden-era IRS regulations that would have required non-custodial cryptocurrency service providers to file Form 1099 reports beginning in 2026.</li>
    </ul>
  </li>
  <li>Local authorities across China engage private companies to convert confiscated bitcoin into cash amid regulatory uncertainty [<a href="https://www.reuters.com/world/china/china-debates-how-handle-criminal-crypto-cache-2025-04-15/">Reuters</a>]</li>
  <li>Panama City Council approves cryptocurrency payments for municipal services, including taxes, fees, and permits [<a href="https://bitcoinmagazine.com/news/panama-city-approves-bitcoin-and-crypto-payments-for-taxes-fees-and-permits">Bitcoin Magazine</a>]</li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li>BTC Prague, Swan and GW University launch <a href="https://btcindc.com/">BTC in D.C.</a>, the Bitcoin conference in Washington D.C.
    <ul>
      <li>September 30 to October 1st, 2025 in Washington, D.C., U.S.</li>
    </ul>
  </li>
  <li>Chiang Mai approves <a href="https://www.bitcoinmarathon.org/">Bitcoin Marathon and Festival</a>, The World’s First Bitcoin Half Marathon
    <ul>
      <li>November 1-2, 2025 in Chiang Mai, Thailand</li>
    </ul>
  </li>
  <li><a href="https://event.bitcoin.design/">Bitcoin Designathon</a>, a global online event organized by the Bitcoin Design Community to encourage designers and artists to collaboratively improve Bitcoin’s UX and accessibility through creative, open-source design projects. ​
    <ul>
      <li>May 4-18, 2025</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>A simple backup scheme for wallet accounts, by Salvatore Ingala [<a href="https://delvingbitcoin.org/t/a-simple-backup-scheme-for-wallet-accounts/1607/1">Delving Bitcoin</a>]</li>
      <li>Bitcoin Address Poisoning Attacks, by Jameson Lopp [<a href="https://blog.lopp.net/bitcoin-address-poisoning-attacks/">Cypherpunk Cogitations</a>]</li>
      <li>A Brief History of Wallet Clustering, by @not_nothingmuch [<a href="https://spiralbtc.substack.com/p/the-scroll-3-a-brief-history-of-wallet">The Scroll #3</a>]</li>
      <li>How Coinkite Defines Cypherpunk Bitcoin Security [<a href="https://bitcoinmagazine.com/business/how-coinkite-defines-cypherpunk-bitcoin-security">Bitcoin Magazine</a>]</li>
      <li>Who pays for Bitcoin wallets?, by @Scoresby [<a href="https://stacker.news/items/944967">Stacker News</a>]</li>
      <li>Three Staged Assassinations, by BitMEX Research [<a href="https://blog.bitmex.com/three-staged-assassinations-2/">Blog post</a>]</li>
      <li>The Unwritten Rule, by Alekos Filini [<a href="https://afilini.com/blog/the-unwritten-rule/">Blog post</a>]</li>
      <li>DVMs were a mistake, by hzrd149 [<a href="https://njump.me/naddr1qvzqqqr4gupzqfngzhsvjggdlgeycm96x4emzjlwf8dyyzdfg4hefp89zpkdgz99qqwkgandwvkhwetjv5kkzttdd9ehgcttv5kngte3xvhnyvpjx5m8uc7e">Note</a>]</li>
      <li>Transacting with ecash while offline, by Gandlaf21 [<a href="https://njump.me/nevent1qqsfhlf2w6n63wx539fkjetqacflf3kk6dc9k5jrw40j3aynvfpf64gppamhxue69uhkumewwd68ytnrwgq37amnwvaz7tmwdaehgu3wv45kuatwv3a8wctw0f5kwtnnwpskxegzyrzt2d56nke85tsme9ajt74ysckelna8gagxk8e89785kd4cztdav3qhahy">Note</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, ROB HAMILTON, RIJNDAEL</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Rob Hamilton &amp; Rijndael to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR094 - COLDCARD KeyTeleport, Harbor, Ark, Cove Wallet, Zaprite, Bitcoin Core, OMEMO, Knots, Vibe Coding, Trezor Safe 3 Attack Vector, Coinbase Phishing Campaign, Bitcoin Business Software + MORE ft. Rob &amp;amp; Paul</title><link href="https://bitcoin.review/podcast/episode-94/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR094 - COLDCARD KeyTeleport, Harbor, Ark, Cove Wallet, Zaprite, Bitcoin Core, OMEMO, Knots, Vibe Coding, Trezor Safe 3 Attack Vector, Coinbase Phishing Campaign, Bitcoin Business Software + MORE ft. Rob &amp;amp; Paul" /><published>2025-04-02T12:00:00+00:00</published><updated>2025-04-02T12:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-94</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-94/"><![CDATA[<p>I’m joined by guests <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a> &amp; <a href="https://twitter.com/futurepaul">Future Paul</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<p>I’m joined by guests <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a> &amp; <a href="https://twitter.com/futurepaul">Future Paul</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>00:01:09 <a href="https://datamachine.ai/app/rundvm">Nostr DVM Playground</a>: Test out Nostr Data Vending Machines from <a href="https://datamachine.ai/app/rundvm">DataMachine</a>
    <ul>
      <li>Choose between Text Summarization, Text Generation, People Discovery, and People Search.</li>
    </ul>
  </li>
  <li>00:26:33 <a href="https://bitcoinsecurity.org/">Bitcoin Security Guide</a> updated</li>
  <li>00:27:23 Looking for more beta testers for Cove, <a href="https://t.co/OATM9ky13M">iOS Beta</a> on TestFlight</li>
  <li>00:33:19 <a href="https://github.com/Coldcard/firmware/blob/master/docs/key-teleport.md">COLDCARD Key Teleport</a>
    <ul>
      <li>Purpose: Send a small quantity of very secret data between two COLDCARD Q systems, with no risk of anything in the middle learning the secret.</li>
      <li>Method: ECDH and AES-256-CTR plus an extra wrapping layer, transmitted over a mixture of NFC, passive websites, and QR/BBQr codes.</li>
    </ul>
  </li>
</ul>

<h3 id="urgent-vulnerability-disclosures">Urgent Vulnerability Disclosures</h3>
<ul>
  <li>00:29:04 “Designated seed phrase”: A new email phishing campaign is out, targets Coinbase users [<a href="https://x.com/nvk/status/1906511919881585117">Twitter post</a>]</li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:44:33 Bitcoin Core <a href="https://github.com/bitcoin/bitcoin/releases/tag/v29.0rc2">v29.0rc2</a> - Bitcoin Core 29.0 release candidate 2
    <ul>
      <li>Bitcoin Core 29.0rc2 is a release candidate for the next major version [<a href="https://github.com/bitcoin-core/bitcoin-devwiki/wiki/29.0-Release-Candidate-Testing-Guide">Testing Guide</a>]</li>
    </ul>
  </li>
  <li>00:45:52 Fulcrum <a href="https://github.com/cculianu/Fulcrum/releases/tag/v1.12.0">v1.12.0</a>
    <ul>
      <li>Add support for UPnP</li>
      <li>Add support for bitcoind’s ZMQ <code class="language-plaintext highlighter-rouge">pubhashtx</code> message</li>
      <li>Improve Fulcrum’s mempool model efficiency by adding parent/child links for txns</li>
      <li>Add support for Unix domain sockets in ZeroMQ notifications</li>
      <li>Fix a rare and esoteric bug where Fulcrum would announce its TCP/SSL/WS/WSS port(s) to peers even if it was actually listening on a loopback interface for those ports</li>
    </ul>
  </li>
  <li>00:46:06 Blue Wallet <a href="https://github.com/BlueWallet/BlueWallet/releases/tag/v7.1.5">v7.1.5</a>
    <ul>
      <li>Add market android widget</li>
      <li>Allow app to run in Vision Pro</li>
      <li>Allow quick tap to copy address- Bitcoin Keeper</li>
      <li>Mobile <a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v2.1.0">v2.1.0</a>
        <ul>
          <li>Add Emergency Key to vaults for recovery in emergency situations</li>
          <li>Update the Server Key with Spending limits and security delays</li>
          <li>Send batch transactions to multiple recipients at the same time</li>
          <li>Purchase hardware wallets with discounts</li>
          <li>Single Key support for Portal</li>
          <li>Improve wallet migration flow on key changes</li>
          <li>Significant improvements to wallets syncing</li>
          <li>Multiple UI updates and performance improvements</li>
        </ul>
      </li>
      <li>Desktop <a href="https://github.com/bithyve/keeper-desktop/releases/tag/keeper-desktop-v0.2.1">v0.2.1</a>
        <ul>
          <li>Support subscription purchases using Bitcoin, powered by BTCPay Server.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:46:27 Bitcoin Safe
    <ul>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.2.1">v1.2.1</a>
        <ul>
          <li>You can now assign names to participants in Sync&amp;Chat</li>
        </ul>
      </li>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.2.0">v1.2.0</a>
        <ul>
          <li>Improve QR scanning performance in Linux, Mac, Windows</li>
          <li>Enhance PSBT signing UI</li>
          <li>Add message signing via USB and QR (Coldcard Q rocks)</li>
          <li>Add Thai language support</li>
          <li>Add Linux Gnome dark-mode</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="interlude-omemo">Interlude: OMEMO</h3>
<ul>
  <li>00:48:54 <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO</a></li>
</ul>

<h3 id="bitcoin-cont">Bitcoin (Cont.)</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:53:28 Bitcoin Knots <a href="https://github.com/bitcoinknots/bitcoin/releases/tag/v28.1.knots20250305">v28.1.knots20250305</a>
    <ul>
      <li>P2P and Network Changes
        <ul>
          <li>Add support for Testnet4</li>
          <li>UNIX domain sockets can now be used for proxy connections</li>
          <li>Transactions having a feerate that is too low will be opportunistically paired with their child transactions and submitted as a package</li>
        </ul>
      </li>
      <li>Mempool Policy Changes
        <ul>
          <li>Topologically Restricted Until Confirmation (TRUC) parents are now allowed to be below the minimum relay feerate</li>
          <li>Pay To Anchor (P2A) is a new standard witness output type for spending</li>
          <li>Limited package RBF is now enabled, where the proposed conflicting package</li>
        </ul>
      </li>
      <li>GUI Changes
        <ul>
          <li>Add basic block visualizer to the Window menu</li>
        </ul>
      </li>
      <li>Signed Messages
        <ul>
          <li>Verifying BIP 137, BIP 322, and Electrum signed messages is now supported.</li>
          <li>When signing messages for a Segwit or Taproot address, a BIP 322 signature will be produced</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:53:59 BoltzExchange
    <ul>
      <li>boltz-backend <a href="https://github.com/BoltzExchange/boltz-backend/releases/tag/v3.10.0">v3.10.0</a> - Rescue mission
        <ul>
          <li>Support for rescue files that allow swaps to be refunded with only the refund keys</li>
          <li>Nested fee premiums to allow referrals to add extra fees</li>
          <li>Discount CT on Liquid mainnet</li>
        </ul>
      </li>
      <li>boltz-web-app <a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.7.0">v1.7.0</a>
        <ul>
          <li>Swap recovery rescan</li>
          <li>Download rescue key in settings</li>
          <li>Adjust network fee when RIF is needed</li>
          <li>Defer swap creation after backup is done</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:54:01 Blockstream Green QT <a href="https://github.com/Blockstream/green_qt/releases/tag/release_2.0.22">v2.0.22</a>
    <ul>
      <li>Add option to request an email containing the user’s nLockTime transactions</li>
    </ul>
  </li>
  <li>00:54:58 FullyNoded <a href="https://github.com/Fonta1n3/FullyNoded-Server/releases/tag/0.1.0-beta">v0.1.0-beta</a>
    <ul>
      <li>This update removes all functionality related to Lightning and Bitcoin Knots by commenting out the related code</li>
      <li>The focus for the first proper release is going to be on Bitcoin Core and Join Market only</li>
    </ul>
  </li>
  <li>00:55:11 BullBitcoin Mobile
    <ul>
      <li><a href="https://github.com/SatoshiPortal/bullbitcoin-mobile/releases/tag/v0.4.2">v0.4.2</a>
        <ul>
          <li>Using public/price endpoints for Bitcoin Price</li>
        </ul>
      </li>
      <li><a href="https://github.com/SatoshiPortal/bullbitcoin-mobile/releases/tag/v0.4.1">v0.4.1</a>
        <ul>
          <li>DiscountCT for liquid transactions</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:55:19 RoboSats <a href="https://github.com/RoboSats/robosats/releases/tag/v0.7.5-alpha">v0.7.5-alpha</a>
    <ul>
      <li>For Users
        <ul>
          <li>When Javascript is disabled a box appears to help the user to enable it</li>
          <li>Users will now be advised when they select a coordinator not offering swamps in order creation</li>
        </ul>
      </li>
      <li>For Coordinators
        <ul>
          <li>Now orders stay public even if there is a non-confirmed Taker, allowing multiple robots to try to take the order</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:55:24 Bisq 2 <a href="https://github.com/bisq-network/bisq2/releases/tag/v2.1.7">v2.1.7</a>
    <ul>
      <li>New features
        <ul>
          <li>Official Bisq mediators and moderators can now be identified by the badge next to their nickname</li>
          <li>Add a splitpane to calibrate sizes between offerbook chat and offer list</li>
        </ul>
      </li>
      <li>Improvements
        <ul>
          <li>The Bisq Easy protocol has been enhanced to protect against triangular scams. Now, when the buyer does the Fiat transfer, trade ID must be set as “Reason for payment”.</li>
          <li>Splash screen now shows the loading progress for each required step: Starting Tor, publishing onion service, connection to P2P network and, finally, data inventory request.</li>
        </ul>
      </li>
      <li>Improve Trade process, Message delivery, and Mediation (more details in release notes)</li>
    </ul>
  </li>
  <li>00:55:26 Zaprite <a href="https://help.zaprite.com/en/articles/10805728-zaprite-release-notes-2025-03-17">v2025-03-17</a>
    <ul>
      <li>Global Tags: Add a Tags feature that allows merchants to add tags and categorize incoming Transactions for reporting</li>
      <li>Invoices: Add a Total column to the Invoices table, which shows the calculated total amount due after discounts taxes</li>
      <li>Recurring Invoices: Add a Biannual option to Recurring Invoice schedule options</li>
      <li>API Orders: Add a new expiresAt field to the POST /order endpoint</li>
      <li>API Orders: Add a new metadata field to the POST /order endpoint</li>
    </ul>
  </li>
  <li>00:56:38 Bitcoin Jungle App <a href="https://apps.apple.com/tt/app/bitcoin-jungle/id1600313979">v1.3.6</a>
    <ul>
      <li>Includes the ability to add a backup recovery email to your account in case you lose access to your phone number</li>
      <li>Adds beta support for Bolt Cards- a protocol enabling you to link a contactless card to your wallet that lets you pay without your phone</li>
    </ul>
  </li>
  <li>00:57:22 SRI <a href="https://github.com/stratum-mining/stratum/releases/tag/v1.3.0">v1.3.0</a>
    <ul>
      <li>This release migrates the old CI system based on Message Generator into the new SRI Integration Tests Framework.</li>
      <li>Main changes (amongst many):
        <ul>
          <li>New integration test framework and tests</li>
          <li>Enhanced APIs for role development</li>
          <li>Core low-level crates now support <code class="language-plaintext highlighter-rouge">no_std</code></li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:57:57 Stratum.work <a href="https://x.com/boerst/status/1906320686886400159">Update</a>
    <ul>
      <li>New visual on stratum.work displays precise timing data for block template reception from pools, making it easier to spot similarities between pools</li>
    </ul>
  </li>
  <li>00:58:46 Braiins OS
    <ul>
      <li><a href="https://x.com/BraiinsMining/status/1904553029258330368">v25.03</a>
        <ul>
          <li>Toolbox now supports DPS Boost–introduced in the Braiins OS 25.01 update.</li>
          <li>Users can now detect Avalon miners, both via CLI and GUI. Additionally, you can perform actions such as pause, resume, reboot, and change pool config for these miners. Please note that this feature is available in beta testing.</li>
          <li>CSV exports have been enhanced. The export functionality now allows for filtering, sorting, column visibility, and the order set in the GUI’s device list.</li>
          <li>Extended Pool Username Variables now include , which represents the miner’s IP address with an “x” separator, instead of a dot.</li>
        </ul>
      </li>
      <li><a href="https://x.com/BraiinsMining/status/1894829750440407304">v25.01</a>
        <ul>
          <li>Full support for Antminer S21 Imm. and Antminer S21 XP Imm. with AML control board now available</li>
          <li>Logs are now persistent across all control boards</li>
          <li>DPS now has two modes—Normal and Boost. DPS Boost has been recently added</li>
          <li>Customizable MIN/MAX fan speed ranges can now be set in the GUI and API</li>
          <li>Fans on Braiins Mini Miners will now run quieter</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:58:50 Coinselect
    <ul>
      <li><a href="https://github.com/bitcoinerlab/coinselect/releases/tag/v1.3.1">v1.3.1</a>
        <ul>
          <li>Prevent crash in dustThreshold for addr() descriptors lacking miniscript</li>
        </ul>
      </li>
      <li><a href="https://github.com/bitcoinerlab/coinselect/releases/tag/v1.3.0">v1.3.0</a>
        <ul>
          <li>Add support for single-key tr(KEY) and addr(TAPROOT_ADDRESS) descriptors</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li><a href="https://grid.orange.surf/">Grid</a>: An interactive tool designed to analyze and visualize Bitcoin mining data
    <ul>
      <li>Users can customize metrics and miner groupings to explore various aspects of mining pools and their activities. ​</li>
      <li>For example, the tool allows analysis of specific miner groups such as “AntPool &amp; friends,” which includes AntPool, BTC.com, Binance Pool, WhitePool, and SECPOOL.</li>
    </ul>
  </li>
  <li>CTV Playground: A native Android implementation and demonstration of Bitcoin’s proposed OP_CHECKTEMPLATEVERIFY (CTV) soft fork, including a CTV Vault implementation. [<a href="https://github.com/percy-g2/android_app_ctv_playground">Github</a>]</li>
  <li><a href="https://bip370.org/">Bitcoin PSBTv2 Explorer</a>: A quick and dirty PSBTv2 parser and converter [<a href="https://github.com/Shadouts/bip370org">Github</a>]
    <ul>
      <li>This tool aims to provide an updated version of the tremendously useful bip174.org compatible with modern PSBT features.</li>
    </ul>
  </li>
  <li>Fuzzamotto: Holistic Fuzzing for Bitcoin Protocol Implementations [<a href="https://github.com/dergoegge/fuzzamoto">Github</a>]
    <ul>
      <li>Fuzzamoto framework enables coverage-guided fuzzing of Bitcoin full nodes through external interfaces like P2P and RPC, functioning as “Functional Fuzz Tests” rather than using in-process testing methods.</li>
      <li>The system uses snapshot fuzzing with afl++’s Nyx mode for deterministic and performant testing of multiple node instances simultaneously, with future integration possibilities for other snapshot fuzzing tools.</li>
    </ul>
  </li>
  <li><a href="https://bitcoinhumanalliance.org/">Bitcoin Humanitarian Alliance</a>: A global initiative leveraging Bitcoin to support freedom, financial inclusion, and humanitarian causes
    <ul>
      <li>The alliance aims to unite activists and humanitarian groups worldwide who use Bitcoin, educate nonprofits on integrating Bitcoin into their work, and host events to share strategies for financial freedom.</li>
    </ul>
  </li>
  <li>BetterStrike: Strike Tor Web Wallet [<a href="https://codeberg.org/olivertwist43/BetterStrike">Gitlab</a>]
    <ul>
      <li>Strike Wallet functions as a web-based Bitcoin wallet interface that uses Strike API and Tor technology to enable both Lightning and on-chain transactions.</li>
    </ul>
  </li>
  <li><a href="https://github.com/coinbase/cb-mpc">Coinbase MPC</a>: Coinbase open sources its MPC cryptography library [<a href="https://www.coinbase.com/en-fr/blog/introducing-coinbases-open-source-mpc-cryptography-library">Announcement</a>]
    <ul>
      <li>The library provides cryptographic protocols using secure multiparty computation, and is derived from Coinbase’s internal system but modified for general-purpose public use.</li>
      <li>The library includes practical examples like HD-MPC, threshold EC-DKG for ECDSA-MPC, and ECDSA-MPC with threshold backup implementations.</li>
    </ul>
  </li>
  <li><a href="https://www.branta.pro/core">Branta Core</a>: A multi-platform app you to guard your clipboard on Mac, Linux and Windows [<a href="https://docs.branta.pro/core">Docs</a>]</li>
  <li><a href="https://www.branta.pro">Branta Guardrail</a>: A tool to verify invoices and checkouts before sending Bitcoin or Lightning [<a href="https://docs.branta.pro/guardrail">Docs</a>]</li>
  <li><a href="https://www.satoshis.forex/">Satoshi Forex</a>: A straightforward forex page listing the sat value of each unit of currency.
    <ul>
      <li>The website compares Bitcoin’s value to the world’s top 30 currencies in real-time, using data from CoinGecko and the IMF World Economic Outlook database (2024).</li>
    </ul>
  </li>
  <li><a href="https://antidote.biz/">Antidote</a>: London’s first Bitcoin startup incubator hub
    <ul>
      <li>Antidote is a startup studio and collaborative workspace for entrepreneurs, developers, investors, hackers and anybody building on or around bitcoin.</li>
    </ul>
  </li>
  <li>Satsify: A Chrome extension that converts Amazon product prices from USD to satoshis [<a href="https://github.com/TristanBietsch/Satsify">Github</a>]</li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>01:18:13 Sideband <a href="https://github.com/markqvist/Sideband/releases/tag/1.5.0">v1.5.0</a>
    <ul>
      <li>Added the ability to make and receive LXST voice calls</li>
      <li>Add basic voice call UI</li>
      <li>Add option to configure audio devices for LXST voice calls</li>
      <li>Add option to block non-trusted callers</li>
      <li>Add support for sharing any file type as attachment on Android</li>
      <li>Add link stats to object details</li>
      <li>Add a BME280 telemetry plugin example</li>
      <li>Add button on Android to quickly go to full RNS interface status</li>
      <li>Improve map initialisation time</li>
    </ul>
  </li>
  <li>Reticulum MeshChat <a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.21.0">v1.21.0</a>
    <ul>
      <li>Migrated to using micron-parser from NPM</li>
    </ul>
  </li>
  <li>01:18:23 Mullvad VPN
    <ul>
      <li>Release of DAITA v2 for all platforms [<a href="https://mullvad.net/en/blog/daita-version-2-now-available-on-all-platforms">Blog post</a>]
        <ul>
          <li>DAITA version 2 introduces reduced traffic overhead by more carefully inserting dummy packets, cutting their number by half while maintaining defense levels and improving connection speed.</li>
          <li>The new dynamic configurations feature randomly assigns different rules to VPN connections, making two clients visiting the same webpage produce different data streams and helping resist targeted attacks.</li>
        </ul>
      </li>
      <li>Multihop feature now available on Android [<a href="https://mullvad.net/en/blog/2025/3/28/multihop-now-available-on-android">Blog post</a>]
        <ul>
          <li>Users can now route traffic through two servers instead of one in the Android app version 2025.1 and newer, allowing the  selection of entry and exit servers in different jurisdictions</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:18:33 NymVPN officially launches its privacy solution built on a Noise Generating Mixnet technology [<a href="https://nym.com/blog/NymVPN-launch-press-release">Press release</a>]
    <ul>
      <li>The system uses zero-knowledge proofs to prevent linking payment information to online activity, with no logging by design and censorship resistance features.</li>
    </ul>
  </li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>01:18:42 Ledger Donjon conducts a security analysis of Trezor’s hardware wallets and reveals Trezor Safe 3 is susceptible to physical supply chain attacks [<a href="https://www.ledger.com/why-secure-elements-make-a-crucial-difference-to-hardware-wallet-security">Security Audit</a>]
    <ul>
      <li>Trezor Safe 3 and Safe 5 products incorporate Secure Elements (Infineon Optiga Trust M) that safeguard user PINs and secrets.</li>
      <li>Donjon details the remaining security considerations:
        <ul>
          <li>Critical cryptographic operations still occur on the microcontroller, not the Secure Element, creating potential vulnerabilities if an attacker modifies the microcontroller’s firmware.</li>
          <li>Ledger Donjon demonstrated they could bypass firmware verification measures to run modified code that could “lead to the remote recovery of all the user’s funds.”</li>
          <li>The newer Trezor Safe 5 uses an STM32U5 microcontroller that offers improved security against fault injection attacks compared to the TRZ32F429 used in Safe 3.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li><a href="https://github.com/Chapoly1305/nroottag">nRootTag</a>: Turning a Bluetooth device into an Apple AirTag without root privileges [<a href="https://cs.gmu.edu/~zeng/papers/2025-security-nrootgag.pdf">Research paper</a>]
    <ul>
      <li>Researchers discover “nRootTag” vulnerability allowing attackers to convert any Bluetooth device into an AirTag-like tracker without root privileges.</li>
      <li>Attack exploits address confusion in Apple’s Find My network, using over 1.5 billion iPhones as unwitting tracking agents.</li>
      <li>Attack requires malicious app installation, Bluetooth capability, and proximity to Apple devices participating in Find My network.</li>
      <li>Apple released patches in December 2024 (iOS 18.2 and other system updates) to address this vulnerability.</li>
    </ul>
  </li>
  <li>Eavesdropping on black-box mobile devices via audio amplifier’s EMR [<a href="https://www.ndss-symposium.org/wp-content/uploads/2024-240-paper.pdf">Research Paper</a>]
    <ul>
      <li>Periscope is a proof-of-concept system demonstrating how electromagnetic radiations (EMR) from mobile devices’ audio amplifiers can be exploited to recover audio sounds.</li>
      <li>Headphones connected to devices act as antennas that enhance EMR signals, making them measurable at distances up to 15m with a miniaturized prototype similar in size to hidden voice recorders.</li>
      <li>The attack successfully recovers private audio with a word error rate as low as 7.44% across 11 mobile devices and 6 headphones, producing results intelligible to both human hearing and speech-to-text tools.</li>
    </ul>
  </li>
  <li>Microsoft discovers StilachiRAT, a sophisticated trojan targeting credentials and crypto wallet information [<a href="https://thehackernews.com/2025/03/microsoft-warns-of-stilachirat-stealthy.html">The Hacker News</a>]
    <ul>
      <li>The malware targets at least 20 cryptocurrency wallet extensions in Chrome, including MetaMask and Coinbase Wallet, and can execute 10 different commands from its command-and-control server. [<a href="https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/">Microsoft Analysis</a>]</li>
    </ul>
  </li>
  <li>Android apps are covertly tracking users through Bluetooth and WiFi [<a href="https://cyberinsider.com/android-apps-use-bluetooth-and-wifi-scanning-to-track-users-without-gps/">Cyber Insider</a>]
    <ul>
      <li>Study reveals 86% of analyzed apps gather sensitive data, including device identifiers and WiFi scan results, often bypassing Android’s privacy controls.</li>
    </ul>
  </li>
  <li>Next.js discloses critical authentication bypass vulnerability (<a href="https://nextjs.org/blog/cve-2025-29927">CVE-2025-29927</a>) with CVSSv3 score of 9.1 in middleware layer, exploitable through an extra HTTP header [<a href="https://www.runzero.com/blog/next-js/">runZero Blog post</a>]
    <ul>
      <li>Remote attackers can bypass security checks including authentication mechanisms by exploiting this vulnerability.</li>
    </ul>
  </li>
  <li>Clevo boot guard keys leak threatens system security [<a href="https://securityexpress.info/leaked-clevo-boot-guard-keys-threaten-firmware-integrity-binarly-reveals/">Security Express</a>]
    <ul>
      <li>Binarly <a href="https://www.binarly.io/blog/clevo-boot-guard-keys-leaked-in-update-package">confirms</a> discovery of leaked private Boot Guard keys in Clevo firmware packages. The keys were found in a publicly available BIOS update containing BootGuardKey.exe with private keys that could be used to bypass security measures.</li>
      <li>Investigation identifies 15 affected firmware packages across 10 unique Clevo-manufactured devices, including several Gigabyte laptop models. The compromised keys remain in use on “actively supported products, thereby elevating the severity of the threat.”</li>
    </ul>
  </li>
  <li>Five dollars wrench attacks:
    <ul>
      <li>41-year-old man assaulted and robbed of HK$318,000 in cash in Hong Kong after completing a cryptocurrency trade [<a href="https://www.thestandard.com.hk/breaking-news/section/4/229929/Man-robbed-of-over-$300,000-in-cash-after-crypto-trade">The Standard</a>]
        <ul>
          <li>The victim received the cash from a cryptocurrency trade and was heading to his home when the robbery occurred at around 11pm.</li>
        </ul>
      </li>
      <li>Turkish man carrying €5 million cash for cryptocurrency trading is attacked in Hong Kong by knife-wielding assailants [<a href="https://www.dimsumdaily.hk/four-arrested-after-attempted-robbery-of-5-million-euro-cash-from-27-year-old-turkish-man-in-tsim-sha-tsui/">Dimsum Daily</a>]
        <ul>
          <li>Victim fights off attackers, suffers 10-centimetre knife wound to forehead, but retains his money bag. Police arrests four men.</li>
        </ul>
      </li>
      <li>Four men and one woman arrested after the kidnapping of a cryptocurrency investor in Paris over a failed €10,000 cryptocurrency investment that collapsed [<a href="https://archive.is/jH9pD#selection-2717.0-2841.321">Le Parisien</a>]
        <ul>
          <li>The 20-year-old victim was forced into a car trunk during what appeared to be a setup meeting with a 19-year-old woman. Kidnappers demanded €40,000.</li>
        </ul>
      </li>
      <li>South Korean prosecutors request 10-year sentence for a man who stabbed Haru Invest CEO in the neck during a court hearing in August 2024 [<a href="https://www.theblock.co/post/346953/south-korean-man-faces-10-years-in-prison-for-stabbing-crypto-ceo-during-fraud-trial">The Block</a>]
        <ul>
          <li>The attacker, surnamed Kang, lost 100 BTC in Haru Invest, which allegedly defrauded around 16,000 investors of nearly $962 million after suspending operations in June 2023.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="interlude-robs-corner">Interlude (Rob’s Corner)</h3>
<ul>
  <li>01:21:05 Coinbase is open-sourcing their multiparty computation (MPC) cryptography library [<a href="https://x.com/CoinbaseInsto/status/1905296276662386762">Accouncement</a>]</li>
  <li>01:21:35 Mempool.space <a href="https://x.com/Rob1Ham/status/1907054612504330517">now supports address poisoning detection</a></li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects-cont">Privacy &amp; Other Related Bitcoin Projects (cont.)</h3>
<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li>Voca: A privacy-focused Text-to-Speech (TTS) app for Android that respects system language settings and provides a clean, simple interface [<a href="https://git.nostrdev.com/voca/voca">Gitea</a>]
    <ul>
      <li>Users can configure language through system TTS settings, with all processing done locally without data collection.</li>
      <li>Voca is FOSS and operates on a value for value model [<a href="https://njump.me/nprofile1qqs0tj5e4fj8ljvy0tdkrdhdyqxek9vsjwjmjunvfe8zhxdlnlfj8rcksauwz">Npub</a>]</li>
    </ul>
  </li>
  <li><a href="https://silkpadcomputers.com/">Silkpad Computers</a>: Privacy-focused refurbished computers, focuses on older Thinkpads models
    <ul>
      <li>Silkpad Computers offers refurbished devices emphasizing privacy and security through auditable firmware (IME disabled) and open-source software.</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>LN-spam-prevention: Fee-based protocols for preventing spam on the Bitcoin Lightning Network [<a href="https://github.com/JohnLaw2/ln-spam-prevention">Github</a>]
    <ul>
      <li>The project introduces protocols to assign and collect fees for Lightning services, aiming to reduce network spam by charging for all significant costs incurred.</li>
      <li>The collection system uses griefer-penalization where both parties lose comparable funds in griefing attempts, protecting users who select self-interested partners [<a href="https://github.com/JohnLaw2/ln-spam-prevention/blob/main/spam_prevention_v1.0.pdf">Research paper</a>]</li>
    </ul>
  </li>
  <li>Hydrus: Lightning automated liquidity management agent [<a href="https://github.com/aftermath2/hydrus">Github</a>]
    <ul>
      <li>Hydrus automatically opens and closes Lightning Network channels based on network graph analysis and performance metrics.</li>
      <li>The system selects nodes using weighted heuristics including capacity, centrality, routing policies, and connectivity.</li>
    </ul>
  </li>
  <li>Alby Lite: A minimal Lightning address server powered by NWC [<a href="https://github.com/getAlby/lite">Github</a>]</li>
  <li>ngx_l402: An Nginx module that enables pay-per-request authentication using the L402 protocol [<a href="https://github.com/DhananjayPurohit/ngx_l402">Github</a>]
    <ul>
      <li>An L402 authentication module/plugin for Nginx that integrates seamlessly into your web server, enabling Lightning Network-based monetization for your REST APIs</li>
      <li>It supports invoice generation through LND, LNURL, and NWC</li>
    </ul>
  </li>
  <li><a href="https://lnvps.net/">LNVPS</a>: A bitcoin powered VPS provider
    <ul>
      <li>LNVPS is a VPS provider based in Ireland that specializes in integrating Bitcoin’s Lightning Network for payments</li>
    </ul>
  </li>
  <li>Sig4Sats Script: Atomic exchange of Cashu payments for Nostr event signatures using Schnorr adaptor signatures [<a href="https://github.com/vstabile/sig4sats-script">Github</a>]
    <ul>
      <li>A simple script demonstrating how to atomically exchange Cashu payments for Nostr event signatures using Schnorr adaptor signatures.</li>
    </ul>
  </li>
  <li>nut-bridge: Bridging the gap between NIP-57 and NutZaps [<a href="https://github.com/Egge21M/nut-bridge">Github</a>]
    <ul>
      <li>“nut-bridge is bridging the gap between NIP-57 Zaps and NIP-61 NutZaps by providing a LNURL server that will receive payments via a Lightning Address and then turn them into a nut zap.”</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>01:22:46 LDK <a href="https://lightningdevkit.org/blog/announcing-vss/">announces</a> Versioned Storage Service (VSS)
    <ul>
      <li>VSS provides server-side storage for non-custodial Lightning Network and Bitcoin wallets, which enables fund recovery after a device loss as well as future multi-device access.</li>
      <li>The service ensures real-time synchronization of wallet states, and prevents loss of funds by securing every state change as it occurs rather than relying on periodic backups.</li>
      <li>VSS is designed with privacy features including client-side encryption and can be self-hosted or cloud-deployed, with integration already available in LDK Node v0.4.x as alpha support.</li>
    </ul>
  </li>
  <li>Eclair <a href="https://github.com/ACINQ/eclair/releases/tag/v0.12.0">v0.12.0</a>
    <ul>
      <li>This release adds support for creating and managing Bolt 12 offers and a new channel closing protocol (option_simple_close) that supports RBF.</li>
      <li>We also add support for storing small amounts of (encrypted) data for our peers (option_provide_storage).</li>
    </ul>
  </li>
  <li>Phoenixd <a href="https://github.com/ACINQ/phoenixd/releases/tag/v0.5.1">v0.5.1</a>
    <ul>
      <li>Use ubuntu for docker runtime image</li>
      <li>Add <code class="language-plaintext highlighter-rouge">parent_id</code> link for first outgoing payment part</li>
    </ul>
  </li>
  <li>Breez SDK <a href="https://github.com/breez/breez-sdk-liquid/releases/tag/0.7.2">v0.7.2</a> - Nodeless
    <ul>
      <li>Add seed support to ConnectRequest</li>
      <li>Improve realtime sync and restore</li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>Go <a href="https://github.com/getAlby/go/releases/tag/v1.11.0">v1.11.0</a>
        <ul>
          <li>Add support for NWC deep linking and NWA</li>
          <li>BTC rates now refresh every 5 minutes for up-to-date pricing</li>
          <li>Improve branding with Alby Go logos on success screens</li>
          <li>Update wallet removal copy for better clarity</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Ark <a href="https://github.com/ark-network/ark/releases/tag/v0.5.2">v0.5.2</a> - Handle RBF transactions
    <ul>
      <li>Telemetry: Go runtime metrics</li>
      <li>SDK: Detect rbf txs while listening for boarding utxos</li>
    </ul>
  </li>
  <li>Ark Labs HQ wallet-sdk
    <ul>
      <li><a href="https://github.com/ArkLabsHQ/wallet-sdk/releases/tag/v0.0.9">v0.0.9</a>
        <ul>
          <li><code class="language-plaintext highlighter-rouge">VtxoScript</code> abstraction</li>
          <li>Mark as side-effect-free to allow Tree Shaking</li>
          <li>Add <code class="language-plaintext highlighter-rouge">ArkNote</code> class</li>
        </ul>
      </li>
      <li><a href="https://github.com/ArkLabsHQ/wallet-sdk/releases/tag/v0.0.8">v0.0.8</a>
        <ul>
          <li>Support Boarding</li>
          <li>Cleaning types</li>
          <li>Identity abstraction</li>
          <li>Add getTransactionHistory()</li>
          <li>Add ServiceWorkerWallet implementation</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>BitBanana <a href="https://github.com/michaelWuensch/BitBanana/releases/tag/v0.9.3">v0.9.3</a>
    <ul>
      <li>Significantly enhanced channel rebalancing interface</li>
      <li>Nostr Wallet Connect support</li>
      <li>Channel sorting</li>
      <li>UTXO sorting</li>
      <li>Exposed timeout setting for backend communication and lightning payments</li>
    </ul>
  </li>
  <li>BlitzWallet <a href="https://github.com/BlitzWallet/BlitzWallet/releases/tag/Android-v0.4.2-beta">v0.4.2-beta</a>
    <ul>
      <li>eCash Revamp: More Flexibility &amp; Security
        <ul>
          <li>Deterministic Proofs: eCash proofs are now linked to your Blitz Wallet seed phrase</li>
          <li>New SQL Storage System: Moved from encrypted database storage to a local SQL database</li>
          <li>Cross-Wallet Portability: Upload and migrate eCash proofs between compatible wallets</li>
          <li>Laying the Groundwork for Higher Limits: Preparing to increase the eCash storage limit beyond the current 5,000 sats cap</li>
        </ul>
      </li>
      <li>Manual Migration Required: Existing eCash proofs must be manually migrated via Settings &gt; Experimental Features</li>
      <li>Point-of-Sale Enhancements:
        <ul>
          <li>Customizable Currency Display: Toggle between sats or fiat, with proper regional formatting</li>
          <li>Integrated Tipping System: Employees can now enter their name during PoS transactions, and business owners can track tips for proper distribution</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>CDK <a href="https://github.com/cashubtc/cdk/releases/tag/v0.8.0">v0.8.0</a>
    <ul>
      <li>Add redb feature to mintd in order to meet MSRV target</li>
      <li>cdk-sqlite: In memory sqlite database</li>
      <li>Add <code class="language-plaintext highlighter-rouge">tos_url</code> to <code class="language-plaintext highlighter-rouge">MintInfo</code></li>
      <li>cdk: Add tos_url setter to <code class="language-plaintext highlighter-rouge">MintBuilder</code></li>
      <li>Add optional “request” and “unit” fields to MeltQuoteBolt11Response NUT Change</li>
      <li>Add optional “amount” and “unit” fields to MintQuoteBolt11Response NUT Change</li>
      <li>Compile-time error when no lightning backend features are enabled</li>
      <li>Add support for sqlcipher</li>
      <li>Payment processor</li>
      <li>Payment request builder</li>
      <li>Sends should be initiated by calling Wallet::prepare_send</li>
      <li>A SendOptions struct controls optional functionality for sends</li>
      <li>Allow Amount splitting to target a fee rate amount</li>
    </ul>
  </li>
  <li>CashuBTC <a href="https://x.com/callebtc/status/1903079881325400407">Update</a>
    <ul>
      <li>Add the ability to use tap-to-pay with eCash, enables Bitcoin payments via NFC without internet or delay</li>
      <li>The system supports payments from any mint and integrates with the Lightning Network</li>
    </ul>
  </li>
  <li>Cashu-ts
    <ul>
      <li><a href="https://github.com/cashubtc/cashu-ts/releases/tag/v2.4.1">v2.4.1</a>
        <ul>
          <li>Export OutputData</li>
        </ul>
      </li>
      <li><a href="https://github.com/cashubtc/cashu-ts/releases/tag/v2.4.0">v2.4.0</a>
        <ul>
          <li>Remove dleqValid from proof and expose verification api</li>
          <li>Extract from- and to- raw request functions</li>
          <li>Handle specific errors cases in request.ts</li>
        </ul>
      </li>
      <li><a href="https://github.com/cashubtc/cashu-ts/releases/tag/v2.3.0">v2.3.0</a>
        <ul>
          <li>Add method for automated batch restoration</li>
          <li>NUT-18 is implemented, updating README.</li>
          <li>NUT-15 MultiPath Melt Quotes</li>
          <li>NUT-20 Signed Mint Payloads</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nutstash <a href="https://github.com/gandlafbtc/nutstash-wallet/releases/tag/nutstash-v2.0.4">v2.0.4</a>
    <ul>
      <li>Switch qr code lib to @paulmillr/qr</li>
      <li>Feature: Offline tokens</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li><a href="https://gm.family/">GM.family</a>: Send a ‘GM’ note to @fiatjaf by the press of a button</li>
  <li><a href="https://nostringer.starknetonbitcoin.com/">Nostringer</a>: JavaScript library providing unlinkable ring signatures (SAG) for Nostr pubkeys [<a href="https://github.com/AbdelStark/nostringer">Github</a>]
    <ul>
      <li>The library draws inspiration from Monero’s Ring Signatures using Spontaneous Anonymous Group signatures (SAG) and implements ring signatures using Ed25519 elliptic curve and Keccak hashing.</li>
    </ul>
  </li>
  <li>Igloo: Frostr keyset manager and remote signer [<a href="https://github.com/FROSTR-ORG/igloo">Github</a>]
    <ul>
      <li>“Desktop-based key management and signing device. Options to import an existing nsec, or generate a new one. Allows you to manage and rotate shares, plus recover your nsec using shares. Can be used online for remote signing, or offline for key management only.”</li>
    </ul>
  </li>
  <li>Frost2x: Notes and other stuff signed by an extension, using the powers of FROST [<a href="https://github.com/FROSTR-ORG/frost2x">Github</a>]
    <ul>
      <li>Fork of the popular nos2x extension</li>
      <li>Uses the Bifrost library for encryption and signing of events</li>
      <li>Allows FROST-based signing for any website that supports NIP-07</li>
    </ul>
  </li>
  <li>Permafrost: Ephemeral relay and remote signing server for the FROSTR protocol [<a href="https://github.com/FROSTR-ORG/permafrost">Github</a>]
    <ul>
      <li>Server-based signing device and personal ephemeral relay</li>
      <li>Includes a NIP-07 based web portal for managing your server</li>
      <li>Options to run as a node service (using bun) or inside a docker environment</li>
    </ul>
  </li>
  <li><a href="https://23gmt.nostr.technology/">23GMT</a>: A specialized Nostr relay with time-based constraints
    <ul>
      <li>23GMT is a specialized Nostr relay with some constraints:
        <ul>
          <li>Only accepts posts from 23:00 to 24:00 GMT</li>
          <li>Deletes its database at 01:00 GMT</li>
          <li>Only accepts events with kind 1 (text notes)</li>
          <li>Only accepts events with a NIP-70 “-“ tag</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Runstr: A motion tracking app built on top of Nostr [<a href="https://github.com/HealthNoteLabs/Runstr">Github</a>]
    <ul>
      <li>Runstr aims to offer an open source, privacy-focused alternative to platforms like Nike Run Club or Strava</li>
      <li>Current features include Nostr login, run tracker, global running feed, and Wavlake music</li>
    </ul>
  </li>
  <li><a href="https://enterthenostr.com/">EnterTheNostr</a>: Matrix-themed Nostr note composer
    <ul>
      <li>Aside from the nostr extension sign up, it features a “Load Smith” function that creates anonymous, one-time identities for users to post without a signer extension</li>
    </ul>
  </li>
  <li><a href="https://njump.me/npub1p0wer69rpkraqs02l5v8rutagfh6g9wxn2dgytkv44ysz7avt8nsusvpjk">POWR</a>: Proof Of Workout over Relays [<a href="https://github.com/nostr-protocol/nips/pull/1816">NIP-101e: Workout Events</a>]
    <ul>
      <li>POWR is a local-first, open-source fitness app for Android and iOS supercharged by Nostr [<a href="https://njump.me/nevent1qqsgsq2w59734x6995h97mt639wu80uafn05vrr4qxvd0tgfts9nj7qpp4mhxue69uhkummn9ekx7mqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgq3qxy54p83r6wnpyhs52xjeztd7qyyeu9ghymz8v66yu8kt3jzx75rqvjegn4">Announcement</a>]</li>
    </ul>
  </li>
  <li>Nostr NIP Repository Extension: Opens the NIP repository in your browser [<a href="https://github.com/joel-st/kunkun-nostr-goto-repo">Github</a>]
    <ul>
      <li>“This extension provides quick access to Nostr NIPs (Nostr Implementation Possibilities) documentation directly from Kunkun. It allows you to open Nostr-related repositories and browse specific NIPs with ease.”</li>
    </ul>
  </li>
  <li>Dezh DSR: A repository containing a set of Nostr relays designed to be used for specific purposes [<a href="https://github.com/dezh-tech/ddsr">Github</a>]
    <ul>
      <li><a href="https://github.com/dezh-tech/ddsr/blob/main/zapoli">Zapoli</a>: A relay designed to used by NIP-82 clients</li>
      <li><a href="https://github.com/dezh-tech/ddsr/blob/main/210maxi">210maxi</a>: A relay that only accepts 210 character events, tuned for NIP-B1 feeds</li>
      <li><a href="https://github.com/dezh-tech/ddsr/blob/main/pages">Pages</a>: A relay that only keeps profiles and follow lists. You can simply resolve any pubkey from it</li>
      <li><a href="https://github.com/dezh-tech/ddsr/blob/main/bunklay">Bunklay</a>: A relay that only accept bunker related events</li>
    </ul>
  </li>
  <li><a href="https://notebin.io/">Notebin</a>: NIP-95: Decentralized code snippets with Lightning tips [<a href="https://github.com/nodetec/notebin">Github</a>]
    <ul>
      <li>The proposal defines a new Nostr event kind specifically for code snippets, separate from regular text notes.</li>
      <li>Code snippets include specialized metadata such as programming language, file extension, and other code-specific attributes.</li>
    </ul>
  </li>
  <li><a href="https://sats.gg/">Sats.gg</a>: A Nostr client focused on live streaming [<a href="https://github.com/satsgg/sats.gg">Github</a>]
    <ul>
      <li>Sats.gg helps content creators monetize their work on platforms like Twitter, Ghost, Substack, Squarespace, and Nostr</li>
      <li>The platform supports integration with LNURLPay and Lightning Address, facilitating seamless payment processes for users</li>
    </ul>
  </li>
  <li><a href="https://yumyu.me/">Yumyume</a>: A FOSS social bookmarking client built on the Nostr protocol, distributing bookmarks across multiple relays [<a href="https://gitlab.com/digitalethicsagency/nostr/yumyume">Gitlab</a>]
    <ul>
      <li>Yumyume supports self-hosting, and operates client-side but requires a local web server for full functionality.</li>
    </ul>
  </li>
  <li><a href="https://postr-for-nostr.joelstuedle.ch/">Postr For Nostr</a>: Share your WordPress Posts to Nostr with Postr For Nostr [<a href="https://github.com/joel-st/postr-for-nostr">Github</a>]
    <ul>
      <li>This plugin provides the ability to postr content from WordPress to Nostr.</li>
    </ul>
  </li>
  <li>Flightless2: A terminal-based user interface client for Nostr direct messaging DM [<a href="https://github.com/jeremyd/flightless2">Github</a>]</li>
  <li><a href="https://nostr-components.web.app/">Nostr Components</a>: Take Nostr content beyond Nostr clients - embed it anywhere on the internet [<a href="https://github.com/saiy2k/nostr-components">Github</a>]
    <ul>
      <li>Nostr Components makes it easy to embed Nostr profiles, posts, and follow buttons in any website.</li>
    </ul>
  </li>
  <li><a href="https://hellonostr.xyz/">Hello Nostr</a>: A collection of Nostr educational resources
    <ul>
      <li>This site serves as a companion through the Nostr universe, helping users from downloading their first client to running relays and using self-custodial Lightning wallets.</li>
    </ul>
  </li>
  <li>Nostr MCP Server: A Model Context Protocol (MCP) server that provides Nostr capabilities to LLMs like Claude [<a href="https://github.com/AustinKelsay/nostr-mcp-server">Github</a>]
    <ul>
      <li>The server supports both hex public keys and npub formats, and implements five tools for interacting with the Nostr network:​ getProfile, getKind1Notes, getReceivedZaps, getSentZaps, getAllZaps</li>
    </ul>
  </li>
  <li><a href="https://bookstr.xyz/">Bookstr</a>: Bookstr is a Goodreads or Storygraph alternative built on Nostr built with Lovable AI [<a href="https://github.com/marykatefain/bookverse-nostr">Github</a>]</li>
</ul>

<h4 id="software-releases--project-updates-4">Software Releases &amp; Project Updates</h4>
<ul>
  <li>rust-nostr <a href="https://github.com/rust-nostr/nostr/releases/tag/v0.40.0">v0.40.0</a>
    <ul>
      <li>Add NIP-38 and NIP-62 support</li>
      <li>Add nostr parser, to easily parse any text and extract nostr URIs, URLs and more</li>
      <li>Extend Tags capabilities (i.e., add deduplication support)</li>
      <li>Add admission policies, to selectively select which events to allow receiving and which to reject</li>
      <li>Add Mac Catalyst support for Swift package</li>
    </ul>
  </li>
  <li>Coracle <a href="https://github.com/coracle-social/coracle/releases/tag/0.6.9">v0.6.9</a>
    <ul>
      <li>Quote addressable events by address rather than nevent</li>
      <li>Bump nostr-tools to fix nostrcheck uploads</li>
      <li>Show error when DM fails to send</li>
    </ul>
  </li>
  <li>Nostur <a href="https://github.com/nostur-com/nostur-ios-public/releases/tag/1.19.0">v1.19.0</a>
    <ul>
      <li>Faster feed loading</li>
      <li>Improve fullscreen image viewer</li>
      <li>Prefetch images when swiping in gallery</li>
      <li>Add blur hash metadata when posting images</li>
      <li>Keep scroll position improvements</li>
      <li>Show connecting thread lines in full width image mode</li>
      <li>Multiple picture select for regular posts</li>
      <li>Better m3u8 video stream detection</li>
      <li>Show own npub in sidebar + copy</li>
    </ul>
  </li>
  <li>Nostr PHP <a href="https://github.com/nostrver-se/nostr-php/releases/tag/1.6.0">v1.6.0</a>
    <ul>
      <li>Allow verification of Event objects</li>
      <li>Add NIP-04 and NIP-44 encryption</li>
    </ul>
  </li>
  <li>Yana <a href="https://github.com/frnandu/yana/releases/tag/v0.16.0">v0.16.0</a>
    <ul>
      <li>NWC alby go 1-click connection</li>
      <li>Outbox relay set calculation progress</li>
      <li>Upload media using blossom</li>
      <li>Video player fullscreen</li>
      <li>NIP-42 Relay Authentication</li>
    </ul>
  </li>
  <li>Gossip <a href="https://github.com/mikedilger/gossip/releases/tag/v0.14.0">v0.14.0</a>
    <ul>
      <li>Zappers and amounts are now shown</li>
      <li>Reactions and who reacted are now shown</li>
      <li>UI: Side panel contains less so it can be thinner. Bottom bar added.</li>
      <li>UI: frame count and spinner (optional)</li>
      <li>Relay UI: sorting by score puts important relays at the top.</li>
      <li>Relay UI: add more filters so all the bits are covered</li>
      <li>Image and video loading is much faster</li>
      <li>Subject in draft (when replying) can be edited</li>
      <li>DM feeds automatically update, and note order is fixed</li>
      <li>Logging to stderr by default</li>
      <li>Relay errors and fetch errors are now considered as warnings</li>
    </ul>
  </li>
  <li>Citrine <a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.7.2">v0.7.2</a>
    <ul>
      <li>Add a button to delete events by kind</li>
      <li>Change the delete all button color and separate it from the other buttons</li>
      <li>Download events just with a npub</li>
      <li>Change the relays when downloading events</li>
    </ul>
  </li>
  <li>0xChat App Desktop <a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.0.2-desktop-beta">v1.0.2</a>
    <ul>
      <li>Supports NIP-104 MLS secret chat</li>
      <li>Supports copying images from the clipboard</li>
      <li>The desktop client will remain running after the window is closed.</li>
    </ul>
  </li>
  <li>nostr-relay-tray <a href="https://github.com/CodyTseng/nostr-relay-tray/releases/tag/v2.0.0">v2.0.0</a>
    <ul>
      <li>Support one-click to expose the relay to the internet</li>
      <li>Add ability to delete events based on specific conditions</li>
      <li>Breaking Change: Improved event rules structure for better control</li>
    </ul>
  </li>
  <li>Pokey <a href="https://github.com/KoalaSat/pokey/releases/tag/v0.1.5-alpha">v0.1.5-alpha</a>
    <ul>
      <li>Zap notifications now displays zapper’s profile</li>
      <li>Pokey will skip notifications for events containing more than a configurable amount of tagger users (Hell Threads)</li>
    </ul>
  </li>
  <li>Nostr-zap <a href="https://github.com/SamSamskies/nostr-zap/releases/tag/v1.3.0">v1.3.0</a>
    <ul>
      <li>Introduce data-naddr property as alternative to data-note-id</li>
    </ul>
  </li>
  <li>Electrum 4.6 will feature built-in Nostr support with a <a href="https://github.com/spesmilo/electrum-aionostr">custom aionostr library</a> developed specifically for this purpose [<a href="https://x.com/ElectrumWallet/status/1905024339759550760">Announcement</a>]
    <ul>
      <li>Nostr integration aims to decentralize previously centralized services, enabling users to become liquidity providers for submarine swaps and replacing central servers for PSBT cosigning.</li>
      <li>Developers are also currently working on a NWC plugin to further improve on connectivity options.</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:26:33 Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @pink monkey (1,000 sats)</li>
      <li>@Anonymous (1,000 sats)</li>
      <li>@jespada (100 sats) “I need to sleep more often, please keep shipping”</li>
      <li>@. (350 sats)</li>
      <li>@Anonymous (350 sats)</li>
      <li>@Anonymous (350 sats)</li>
      <li>@btconboard (200 sats) “⚡️⚡️👍🏻👍🏻”</li>
      <li>@AVERAGE_GARY (100 sats) “<a href="https://github.com/m1sterc001guy/roastr">Roastr</a> exists.” “ed25519?”</li>
      <li>@alanStacksSats “Good tech content away from the usual price and macro talk alot of podcasts focus on.”</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tip-of-the-day">Tech Tip of the Day</h3>
<ul>
  <li>No Ghibli Chrome Extension: A Chrome extension that helps you identify and filter out Studio Ghibli-related content from Twitter [<a href="https://github.com/faisalsayed10/no-ghibli">Github</a>]</li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/03/28/">347</a>
        <ul>
          <li>LN upfront and hold fees using burnable outputs: John Law <a href="https://delvingbitcoin.org/t/fee-based-spam-prevention-for-lightning/1524/">posted</a> to Delving Bitcoin the summary of a paper he’s written about a protocol nodes can use to charge two additional types of fees for forwarding payments</li>
          <li>Discussion of testnets 3 and 4: Sjors Provoost <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/9FAA7EEC-BD22-491E-B21B-732AEA15F556@sprovoost.nl/">posted</a> to the Bitcoin-Dev mailing list to ask whether anyone was still using testnet3 now that testnet4 has been available for about six months</li>
          <li>Plan to relay certain taproot annexes: Peter Todd <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/Z9tg-NbTNnYciSOh@petertodd.org/">announced</a> to the Bitcoin-Dev mailing list his plan to update his Bitcoin Core-based node, Libre Relay, to begin relaying transactions containing taproot annexes if they follow particular rules.</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/03/21/">346</a>
        <ul>
          <li>Discussion of LND’s dynamic feerate adjustment system: Matt Morehouse <a href="https://delvingbitcoin.org/t/lnds-deadline-aware-budget-sweeper/1512">posted</a> to Delving Bitcoin a description of LND’s recently-rewritten sweeper system, which determines the feerates to use for onchain transactions. <strong>See #### Lightning…</strong></li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/03/14/">345</a>
        <ul>
          <li>P2P traffic analysis: developer Virtu <a href="https://delvingbitcoin.org/t/bitcoin-node-p2p-traffic-analysis/1490/">posted</a> to Delving Bitcoin an analysis of the network traffic generated and received by his node in four different modes: initial block download (IBD), non-listening (outbound connections only), non-archival (pruned) listening, and archival listening.</li>
          <li>Research into single-path LN pathfinding: Sindura Saraswathi <a href="https://delvingbitcoin.org/t/an-exposition-of-pathfinding-strategies-within-lightning-network-clients/1500">posted</a> to Delving Bitcoin about research she conducted with Christian Kümmerle about finding optimal paths between LN nodes for sending payments in a single part.</li>
          <li>Probabilistic payments using different hash functions as an xor function: Robin Linus <a href="https://delvingbitcoin.org/t/emulating-op-rand/1409/10">replied</a> to the Delving Bitcoin thread about probabilistic payments.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li>CISA: Cross-Input Signature Aggregation <a href="https://hrf.org/wp-content/uploads/2025/03/CISA-Industry-Paper-V4.pdf">research paper</a> released
    <ul>
      <li>HRF sponsors research paper on Cross-Input Signature Aggregation, a Bitcoin protocol enhancement that combines multiple Schnorr signatures into a single, smaller signature.</li>
      <li>CISA aims to reduce Bitcoin transaction sizes and storage requirements, lower transaction fees, and improve bandwidth efficiency.</li>
    </ul>
  </li>
</ul>

<h4 id="lightning--l2-1">Lightning + L2+</h4>
<ul>
  <li>LND’s Deadline-Aware Budget Sweeper: A new approach to Lightning transaction fee management [<a href="https://morehouse.github.io/lightning/lnd-deadline-aware-budget-sweeper/">Matt Morehouse</a>]
    <ul>
      <li>LND v0.18.0 introduces a completely rewritten sweeper subsystem that dynamically adjusts transaction fees based on HTLC deadlines and fee budgets.</li>
      <li>The new approach makes replacement cycling attacks uneconomical by allocating up to 50% of HTLC value for fees when necessary.</li>
      <li>This deadline-aware strategy provides better security than existing methods while reducing reliance on potentially inaccurate fee estimators.</li>
    </ul>
  </li>
  <li>Second launches its Ark protocol implementation on signet, inviting developers to test it before mainnet release [<a href="https://blog.second.tech/try-ark-on-signet/">Second Blog post</a>]
    <ul>
      <li>The company provides signet faucet and test store to facilitate testing.</li>
    </ul>
  </li>
  <li>Exodus announces end of Lightning wallet support on May 30, 2025, after which users cannot access Lightning wallets or funds  [<a href="https://www.exodus.com/support/en/articles/8598830-lightning-in-exodus-support-ends-may-30-2025">Announcement</a>]
    <ul>
      <li>Users must withdraw their entire LN balance before May 30, 2025 to avoid losing access to their funds.</li>
    </ul>
  </li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Chinese automobile financing platform Cango set to become Bitcoin mining proxy for Bitmain through Antalpha connection [<a href="https://www.theminermag.com/news/2025-03-17/cango-bitcoin-bitmain">The Miner Mag</a>]
    <ul>
      <li>The connection between Antalpha, Antpool, Bitmain, and EWCL suggests Cango was positioned as a mining proxy for Bitmain from the beginning, explaining Cango’s recent purchase of 32 EH/s hashrate from Bitmain despite limited cash reserves.</li>
    </ul>
  </li>
  <li>Bitcoin financial firm NYDIG to acquire Crusoe’s bitcoin mining business [<a href="https://blockspace.media/insight/bitcoin-financial-firm-nydig-to-acquire-crusoes-bitcoin-mining-business">Blockspace</a>]
    <ul>
      <li>NYDIG is negotiating to purchase Crusoe Energy’s 270 MW bitcoin mining portfolio across 20 sites, including 135 employees. The acquisition allows NYDIG to expand mining operations while leveraging potential synergies with parent company Stone Ridge Holding’s 10 GW natural gas assets.</li>
      <li>Crusoe Energy is pivoting away from bitcoin mining to focus on AI infrastructure, including a 1.6 GW datacenter project in Texas.</li>
    </ul>
  </li>
  <li>LōD Technologies, an IoT-driven energy intelligence provider, now operates across all Bitfarms datacenters globally [<a href="https://lod.io/lod-rolls-out-globally-with-bitfarms-optimizing-operations-management-across-all-sites/">Press release</a>]
    <ul>
      <li>The platform enables Bitfarms to track electricity markets, respond to grid conditions, and optimize power costs while maximizing demand response revenue potential.</li>
    </ul>
  </li>
  <li>Bitcoin mining hardware manufacturer Canaan Inc. secures $200 million through a Series A-1 Preferred Shares financing [<a href="https://www.theminermag.com/news/2025-03-11/canaan-bitcoin-mining-200-million">The Miner Mag</a>]
    <ul>
      <li>The funding supports R&amp;D, production expansion, and digital mining infrastructure in North America.</li>
    </ul>
  </li>
  <li>DLC Markets announces addition of options booking and settlement to their platform, automating margin calls, liquidation, and settlement processes [<a href="https://blog.dlcmarkets.com/dlc-markets-launches-bilateral-options-booking-settlement/">Blog post</a>]</li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>OpenSats
    <ul>
      <li><a href="https://opensats.org/blog/tenth-wave-of-bitcoin-grants">Announces</a> the Tenth Wave of Bitcoin Grants, supporting six projects advancing the Bitcoin ecosystem:
        <ul>
          <li>First-time project grants for Bitcoin Safe, Stable Channels, and Waye.</li>
          <li>And renewed project grants for Floresta, Krux, and Krux-Installer.</li>
        </ul>
      </li>
      <li><a href="https://opensats.org/blog/10th-wave-of-nostr-grants">Reveals</a> the recipients of the Tenth Wave of Nostr Grants, comprising of seven innovative projects that showcase the growing versatility of the nostr ecosystem:
        <ul>
          <li>The four first-time project grants in this wave are: Chachi, Zapstore, HyperNote, and Nostr Epoxy.</li>
          <li>In addition, OpenSats has renewed project grants for: Futr, Npub.cash, and Notedeck.</li>
        </ul>
      </li>
      <li><a href="https://opensats.org/blog/let-a-thousand-flowers-bloom">Announces</a> its support to OpenSats-like organizations, focusing on a specific domain, namely: 2140, OpenCash, Bitshala, Summer of Bitcoin, Bitcoin Dev Launchpad, and Foundation Formation Kit</li>
    </ul>
  </li>
  <li>Vinteum <a href="https://medium.com/vinteum-org/announcing-our-fellowship-program-086ae25b5bde">announces</a> its fellowship program, a structured phase of onboarding new open-source contributors, selecting seven fellows which are starting a six-month journey:
    <ul>
      <li>Luis Schwab (BDK)</li>
      <li>João Leal (Floresta)</li>
      <li>Lucas Balieiro (PlebLottery and StratumV2)</li>
      <li>QLRD (Krux and Floresta)</li>
      <li>Erick Cestari (Rust-Bitcoin)</li>
      <li>Moises Pompilio (LDK)</li>
      <li>Lucad70 (Floresta)</li>
    </ul>
  </li>
  <li>Btrust <a href="https://blog.btrust.tech/announcing-q1-2025-btrust-grants/">awards</a> Q1 2025 Starter Grants to Brandon Odiwuor, active Bitcoin Core contributor, and Itoro Ukpong, contributor to  Bitcoinj and BDK-FFI.</li>
  <li>Btrust Builders launches five structured learning tracks to train African developers in Bitcoin open-source development [<a href="https://blog.btrust.tech/introducing-the-btrust-builders-pathways/">Announcement</a>]
    <ul>
      <li>The pathways include Mastering Bitcoin, Bitcoin Core CLI, Rust for Bitcoin, Programming for Bitcoin, and Start Your Career in BOSS.</li>
    </ul>
  </li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li>Foundry mines 9 blocks in a row on March 29th, from block <a href="https://mempool.space/block/000000000000000000010b44be0030738b941d47bf5c20161bfc8130a44c98d6">889982</a> to <a href="https://mempool.space/block/000000000000000000011c1b9079623b37a8cfaabbbae6ad6d9245f2277bb71a">889990</a></li>
  <li><a href="https://mempool.space/block/00000000000000000000a517d87e63ea04c7ec3dd51d20926e82cca5466dccaf">Block 888989</a>: First public-pool block mined by self-hosted user
    <ul>
      <li>A Bitcoin block with hash 00000000000000000000a517d87e63ea04c7ec3dd51d20926e82cca5466dccaf was successfully mined on a self-hosted public-pool.</li>
    </ul>
  </li>
  <li>DMND launches Stratum V2 mining pool [<a href="https://blockspace.media/insight/stratum-v2-pool-dmnd-launches-announces-raise/">Blockspace</a>]
    <ul>
      <li>DMND, backed by Trammell Venture Partners, <a href="https://www.dmnd.work/upcoming/">opens</a> applications for its Stratum V2 mining pool, offers miners a 0% fee for two months.</li>
    </ul>
  </li>
  <li>Bitdeer introduces the A2 Pro Bitcoin miner with 14.9 J/TH efficiency, improving upon the original A2’s 16.5 J/TH and matching Bitmain’s Antminer S21 Pro [<a href="https://ir.bitdeer.com/news-releases/news-release-details/bitdeer-launches-sealminer-a2-pro-bitcoin-mining-machines">Press release</a>]
    <ul>
      <li>The A2 Pro comes in two versions: air-cooled (255-270TH/) and hydro-cooled (500-530TH/s), with Bitdeer projecting total production of 35 EH/s of SEALMINER units by October.</li>
    </ul>
  </li>
  <li>Auradine unveils the Teraflux AH3880, the first U.S.-engineered hydro-cooled Bitcoin miner, delivering up to 600 TH/s with 14.5 J/TH efficiency, marking the first U.S.-engineered hydro-cooled Bitcoin miner [<a href="https://www.theminermag.com/news/2025-03-26/auradine-teraflux-bitcoin-miner">The Miner Mag</a>]</li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>GSMA introduces end-to-end encryption for cross-platform messaging [<a href="https://cyberinsider.com/gsma-introduces-end-to-end-encryption-for-cross-platform-rcs-messaging/">Cyber Insider</a>]
    <ul>
      <li>GSMA announces RCS standard upgrade with end-to-end encryption using the Messaging Layer Security protocol, marking the first large-scale interoperable encryption system between different clients.</li>
      <li>Apple confirms involvement, with spokesperson Shane Bauer stating: “End-to-end encryption is a powerful privacy and security technology that iMessage has supported since the beginning.”</li>
    </ul>
  </li>
  <li>U.S. Officials misuse Signal app for Yemen strike coordination, accidentally include journalist [<a href="https://cyberinsider.com/u-s-officials-used-signal-to-coordinate-yemen-strikes-accidentally-included-a-journalist-in-the-chat/">Cyber Insider</a>]
    <ul>
      <li>National security team members under Trump administration mistakenly add Atlantic editor Jeffrey Goldberg to a Signal group chat coordinating military strikes in Yemen.</li>
      <li>Officials including VP Vance, Defense Secretary Hegseth, and Secretary of State Rubio exchange classified tactical information on commercial smartphones using an unauthorized platform.</li>
    </ul>
  </li>
  <li>Switzerland considers expanding its surveillance law to include VPNs, messaging apps, and social networks with over 5,000 users or $100 million turnover [<a href="https://www.techradar.com/vpn/vpn-privacy-security/secure-encryption-and-online-anonymity-are-now-at-risk-in-switzerland-heres-what-you-need-to-know">TechRadar</a>]
    <ul>
      <li>The amendment creates “three types of information and two types of monitoring” that would force privacy-focused companies to modify encryption and identification practices.</li>
    </ul>
  </li>
  <li>Mullvad VPN provides details on why its iOS app doesn’t enable Apple’s ‘includeAllNetworks’ flag despite its potential privacy benefits [<a href="https://cyberinsider.com/mullvad-vpn-explains-why-it-holds-back-key-ios-privacy-feature/">Blog post</a>]
    <ul>
      <li>The Swedish VPN provider discovers that enabling this feature causes critical system failures during app updates, resulting in complete network loss on iOS devices.</li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #31407: guix: Notarize MacOS app bundle and codesign all MacOS and Windows binaries [<a href="https://github.com/bitcoin/bitcoin/pull/31407">Merged</a>]</li>
  <li>BIPs #1800: Consensus Cleanup BIP draft [<a href="https://github.com/bitcoin/bips/pull/1800">Open</a>]</li>
  <li>BDK #1839: This PR allows the receiving structures (bdk_chain, bdk_wallet) to detect and evict incoming transactions that are double spent (cancelled). [<a href="https://github.com/bitcoindevkit/bdk/pull/1839">Merged</a>]</li>
  <li>LND #9620: Adds <code class="language-plaintext highlighter-rouge">testnet4</code> support to <code class="language-plaintext highlighter-rouge">lnd</code> [<a href="https://github.com/lightningnetwork/lnd/pull/9620">Merged</a>]</li>
  <li>LDK #3624: Support scalar tweak to rotate holder funding key during splicing [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3624">Merged</a>]</li>
  <li>LDK #3649: Add BOLT12 support to bLIP-51 / LSPS1 [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3649">Merged</a>]</li>
  <li>LDK #3608: Correct and update confirmation target constant definitions [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3608">Merged</a>]</li>
  <li>LND #9458: multi+server.go: add initial permissions for some peers [<a href="https://github.com/lightningnetwork/lnd/pull/9458">Merged</a>]</li>
  <li>BTCPayServer #6581: RBF and UX improvement to fee bumping [<a href="https://github.com/btcpayserver/btcpayserver/pull/6581">Merged</a>]</li>
  <li>Eclair #3044: Remove amount-based confirmation scaling [<a href="https://github.com/ACINQ/eclair/pull/3044">Merged</a>]</li>
  <li>Eclair #3026: Support p2tr bitcoin wallet [<a href="https://github.com/ACINQ/eclair/pull/3026">Merged</a>]</li>
  <li>BOLT #1233: Check for preimage before failing back missing HTLCs [<a href="https://github.com/lightning/bolts/pull/1233">Merged</a>]</li>
  <li>NIP #1822: Add B0 NIP for Blossom interaction [<a href="https://github.com/nostr-protocol/nips/pull/1822">Open</a>]</li>
  <li>NIP #1826: A way for relays to be honest about their algos [<a href="https://github.com/nostr-protocol/nips/pull/1826">Open</a>]</li>
</ul>

<h4 id="tutorial">Tutorial</h4>
<ul>
  <li>Liana Simple Inheritance Taproot Miniscript Wallet with Krux [<a href="https://gist.github.com/odudex/7c50d8bb95066a738e88cc9843735cff">Guide</a>]
    <ul>
      <li>This guide details how to set up a Taproot miniscript wallet using:
        <ul>
          <li>Krux: For key creation, backup, and transaction signing.</li>
          <li>Liana Wallet: For creating a “Simple Inheritance” wallet that uses the keys generated on Krux.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Setting up a Strfry Nostr Relay as a TOR Hidden Service [<a href="http://primal.net/0xtr/1742932879611">0xtr’s Guide</a>]
    <ul>
      <li>This guide will walk you through setting up your own Strfry Nostr relay on a Debian/Ubuntu server and making it accessible exclusively as a TOR hidden service.</li>
    </ul>
  </li>
</ul>

<h4 id="cryptography">Cryptography</h4>
<ul>
  <li>GPU advancements in cryptographic brute force attacks [<a href="https://tosc.iacr.org/index.php/ToSC/article/view/12078/11919">Research paper</a>]
    <ul>
      <li>Researchers optimize implementations of KASUMI, SPECK, and TEA3 algorithms on GPUs, achieving 235.72, 236.72, and 234.71 keys tested per second on a single RTX 4090.</li>
      <li>The KASUMI implementation shows 15x improvement over previous work, reducing requirements for breaking GPRS/GSM from 2400 RTX 3090 GPUs to just 142 RTX 4090 GPUs.</li>
    </ul>
  </li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>DeFi Education Fund publishes coalition letter asking Congress to correct DOJ’s interpretation of money transmission laws as applied to software developers [<a href="https://x.com/fund_defi/status/1904884463131119685">Announcement</a>]
    <ul>
      <li>The <a href="https://www.defieducationfund.org/_files/ugd/84ba66_47e9f09699414451b5a7269cb4ef96ea.pdf">letter</a> challenges DOJ’s August 2023 legal theory that expands criminal liability to developers, which signatories believe contradicts FinCEN guidance and threatens the U.S. blockchain ecosystem.</li>
      <li>Coalition maintains money transmitting businesses require “possessing &amp; transmitting funds on behalf of others” and urges policymakers to “protect U.S. software developers from regulatory overreach.”</li>
    </ul>
  </li>
  <li>France rejects encryption backdoor mandate [<a href="https://www.eff.org/deeplinks/2025/03/win-encryption-france-rejects-backdoor-mandate">EFF</a>]
    <ul>
      <li>The rejected proposal would have implemented a “ghost participant model” allowing law enforcement to silently join encrypted chats, undermining private communication security.</li>
    </ul>
  </li>
  <li>The FAIR Act aims to protect bitcoin holders from civil asset forfeiture [<a href="https://bitcoinmagazine.com/politics/the-fair-act-would-protect-bitcoin-holders">Bitcoin Magazine</a>]
    <ul>
      <li>The Fifth Amendment Integrity Restoration (FAIR) Act seeks to reform civil asset forfeiture laws, requiring clear and convincing evidence before the government can seize property, thereby offering stronger protections for Bitcoin holders. ​</li>
    </ul>
  </li>
  <li>U.S. Treasury removes Tornado Cash from sanctions list and issues warning to users [<a href="https://www.therage.co/tornado-cash-officially-removed-from-sanctions-list-treasury-issues-warning/">The Rage</a>]
    <ul>
      <li>OFAC has officially lifted sanctions against Tornado Cash, removing it from the SDN List after the Fifth Circuit ruled the designation unlawful in November.</li>
      <li><a href="https://www.therage.co/tornado-cash-treasury-attempts-to-block-sanctions-judgement/">Update</a>: Treasury files notice to prevent Texas district court from issuing final judgment on Tornado Cash sanctions reversal, attempting to retain power to list software on OFAC’s SDN list.
        <ul>
          <li>Despite removing Tornado Cash from sanctions list, Treasury seeks to avoid binding court order that would prevent it from sanctioning similar privacy software in future, signaling continued focus on cryptocurrency privacy services.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>US government prosecutors allegedly withhold evidence showing Chainalysis incorrectly attributed 300 million to North Korea in the Roman Storm case where they claimed 1 billion was laundered through Tornado Cash [<a href="https://x.com/FreeAlexeyRoman/status/1899485896904159648">Twitter post</a>]
    <ul>
      <li>The defense argues prosecutors violated the Brady rule by failing to disclose evidence that “undermines a core allegation” despite prosecutors claiming the material “stretch[ed] beyond recognition what constitutes Brady material.”</li>
    </ul>
  </li>
  <li>Chainalysis sued by bankruptcy debtors for facilitating fraud in Celsius network collapse [<a href="https://www.therage.co/chainalysis-sued-celsius-scam/">The Rage</a>]
    <ul>
      <li>The lawsuit claims Chainalysis “knowingly and willfully fueled one of the biggest cons in cryptocurrency history” by validating inflated asset figures calculated using methodology designed by Celsius founder Alex Mashinsky.</li>
    </ul>
  </li>
  <li>Samourai Wallet developers attend fourth pre-trial hearing [<a href="https://bitcoinmagazine.com/news/samourai-wallet-developers-appear-together-in-court-at-fourth-pre-trial-hearing">Bitcoin Magazine</a>]
    <ul>
      <li>The court establishes pre-trial motion schedule starting May 9, with prosecution responses due June 6.</li>
      <li>Expert disclosures are scheduled for July 15 (prosecution) and August 8 (defense). The trial is officially scheduled to begin on November 3, 2025.</li>
    </ul>
  </li>
  <li>U.S. IRS sharing tax data with immigration agencies for deportation purposes [<a href="https://www.therage.co/irs-shares-tax-data-with-ice-dhs-deportations/">The Rage</a>]
    <ul>
      <li>The IRS has agreed to share confidential tax records with ICE and DHS to help locate and deport immigrants who have removal orders.</li>
      <li>This marks the second major increase in financial surveillance under the Trump administration, following Treasury’s lowering of reporting thresholds along the Mexican border from $10,000 to $200</li>
    </ul>
  </li>
  <li>The European Central Bank plans to finish the digital euro testing phase by October 2025 [<a href="https://www.coindesk.com/policy/2025/03/10/ecb-targets-october-launch-for-digital-euro-but-lawmakers-raise-concerns">CoinDesk</a>]
    <ul>
      <li>ECB board members are actively campaigning with European Parliament, Council, and Commission stakeholders to advance the digital euro project.</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://mayanbitcoinconference.com/">Mayan Bitcoin Conference</a>:
    <ul>
      <li>December 7-9, 2025 in Mérida, Mexico</li>
    </ul>
  </li>
  <li><a href="https://btcazores.com/">BTCAzores</a> 2025 edition is canceled [<a href="https://x.com/btcazores/status/1899523697926386097">Announcement</a>]
    <ul>
      <li>The next edition is scheduled for 2026</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>Cashu: Bitcoin freebanking, by Juraj Bednar [<a href="https://juraj.bednar.io/en/blog-en/2025/03/18/cashu-bitcoin-freebanking/">Blog post</a>]</li>
      <li>Wallet Clustering Basics, by Spiral [<a href="https://spiralbtc.substack.com/p/the-scroll-2-wallet-clustering-basics">The Scroll #2</a>]</li>
      <li>Bitcoin’s Duplicate Transactions, by BitMEX Research [<a href="https://blog.bitmex.com/bitcoins-duplicate-transactions/">Blog post</a>]</li>
      <li>Nostr Security: Account Hacks, by Odell [<a href="https://njump.me/naddr1qvzqqqr4gupzqpxfzhdwlm3cx9l6wdzyft8w8y9gy607tqgtyfq7tekaxs7lhmxfqq35ummnw3ez65m9vd6hy6t50yk5zcmrda6kuapdfpskx6mn94h8zcm2d4jsfjd2gy">Note</a>]</li>
      <li>Comprehensive Analysis and Proposed Solutions for Mitigating Sybil Attacks on Nostr, by PPQ Deep Research [<a href="https://njump.me/naddr1qvzqqqr4gupzq3huhccxt6h34eupz3jeynjgjgek8lel2f4adaea0svyk94a3njdqqxnzde5xgmr2dpcxscnyve563jzel">Note</a>]</li>
      <li>The bitcoiner’s guide to physical security, by Jameson Lopp [<a href="https://blog.casa.io/the-bitcoiners-guide-to-physical-security/">Casa Blog post</a>]</li>
      <li>Bitcoin and the Rise of Cypherpunks: A Historical Timeline, by Craig [<a href="https://onbitcoin.substack.com/p/bitcoin-and-the-rise-of-cypherpunks">On Bitcoin</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, ROB HAMILTON, FUTURE PAUL</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Rob Hamilton &amp; Future Paul to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR093 - ECDSA Key Extraction, ESP32 Security Concerns, COLDCARD, Cove Wallet, Krux, Nunchuk, Invalid Mining Jobs, Javascript Injection Attack, CTV Back on the table? + MORE ft. Rob &amp;amp; Vivek</title><link href="https://bitcoin.review/podcast/episode-93/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR093 - ECDSA Key Extraction, ESP32 Security Concerns, COLDCARD, Cove Wallet, Krux, Nunchuk, Invalid Mining Jobs, Javascript Injection Attack, CTV Back on the table? + MORE ft. Rob &amp;amp; Vivek" /><published>2025-03-13T14:00:00+00:00</published><updated>2025-03-13T14:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-93</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-93/"><![CDATA[<p>I’m joined by guests <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a> &amp; <a href="https://twitter.com/Seardsalmon">Vivek</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>00:01:18 Unleashed.chat rebrands to <a href="https://datamachine.ai/">dataMachine</a> and enables Nostr Wallet Connect.</li>
</ul>

<h3 id="urgent-vulnerability-disclosures">Urgent Vulnerability Disclosures</h3>
<ul>
  <li>00:01:52 ECDSA private key extraction upon signing a malformed input in Elliptic library [<a href="https://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh">Vulnerability disclosure</a>]
    <ul>
      <li>The elliptic library versions up to 6.6.0 have a critical vulnerability allowing private key extraction when signing malformed inputs, such as strings or numbers.</li>
      <li>This issue arises because the library, by design, accepts hex strings as input types, leading to potential nonce reuse during the signing process.</li>
    </ul>
  </li>
  <li>00:09:12 ESP32 Security Concerns
    <ul>
      <li><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-27840">CVE-2025-27840</a>: Undocumented commands in ESP32 Bluetooth chip raise security concerns [<a href="https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/">Tarlogic Security’s disclosure</a>]
        <ul>
          <li>Tarlogic Security researchers discover undocumented HCI commands in ESP32 microcontrollers, which are present in over one billion IoT devices worldwide. These proprietary commands allow memory access and modifications to the chip’s functionality.</li>
          <li>Post-exploitation: The hidden commands require physical HCI access and high privileges on the controller, making remote exploitation via Bluetooth impossible.</li>
          <li>Tarlogic introduces BluetoothUSB, a free tool designed to democratize Bluetooth security testing across operating systems, helping manufacturers and security experts conduct comprehensive device audits without expensive hardware requirements.</li>
        </ul>
      </li>
      <li>Undocumented commands found in Bluetooth chip used by a billion devices [<a href="https://www.bleepingcomputer.com/news/security/undocumented-commands-found-in-bluetooth-chip-used-by-a-billion-devices/">Bleeping Computer</a>]</li>
      <li>[<a href="https://x.com/nvk/status/1899610451173908722">NVK Tweet</a>] [<a href="esp32.fail">esp32.fail</a>]
        <ul>
          <li>ESP32 is an amazing platform, but not good for securing things, especially not securing #Bitcoin.</li>
          <li>Here are a few known Secure Boot Bypass Methods, including both hardware (fault injection, EMFI) and software-based attacks with emojis!</li>
          <li>Unpatched Bypasses (Active Threats)
            <ul>
              <li>CVE-2023-35818 – EMFI attack bypasses Secure Boot V3 on ESP32 rev 3.0/3.1, allowing unsigned code execution &amp; plaintext flash readout.<br />
  🔹 Not patchable in software, requires future silicon fix.<br />
  📄 <a href="http://usenix.org/system/files/woot24-delvaux.pdf">USENIX WOOT ’24 Paper</a><br />
  📄 <a href="http://espressif.com/sites/default/files/advisory_downloads/AR2023-005%20Security%20Advisory%20Concerning%20Bypassing%20Secure%20Boot%20and%20Flash%20Encryption%20Using%20EMFI%20EN.pdf">Espressif Security Advisory AR2023-005</a></li>
              <li>AR2023-007 – Power analysis + voltage glitch on ESP32-C3 &amp; ESP32-C6 extracts Flash Encryption Key &amp; bypasses Secure Boot.<br />
  🔹 No fix yet, Espressif confirmed future silicon will mitigate.<br />
  📄 <a href="http://espressif.com/sites/default/files/advisory_downloads/AR2023-007.pdf">Espressif Security Advisory</a></li>
            </ul>
          </li>
          <li>Patched Bypasses (Fixed in Newer Hardware)
            <ul>
              <li>CVE-2020-13629 – EMFI attack on ESP32 (rev 0/1) bypasses Secure Boot &amp; Flash Encryption. Attackers inject faults to force execution of unsigned code.<br />
  🔹 Patched in ESP32 V3+ (ECO3).<br />
  📄 <a href="http://raelize.com/blog/espressif-esp32-bypassing-encrypted-secure-boot-cve-2020-13629/">Raelize Research Blog</a></li>
              <li>CVE-2019-15894 – Voltage glitch skips Secure Boot digest check, allowing execution of unsigned firmware if Flash Encryption is off.<br />
  🔹 Patched in ESP32 V3 (ECO3).<br />
  📄 <a href="http://espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_Boot">Espressif Security Advisory</a></li>
              <li>CVE-2019-17391** – Fault injection allows reading Secure Boot &amp; Flash Encryption keys from eFuses, permanently compromising security.<br />
  🔹 Patched in ESP32 V3.<br />
  📄 <a href="http://espressif.com/sites/default/files/advisory_downloads/Security%20Advisory%20CVE-2020-15048%2C%2013629%20EN%26CN.pdf">Espressif Security Advisory</a></li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:21:32 Coinos revokes NWC connection secrets due to security leak concerns [<a href="https://njump.me/nevent1qvzqqqqqqypzpw5qnyrxdmctda962pvng7ltzvjzjg09ge57dqqxfjn42ft2rcaxqyt8wumn8ghj7un9d3shjtnrda5kummn9e5k7tcpzemhxue69uhhyetvv9ujucm0d9hx7uewd9hj7qpqeslgcjp2anz29phrxpsw9wgml4t35zfasttzyrktx0hgztfky6ksfc63fm">Announcement</a>]
    <ul>
      <li>Users experiencing issues with Coinos zaps via NWC are advised to generate a new connection at Coinos settings and update their Nostr app.</li>
    </ul>
  </li>
</ul>

<h3 id="viveks-corner">Vivek’s Corner</h3>
<ul>
  <li>00:22:51 Invalid mining jobs by AntPool &amp; friends during forks [<a href="https://b10c.me/observations/14-antpool-and-friends-invalid-mining-jobs/">b10c</a>]
    <ul>
      <li>AntPool and associated pools (CloverPool, Ultimus, Rawpool, Poolin) published invalid mining jobs with excessive coinbase output values, indicating a bug in their coinbase creation code.</li>
      <li>Invalid jobs were observed during block races, particularly on March 1, 2025, and in December 2024, suggesting a pattern of errors linked to these pools.</li>
      <li>Historical data shows that invalid jobs often reused coinbase output values from previous blocks, hinting at a caching issue in the coinbase building process.</li>
      <li>The behavior does not appear to be a selfish mining attempt but rather a result of technical glitches in job templates or coinbase code.</li>
      <li>The consistent invalid job publication reinforces the idea that these pools are interconnected and potentially operated by the same entity, warranting the label “AntPool &amp; friends.”</li>
      <li>[<a href="https://x.com/boerst/status/1899102559161520497">Boerst Tweet</a>]</li>
    </ul>
  </li>
  <li>Mempool Partitioning and Identifying Mining Nodes [<a href="https://crypt-iq.github.io/coinscope-post.html">crypt-iq</a>]
    <ul>
      <li>The study aimed to identify influential mining nodes on the Bitcoin network to assess potential attack vectors, such as mempool partitioning and pinning attacks.</li>
      <li>A list of approximately 5,700 listening p2p nodes was created, filtering out those that did not accept incoming connections or participated in transaction relay.</li>
      <li>Using the Candidate Selection algorithm from the CoinScope paper, the researcher conducted 100 trials, finding that major miners like Foundry and AntPool accounted for a significant portion of mined conflicts.</li>
      <li>The top 200 influential nodes represented about 40% of the network’s hashrate, while a refined list of influential nodes from individual mining pools improved the representation to 50%.</li>
      <li>The high rate of unintentional mempool partitioning (91%) indicates that attackers could exploit this for effective partitioning attacks, suggesting further analysis and refinement of the influential node list is warranted.</li>
    </ul>
  </li>
  <li>BIP-119 (OP_CHECKTEMPLATEVERIFY) (no activation) <a href="https://github.com/bitcoin/bitcoin/pull/31989">#31989</a></li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:37:44 COLDCARD
    <ul>
      <li>New COLDCARD Release: <a href="https://github.com/Coldcard/firmware/releases/tag/2025-02-13T1415-v5.4.1">v5.4.1</a> (Mk4) and <a href="https://github.com/Coldcard/firmware/releases/tag/2025-02-13T1413-v1.3.1Q">v1.3.1</a> (Q)
        <ul>
          <li>New (Message) Signing Features:
            <ul>
              <li>Sign message from secure note text, or password note
                <ul>
                  <li>Sign message with key resulting from positive ownership check. Press (0) and enter or scan message text to be signed</li>
                  <li>Sign message with key selected from Address Explorer Custom Path menu. Press (2) and enter or scan message text to be signed</li>
                  <li>JSON message signing. Use JSON object to pass data to sign</li>
                </ul>
              </li>
            </ul>
          </li>
          <li>Delta Mode Enhancements:
            <ul>
              <li>Hide Secure Notes &amp; Passwords in Deltamode. Wipe seed if notes menu accessed</li>
              <li>Hide Seed Vault in Deltamode. Wipe seed if Seed Vault menu accessed</li>
              <li>Catch more DeltaMode cases in XOR submenus</li>
            </ul>
          </li>
          <li>Address Display Changes:
            <ul>
              <li>New address display format improves address verification on screen by splitting addresses into groups of 4 and showing with a space between them</li>
              <li>Related: Added option to show/export full multisg addresses without censorship</li>
            </ul>
          </li>
          <li>Other Changes:
            <ul>
              <li>Both Mk4 and Q
                <ul>
                  <li>Enhancement: Add ability to switch between BIP-32 xpub, and obsolete SLIP-132 format in Export XPUB</li>
                  <li>Enhancement: Use the fact that master seed cannot be used as ephemeral seed, to show message about successful master seed verification</li>
                  <li>Enhancement: Allow devs to override backup password</li>
                  <li>Enhancement: If derivation path is omitted during message signing, derivation path default is no longer root (m), instead it is based on requested address format (m/44h/0h/0h/0/0 for p2pkh, and m/84h/0h/0h/0/0 for p2wpkh)</li>
                </ul>
              </li>
              <li>Mk4 Specific Changes
                <ul>
                  <li>Enhancement: Export single sig descriptor with simple QR.</li>
                </ul>
              </li>
              <li>Q Specific Changes
                <ul>
                  <li>New Feature: Verify Signed RFC messages via BBQr</li>
                  <li>New Feature: Sign message from QR scan (format has to be JSON)</li>
                  <li>Enhancement: Sign/Verify Address in Sparrow via QR</li>
                  <li>Enhancement: Sign scanned Simple Text by pressing (0). Next screen query information about which key to use</li>
                  <li>Enhancement: Add option to “Sort By Title” in Secure Notes and Passwords</li>
                </ul>
              </li>
            </ul>
          </li>
        </ul>
      </li>
      <li>New COLDCARD EDGE Release: <a href="https://github.com/Coldcard/firmware/releases/tag/2025-02-19T1941-v6.3.5X">v6.3.5X</a> (Mk4) and <a href="https://github.com/Coldcard/firmware/releases/tag/2025-02-19T1940-v6.3.5QX">v6.3.5QX</a> (Q) - Catch-Up Release
        <ul>
          <li>Update the startup warning which now reads: “This firmware version is qualified for use with wallets (such as AnchorWatch) that keep redundant key schemas for recovery independent of COLDCARD. We support the very latest Bitcoin innovations in the Edge Version.”</li>
          <li>Catch up with latest releases</li>
          <li>Qualified for use with miniscript wallets, such as AnchorWatch</li>
          <li>Shared Changes - Both Mk4 and Q
            <ul>
              <li>Allow origin-less extended keys in multisig &amp; miniscript descriptors</li>
              <li>Static internal keys disallowed - all keys need to be ranged extended keys</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:52:47 Sparrow Wallet <a href="https://github.com/sparrowwallet/sparrow/releases/tag/2.1.3">v2.1.3</a>
    <ul>
      <li>OneKey Pro and Classic 1S hardware wallet support</li>
      <li>Update BIP329 wallet labels export to include additional fields</li>
      <li>Make BIP329 wallet labels import and export scannable</li>
      <li>Add Copy Payment Code item to the transaction diagram outputs context menu for BIP47 outputs</li>
      <li>Add Show Transaction as QR button to signed transaction tabs when offline</li>
      <li>Upgrade libusb to v1.0.27 on all platforms</li>
      <li>Add specific handling for invalid Windows device drivers on Trezor devices</li>
      <li>Handle scanning and pasting server URLs in the Electrum (x.x.x.x:n:t/s) format</li>
      <li>Additionally check for Trezor model against internal name and improve exception handling on no match</li>
    </ul>
  </li>
  <li>00:54:33 Lark <a href="https://github.com/sparrowwallet/larkapp/releases/tag/1.1.0">v1.1.0</a>
    <ul>
      <li>Add support for OneKey Pro and Classic 1S</li>
      <li>Validate and sanitize multisig wallet names on Jade, BitBox02 and Ledger</li>
      <li>Remove unnecessary public key field from BitBox02 pairing config</li>
      <li>Add the Jade Plus to udev rules</li>
      <li>Upgrade libusb to 1.0.27</li>
      <li>Throw an error if trying to sign a Taproot input on legacy Ledger firmware</li>
      <li>Additionally check for Trezor model against internal name and improve exception handling on no match</li>
      <li>Support Coldcard P2TR address display and show correct address for script type on message sign</li>
      <li>Add specific handling for invalid Windows device drivers on Trezor devices</li>
    </ul>
  </li>
  <li>00:55:03 Krux <a href="https://github.com/selfcustody/krux/releases/tag/v25.03.0">v25.03.0</a>
    <ul>
      <li>Taproot and WSH Miniscript support
        <ul>
          <li>Add an indented visualization of Miniscripts for improved readability</li>
          <li>Implement Miniscripts policy and cosigner verification</li>
          <li>Support custom derivations</li>
          <li>Detect unspendable internal keys in Taproot</li>
          <li>Include various UI and settings adjustments</li>
        </ul>
      </li>
      <li>Easter Eggs Reveal
        <ul>
          <li>Hints have been introduced to help users discover hidden features, such as:
            <ul>
              <li>Swiping sideways to change the keypad keyset</li>
              <li>Switching between camera modes</li>
              <li>Adjusting QR code brightness</li>
              <li>Rearranged Keypad Keysets</li>
              <li>Keypad keysets were organized to group similar keys and help with visibility</li>
            </ul>
          </li>
          <li>More Camera Modes
            <ul>
              <li>A zoomed camera mode is now available for all cameras</li>
              <li>An anti-glare mode has been added for the GC0328 camera</li>
            </ul>
          </li>
          <li>More Intuitive Tamper Check
            <ul>
              <li>The Tamper Check Flash Hash is now displayed immediately after generating the Tamper Check code</li>
            </ul>
          </li>
          <li>Display Customization Options
            <ul>
              <li>Screen orientation can now be flipped on Yahboom and WonderMV devices</li>
            </ul>
          </li>
          <li>SD Card PSBT Signing Preserves All Fields
            <ul>
              <li>When signing PSBTs via SD card, all fields—including signatures from other keys—are preserved</li>
              <li>This ensures a seamless signing process across multiple devices and locations, allowing a single PSBT file to be incrementally signed by different signers</li>
            </ul>
          </li>
          <li>Other Bug Fixes and Optimizations
            <ul>
              <li>New encrypted mnemonics now display a key strength score during confirmation</li>
              <li>Address scanning for Blue Wallet has been updated to match its revised export format</li>
              <li>A faster algorithm for double mnemonic calculation has been introduced</li>
              <li>PSBT change detection has been made more restrictive</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:56:37 Cove Wallet
    <ul>
      <li><a href="https://github.com/bitcoinppl/cove/releases/tag/v0.2.1">v0.2.1</a>
        <ul>
          <li>Add more plausible deniability to decooy PIN mode
            <ul>
              <li>Pretend to change PIN and trick PINs in the settings screen</li>
            </ul>
          </li>
          <li>Make it easier to click the “Change PIN” button in the settings screen</li>
        </ul>
      </li>
      <li><a href="https://t.co/OATM9ky13M">iOS Beta</a>, is now available on TestFlight [<a href="https://x.com/covewallet/status/1895559787091271804">Announcement</a>]
        <ul>
          <li>It supports importing hardware wallets via NFC, file, and QR code.</li>
          <li>Key features include creating and backing up hot wallets, sending Bitcoin via PSBTs, managing multiple wallets, and connecting to personal nodes. Users can also set Trick Pins for added security and lock wallets with Face ID or a PIN.</li>
          <li>Upcoming updates will introduce CoinControl, TapSigner and SatsCard support, and UTXO locking/unlocking. An Android version is planned for release in a few months.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:59:09 Nunchuk Desktop <a href="https://github.com/nunchuk-io/nunchuk-desktop/releases/tag/1.9.43">v1.9.43</a> / Android <a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.9.64">v1.9.64</a>
    <ul>
      <li>New and improved encrypted group wallet:
        <ul>
          <li>End-to-end encrypted group wallet and communication</li>
          <li>Single-file recovery using wallet descriptors</li>
          <li>Compatibility with hardware signing devices</li>
          <li>Supports both standard multisig and Taproot multisig</li>
          <li>Automatic message deletion for enhanced privacy</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:00:32 BTCPayServer <a href="https://github.com/btcpayserver/btcpayserver/releases/tag/v2.0.7">v2.0.7</a>
    <ul>
      <li>Display fiat amount previews in Transaction Details page</li>
      <li>Greenfield: Adding endpoint to set server email settings</li>
    </ul>
  </li>
  <li>01:00:44 Bitcoin Keeper <a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v2.0.2">v2.0.2</a>
    <ul>
      <li>Redesign manage subscription screen</li>
      <li>Support External Key for Miniscript vaults</li>
      <li>Support Specter DIY for Miniscript vaults</li>
      <li>Improve ColdCard NFC integration</li>
      <li>Improve import old wallets speed</li>
    </ul>
  </li>
  <li>01:01:25 BlueWallet <a href="https://github.com/BlueWallet/BlueWallet/releases/tag/v7.1.0">v7.1.0</a>
    <ul>
      <li>Add support for importing minikeys (Casascius Coin, Satori Coin etc.)</li>
    </ul>
  </li>
  <li>01:02:08 Bitcoin Safe
    <ul>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.1.0">v1.1.0</a>
        <ul>
          <li>Support for Jade Plus</li>
          <li>Deb build</li>
          <li>Xpub import from USB signers for different accounts</li>
        </ul>
      </li>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.0.7">v1.0.7</a>
        <ul>
          <li>Add languages: 🇲🇲 Burmese - မြန်မာ, 🇰🇷 Korean - 한국어</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:03:15 Bitkey App <a href="https://github.com/proto-at-block/bitkey/releases/tag/app%2F2025.1.1">v2025.1.1</a>
    <ul>
      <li>Inheritance is here. You can now add a beneficiary of your Bitkey wallet in the app.</li>
      <li>It allows users to designate beneficiaries for their Bitcoin without sharing PINs or seed phrases</li>
    </ul>
  </li>
  <li>01:04:05 libwally-core <a href="https://github.com/ElementsProject/libwally-core/releases/tag/release_1.4.0">v1.4.0</a>
    <ul>
      <li>tx: Add caching to signature hash generation/PSBT signing making signing faster</li>
      <li>tx: Add support for generating Elements taproot signature hashes and signing Elements taproot inputs</li>
      <li>descriptor: Add support for “tr()/rawtr()” keyspend-only taproot descriptors</li>
      <li>descriptor: Add support for parsing Elements-core compatible descriptors, including taproot</li>
      <li>psbt: Add accessors for keypath/taproot related fields</li>
      <li>pset: Add support for ELIP-101 genesis hash</li>
      <li>psbt: Add support for serializing/parsing/combining signature-only PSBTs</li>
      <li>script: Add support for generating Elements p2tr scripts</li>
      <li>BIP85: Add support for deriving RSA keys via BIP85</li>
      <li>base64/psbt: Add support for parsing from known length (non-NUL terminated) strings</li>
      <li>build: Add Debian Bookworm docker build image</li>
    </ul>
  </li>
  <li>01:06:00 Bisq2 <a href="https://github.com/bisq-network/bisq2/releases/tag/v2.1.6">v2.1.6</a>
    <ul>
      <li>Security update: To enhance security for buyers, sellers must have sufficient reputation to secure a trade for the specified amount. See new formula.</li>
      <li>New features:
        <ul>
          <li>The new Profile Card comes with many features. Find the user profile details, trade terms, reputation, offers created and the public messages posted by clicking on the profile icon or profile name anywhere in the app.</li>
          <li>To improve on privacy, sensitive trade data will be automatically deleted after a certain period of time</li>
        </ul>
      </li>
      <li>Improvements: The create offer wizard has been consolidated into three steps to improve quickness and ease of use</li>
    </ul>
  </li>
  <li>01:06:04 RoboSats <a href="https://github.com/RoboSats/robosats/releases/tag/v0.7.4-alpha">v0.7.4-alpha</a>
    <ul>
      <li>You can now see LNp2pBot orders on RoboSats mobile app</li>
      <li>Order creation view now displays all available payment methods</li>
      <li>Changed URLs to https://robosats.org and new <a href="http://robosatsy56bwqn56qyadmcxkx767hnabg4mihxlmgyt6if5gnuxvzad.onion">onion</a> (#Robosats’ previous clearnet and onion domains are no longer accessible as the original maintainer, @Reckless_Satoshi, has been unreachable for months [<a href="https://njump.me/nevent1qqsgjgwu3avytceu8jw4sweemskm2xryj4ks05epg6amn5wgzqf8zwcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq35amnwvaz7tmwdaehgu3wwdshgum5wfskc6tp9e3k7mgpz4mhxue69uhhwmm59ehx7um5wgh8qctjw3usygzr2gmcmlvu25h0cqeq8mqvu2yx224lpu2nnx4sdq2jz6hg825eeq7quaul">Note</a>])</li>
      <li>Libraries updates</li>
    </ul>
  </li>
  <li>01:06:08 Boltz Exchange
    <ul>
      <li>boltz-client <a href="https://github.com/BoltzExchange/boltz-client/releases/tag/v2.4.0">v2.4.0</a>
        <ul>
          <li>With this release, boltz-client will start to use the highly anticipated Discount CT on the Liquid Network and introduces a new pro configuration option for using Boltz Pro fee rates</li>
        </ul>
      </li>
      <li>boltz-web-app <a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.6.2">v1.6.2</a>
        <ul>
          <li>Transaction broadcasts via block explorer</li>
          <li>Add tropykus and speed as integrations</li>
        </ul>
      </li>
      <li>boltz-backend <a href="https://github.com/BoltzExchange/boltz-backend/releases/tag/v3.9.1">v3.9.1</a>
        <ul>
          <li>Add custom fees and limits based on referrals</li>
          <li>Fixes for RSK swap</li>
          <li>Fixes for handling CLN xpay payment failures</li>
          <li>Lightning network information API</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:06:10 Zaprite <a href="https://help.zaprite.com/en/articles/10576355-zaprite-release-notes-2025-02-17">v2025-02-17</a>
    <ul>
      <li>Copy Contact ID: Add an option to copy the Contact ID from the View Contact page</li>
      <li>Improve the UI for Bank/Wire Transfer payment information on our Checkouts</li>
      <li>Update the Delete Transaction modal to show more helpful messaging.</li>
      <li>Adjust login/sign-up page to fallback and use a Recaptcha Puzzle when necessary</li>
    </ul>
  </li>
  <li>01:06:13 Blockstream Explorer API <a href="https://blog.blockstream.com/introducing-the-new-blockstream-explorer-api-faster-easier-and-more-transparent/">Update</a>
    <ul>
      <li>New features include a 99.9% SLA, transparent pricing, and an open beta with a free tier for developers.</li>
      <li>Built on open-source Esplora, the API simplifies blockchain data access, supporting wallets, exchanges, and other applications.</li>
    </ul>
  </li>
  <li>01:07:22 Mempal <a href="https://github.com/aeonBTC/Mempal/releases/tag/v1.5.2">v1.5.2</a>
    <ul>
      <li>Add welcome screen with quick tips</li>
      <li>Add hashrate, difficulty, and adjustments to dashboard</li>
      <li>Modify widget auto-refresh intervals</li>
    </ul>
  </li>
  <li>01:07:29 Iris Wallet desktop <a href="https://github.com/RGB-Tools/iris-wallet-desktop/releases/tag/0.1.2">v0.1.2</a> - First experimental release
    <ul>
      <li>Attached you can find 2 versions running on different bitcoin networks, testnet and a shared public regtest.</li>
      <li>For the latter you can use our <a href="https://t.me/rgb_lightning_bot">telegram bot</a> to get some funds and play around.</li>
    </ul>
  </li>
  <li>01:07:31 Utreexo
    <ul>
      <li><a href="https://github.com/utreexo/utreexo/releases/tag/v0.4.0">v0.4.0</a>
        <ul>
          <li>Export <code class="language-plaintext highlighter-rouge">detectOffset</code></li>
        </ul>
      </li>
      <li><a href="https://github.com/utreexo/utreexo/releases/tag/v0.3.3">v0.3.3</a>
        <ul>
          <li>Export parent util functions</li>
        </ul>
      </li>
      <li><a href="https://github.com/utreexo/utreexo/releases/tag/v0.3.2">v0.3.2</a>
        <ul>
          <li>Export <code class="language-plaintext highlighter-rouge">childMany</code>, <code class="language-plaintext highlighter-rouge">leftChild</code>, and <code class="language-plaintext highlighter-rouge">rightChild</code></li>
        </ul>
      </li>
      <li><a href="https://github.com/utreexo/utreexo/releases/tag/v0.3.1">v0.3.1</a>
        <ul>
          <li>Export <code class="language-plaintext highlighter-rouge">detectRow</code></li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:07:34 ESP Miner <a href="https://github.com/skot/ESP-Miner/releases/tag/v2.6.0b8">v2.6.0b8</a>
    <ul>
      <li>Show firmware updates on the display</li>
      <li>Trim spaces from SSID</li>
      <li>Add sorting switch to swarm page for hostname and ip</li>
      <li>Show share reject reasons</li>
      <li>Remove unit test workaround for qemu</li>
      <li>Frequency transition</li>
    </ul>
  </li>
  <li><a href="https://utxo.live/oracle/">UTXOracle</a> is now available again [<a href="https://x.com/SteveSimple/status/1889325264808677668">Announcement</a>]
    <ul>
      <li>UTXOracle is a tool that estimates Bitcoin’s daily price by analyzing on-chain transactions, avoiding reliance on exchange rates</li>
      <li>The tool uses a method involving clusters of on-chain payments at round USD amounts to calculate the price, offering an alternative to exchange-based averages</li>
    </ul>
  </li>
  <li>Metamask announces “full bitcoin support” for Bitcoin within its wallet coming in Q3 2025 [<a href="https://metamask.io/en-GB/news/metamask-roadmap-2025">Roadmap</a>]</li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>01:07:38 <a href="https://bitcoinops.org/en/tools/reorg-calculator/">Reorg Calculator</a>: A calculator to estimate the probability of an attacker reorganizing <code class="language-plaintext highlighter-rouge">z</code> blocks, considering their hash power and the time ratio (<code class="language-plaintext highlighter-rouge">κ</code>)</li>
  <li>01:07:51 Bitcoin Core Config Generator: A TUI for generating Bitcoin Core configuration [<a href="https://github.com/jurraca/core-config-tui">Github</a>]
    <ul>
      <li>Provides an interactive terminal interface to generate bitcoin.conf files for Bitcoin Core.</li>
      <li>Features include form-based configuration, real-time validation, and conditional field display.</li>
    </ul>
  </li>
  <li>01:09:05 <a href="https://bitcoin-snapshots.jaonoctus.dev/">Bitcoin Core Snapshots</a>: Fast-track your node setup with pre-synced blockchain data [<a href="https://github.com/jaonoctus/bitcoin-snapshots-react">Github</a>]
    <ul>
      <li>The website offers verified Bitcoin blockchain snapshots at specific points, reducing initial sync time for new nodes</li>
      <li>Snapshots are available for mainnet (pruned at block height 885,445), testnet4 (full at block height 71,808), and signet (full at block height 237,052)</li>
    </ul>
  </li>
  <li>01:09:11 Boot Protocol: A decentralized protocol for bitcoin hashing nodes to share block rewards and reduce variance [<a href="https://github.com/gridlabs-science/boot-protocol">Github</a>]
    <ul>
      <li>The protocol aims to solve Bitcoin mining centralization by enabling miners to share block rewards without traditional pools. It reduces variance up to 16x compared to solo mining while maintaining decentralization.</li>
      <li>The system operates through a “Winners List” of 15 addresses that have provided the highest difficulty hashes. Block rewards are split between these addresses and the block finder’s address.</li>
    </ul>
  </li>
  <li>01:09:18 <a href="https://multisigbackup.com/">multisig-backup</a>: Encrypt and inscribe your k-of-n multisig descriptor — recover with any k seeds [<a href="https://github.com/joshdoman/multisig-backup">Github</a>]
    <ul>
      <li>Sensitive data, such as master fingerprints and xpubs, is encrypted to prevent unauthorized decryption, requiring multiple seeds to recover the descriptor.</li>
      <li>It utilizes Shamir’s Secret Sharing and ChaCha20 for encryption, and integrates with hardware wallets for the recovery process.</li>
    </ul>
  </li>
  <li>01:10:04 <a href="https://github.com/thunderbiscuit/regtest-in-a-pod">regtest-in-a-pod</a>
    <ul>
      <li>Companion to the Using Podman Containers for Regtest Bitcoin Development blog article.</li>
      <li>Allows you to create a robust regtest environment which you can turn on and off at will using Podman. The final environment includes a lot of useful tools, namely:
        <ul>
          <li>A bitcoin core node and daemon (serving compact block filters)</li>
          <li>bitcoin-cli enabled</li>
          <li>An Electrum server</li>
          <li>An Esplora server</li>
          <li>A block explorer</li>
          <li>Useful just commands for working with the daemon from your command line</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:09:58 Wallet backup: A document standardizing Bitcoin wallet backup formats [<a href="https://github.com/pythcoiner/wallet_backup">Github</a>]
    <ul>
      <li>The document proposes a JSON-based format to export wallet data, including accounts, descriptors, keys, labels, transactions, and PSBTs.</li>
    </ul>
  </li>
  <li>Explora: A visual tool to follow a chain of transactions [<a href="https://github.com/lontivero/explora">Github</a>]
    <ul>
      <li>The tool utilizes APIs from mempool.space and ankr.com to retrieve transaction data</li>
      <li>Users can input a transaction ID, view transaction details, and navigate through related inputs and outputs</li>
    </ul>
  </li>
  <li>Panopticon: A tool to monitor Bitcoin addresses privately [<a href="https://github.com/OliverOffing/panopticon">Github</a>]
    <ul>
      <li>Users receive alerts from their own Electrum server, while notifications are sent locally, not through Google or Apple’s notification systems.</li>
    </ul>
  </li>
  <li>brute-samourai: A resumable samourai.txt backup file cracker, written in Go [<a href="https://github.com/ottosch/brute-samourai">Github</a>]
    <ul>
      <li>A tool that enables brute-force attacks on Samourai Wallet backup files, based on <a href="https://github.com/cculianu/brute38">Calin Culianu’s brute38</a></li>
      <li>Users can specify character sets, passphrase lengths, patterns, or input files.</li>
    </ul>
  </li>
  <li><a href="https://www.modulo.network/key">Genesis Key</a>: A 256-bit private key designed for durable offline Bitcoin storage
    <ul>
      <li>The key ensures privacy by avoiding electronics and microchips, with entropy generated offline.</li>
    </ul>
  </li>
  <li><a href="https://www.21e15.com/">21e15</a>: A Micro-Seed kit to stamp seed phrases on a single stainless steel washer
    <ul>
      <li>The kit allows users to store up to 240 characters (120 per side) on a quarter-sized washer.</li>
    </ul>
  </li>
  <li><a href="https://cypherbox.io/">Cypherbox</a>: A modular Bitcoin-Lightning application for self-custody [<a href="https://github.com/Bamskki/Cypher-Box">Github</a>]
    <ul>
      <li>Cypherbox is a fork of BlueWallet v6.5.1, made to onboard newer users to advanced self-custody, supports integration with hardware wallets, and utilizes the Coinos.io API.</li>
    </ul>
  </li>
  <li><a href="https://www.bitspenda.app/">BitSpenda</a>: Send bitcoin and receive mobile money instantly. No account. No KYC.
    <ul>
      <li>BitSpenda allows users to send Bitcoin, converting it into mobile money for recipients in Ghana, with plans for expansion.</li>
    </ul>
  </li>
  <li><a href="https://coinflip.casino/setup">Coinflip</a>: A PoC exploring multiparty contracts on Ark
    <ul>
      <li>Real-time coordination is achieved through Nostr, while Ark handles validation and settlement.</li>
    </ul>
  </li>
  <li><a href="https://ajtowns.github.io/bfg/">Bitcoin Forking Guide</a>: A guide aimed at achieving consensus before code changes
    <ul>
      <li>The guide outlines a six-phase process: Research and Development, Power User Exploration, Industry Evaluation, Investor Review, Finalization, and Activation.</li>
    </ul>
  </li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>01:11:56 JavaScript injection attack: Safe{Wallet} confirms targeted TraderTraitor attack on Bybit resulting in $1.4 billion stolen [<a href="https://docsend.com/view/s/rmdi832mpt8u93s7">Bybit’s Audit report</a>] [<a href="https://x.com/safe/article/1897663514975649938">Safe{Wallet} Investigation update</a>]
    <ul>
      <li>Forensic analysis confirms that the threat group TraderTraitor successfully compromised a Safe{Wallet} developer’s machine, extracted AWS session tokens from that machine in order to bypass multi-factor authentication.</li>
      <li>It then enabled the attackers to target Bybit by spoofing their UI interface during transaction signing.</li>
      <li>“As @adam3us suggests, #Web3 and #DeFi visibility is a general intrinsic problem of ALL Hardware Wallets, not of a specific vendor. A low power, air-gapped, small screen device will never be a good place to verify a complex Web3 or DeFi transaction.” [<a href="https://x.com/TalBeerySec/status/1893967728861458682">Tal Be’ery</a>]</li>
    </ul>
  </li>
  <li>01:15:05 Malicious PyPI package ‘set-utils’ steals Ethereum private keys by hooking wallet functions [<a href="https://thehackernews.com/2025/03/this-malicious-pypi-package-stole.html">The Hacker News</a>]
    <ul>
      <li>The ‘set-utils’ package, mimicking popular Python utilities, targeted software wallet developers.</li>
      <li>It intercepted Ethereum private keys during wallet creation and exfiltrated them through regular on-chain transactions.</li>
    </ul>
  </li>
  <li>Brain Wallet vulnerability?: A user withdraws 0.024 and 0.06 bitcoin from an exchange to a low-entropy or compromised <a href="https://mempool.space/address/bc1q975yfv05ezuake5hsv4q8h9ux2scc7z3guyayw">address</a> [<a href="https://x.com/mononautical/status/1895639824197206352">Twitter post</a>]
    <ul>
      <li>Bots snipped both transactions from the mempool and stole the funds within milliseconds, ensuing a Replace-By-Fee bidding war burning the entire amount in fees.</li>
    </ul>
  </li>
  <li>01:16:57 OpenSSH vulnerabilities expose clients and servers to attacks [<a href="https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt">Qualys Security Advisory</a>]
    <ul>
      <li>The Qualys Threat Research Unit has identified two OpenSSH vulnerabilities:
        <ul>
          <li>CVE-2025-26465: MitM attack against OpenSSH’s VerifyHostKeyDNS-enabled client: allows machine-in-the-middle attacks when the VerifyHostKeyDNS option is enabled, even without user interaction.</li>
          <li>CVE-2025-26466: DoS attack against OpenSSH’s client and server: permits pre-authentication denial-of-service attacks, consuming system resources and potentially disrupting SSH services.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:17:05 USB side-channel attacks: A new privacy threat through hub congestion [<a href="https://cyberinsider.com/new-usb-side-channel-attack-exposes-keystrokes-and-browsing-activity/">CyberInsider</a>]
    <ul>
      <li>Security researchers discover a novel USB side-channel attack that exploits hub congestion to monitor user activities without physical access or malware installation. The attack analyzes traffic patterns in shared USB bus architecture.</li>
      <li>The keystroke recovery attack uses a rogue USB mouse to detect typing patterns, achieving 36.3% accuracy for password prediction within top 10 guesses. Website fingerprinting attacks reach 83.4% accuracy in identifying visited sites.</li>
    </ul>
  </li>
  <li>01:17:37 Cellebrite: Critical Android security flaws exploited to target student activist in Serbia [<a href="https://techcrunch.com/2025/02/28/researchers-uncover-unknown-android-flaws-used-to-hack-into-a-students-phone/">TechCrunch</a>]
    <ul>
      <li>Amnesty International discovers three zero-day vulnerabilities in Android’s Linux USB kernel, potentially affecting over a billion devices. Google has since fixed these flaws, which were used by Cellebrite’s forensic tools to unlock phones.</li>
      <li>The vulnerabilities were uncovered during an investigation of a Serbian student activist’s phone, who was targeted by the Serbian Security Information Agency. The authorities used Cellebrite software to unlock the Samsung A32 phone without consent.</li>
    </ul>
  </li>
  <li>01:17:49 Messengers vulnerabilities:
    <ul>
      <li>Meshtastic firmware vulnerability allows user impersonation [<a href="https://www.hackster.io/news/mqtt-flaw-leads-to-impersonation-attack-vulnerability-in-meshtastic-firmware-2-5-18-and-lower-049f73b2d09e">Disclosure</a>]
        <ul>
          <li>A flaw was discovered in Meshtastic firmware versions up to 2.5.18, enabling attackers to send messages that appear as if sent by any user.</li>
          <li>The vulnerability involved crafting MQTT messages misinterpreted as direct text messages. However, it did not bypass PKI but caused packets to be displayed as received via PKI when actually sent using the channel key.</li>
        </ul>
      </li>
      <li>EvilLoader: Android Telegram vulnerability enables malicious APK distribution through fake video files [<a href="https://www.mobile-hacker.com/2025/03/05/evilloader-unpatched-telegram-for-android-vulnerability-disclosed/">Mobile Hacker</a>]
        <ul>
          <li>It works by manipulating HTML files with MP4 extensions, causing Telegram to misidentify them as legitimate videos. When users attempt to play these files, they are prompted to install external applications that could contain malware.</li>
        </ul>
      </li>
      <li>Russian hackers exploit Signal’s device-linking feature for espionage [<a href="https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger">Google Threat Intelligence Group</a>]
        <ul>
          <li>Attackers send phishing messages with spoofed QR codes, tricking victims into linking their Signal accounts to devices controlled by the hackers, enabling real-time message interception without full device compromise.</li>
          <li>Google’s Threat Intelligence Group warns that these techniques may be used against other encrypted messaging services like WhatsApp and Telegram.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:17:56 GitVenom: A cryptocurrency theft campaign using fake GitHub projects [<a href="https://securelist.com/gitvenom-campaign/115694/">Secure List</a>]
    <ul>
      <li>Threat actors have created hundreds of fake GitHub repositories, posing as legitimate projects like Instagram automation tools and Bitcoin wallet managers.</li>
      <li>These repositories contain malicious code that deploys stealers and backdoors, to compromise users’ systems.</li>
      <li>A clipboard hijacker within the malicious code replaces copied cryptocurrency wallet addresses with attacker-controlled ones.</li>
    </ul>
  </li>
  <li>01:18:10 Stablecoin payment firm Infini loses $50M in exploit, developer deception suspected [<a href="https://cointelegraph.com/news/infini-loses-50-m-in-exploit-developer-deception-suspected">Coin Telegraph</a>]
    <ul>
      <li>The firm lost $50 million in USDC due to an exploit by a rogue developer who retained administrative privileges after project completion.</li>
    </ul>
  </li>
  <li>01:18:18 Five dollar wrench attacks:
    <ul>
      <li><a href="https://www.enca.com/business/cryptocurrency-adds-new-twist-kidnapping-ransom-demands">eNCA Report</a>: Cryptocurrency is becoming a more common method for ransom demands in modern kidnappings
        <ul>
          <li>Crime expert Yusuf Abramjee reports a rise in kidnapping cases with many involving express kidnappings or ransom demands.</li>
          <li>Kidnapping operations have become more sophisticated, with specialized teams handling different stages such as tracking, abduction, and ransom negotiations.</li>
        </ul>
      </li>
      <li>Streamer Amouranth, reports being attacked in a home invasion by armed intruders demanding cryptocurrency [<a href="https://www.dailystar.co.uk/news/us-news/streamer-amouranth-covered-blood-after-34784758">Daily Star</a>]
        <ul>
          <li>She says they pulled her from bed, pistol-whipped her, and forced her to log into her phone at gunpoint.</li>
          <li>Amouranth previously <a href="https://gamerant.com/amouranth-bitcoin-balance/">revealed</a> her $20 million bitcoin holdings to her audience.</li>
        </ul>
      </li>
      <li>In Vietnam, a Chinese man was successfully rescued from kidnappers by Ho Chi Minh City police [<a href="https://tuoitrenews.vn/news/society/20250306/ho-chi-minh-city-police-free-chinese-man-from-chinese-kidnapping-ring/85050.html">Tuoi Tre News</a>]
        <ul>
          <li>The criminal group, consisting of three Chinese nationals and three Vietnamese accomplices, attempted to extort 600,000 USDT from their victim, who was held in a remote area.</li>
        </ul>
      </li>
      <li>Six men are accused of kidnapping and holding hostage a family and a nanny for five days, in October 2024, demanding $15 million in cryptocurrency. [<a href="https://archive.ph/pavf4#selection-1765.4-2105.32">Chicago Tribune</a>]
        <ul>
          <li>The FBI arrested one suspect in January, while others are believed to have fled to China. Around $9 million of the ransom remains unaccounted for.</li>
        </ul>
      </li>
      <li>South Korean police arrest four individuals linked to the murder of a Chinese man in Jeju Island [<a href="https://decrypt.co/307859/south-korea-police-arrest-four-murder-stabbing">Decrypt</a>]
        <ul>
          <li>The victim had traveled to Jeju Island to conduct a private cryptocurrency transaction of about $52,500.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="audience-questions">Audience Questions</h3>
<ul>
  <li>Thanks to everyone who sent in questions. Remember to send yours to questions@bitcoin.review.
    <ul>
      <li>01:20:00 Audience question for guests to comment on a flaw in Bitcoin Core regarding mining pools and their vulnerability against block withholding attacks, referring to <a href="https://x.com/sgbarbour/status/1892213052030038148">this post</a> -@anon</li>
    </ul>
  </li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>SimpleX
    <ul>
      <li><a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.3.0">v6.3.0</a>
        <ul>
          <li>Better groups:
            <ul>
              <li>Mention members and get notified when mentioned</li>
              <li>Send private reports to moderators</li>
              <li>Delete, block and change role for multiple members at once (Android and desktop only)</li>
              <li>Faster sending messages and faster deletion</li>
              <li>Better chat navigation</li>
            </ul>
          </li>
          <li>Organize chats into lists to keep track of what’s important:
            <ul>
              <li>Jump to found and forwarded messages</li>
              <li>Better privacy and security</li>
            </ul>
          </li>
          <li>Private media file names:
            <ul>
              <li>Message expiration in chats</li>
            </ul>
          </li>
        </ul>
      </li>
      <li><a href="https://github.com/simplex-chat/simplex-chat/commit/7471fd2af5838dc0467aebc570b5ea75e5df3209">Privacy policy Update</a>
        <ul>
          <li>Add content license in groups, and stated that NO LICENSE is granted to the server operators or ourselves</li>
          <li>Add the conditions of access to preconfigured servers via modified 3rd party applications (The previous policy version prohibited it, unintentionally)</li>
          <li>Clarify definitions:
            <ul>
              <li>“Aggregate statistics” explicitly excludes any stats that can be related to particular users</li>
              <li>The content that can be removed changed from “identified illegal content” to “illegal content identified in publicly accessible resources”</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Sideband <a href="https://github.com/markqvist/Sideband/releases/tag/1.4.0">v1.4.0</a>
    <ul>
      <li>Add ability to export telemetry to MQTT brokers</li>
      <li>Add MQTT renderers for all telemetry types</li>
      <li>Add LXMF Propagation Node statistics sensor type to Telemeter</li>
      <li>Add RNS Transport statistics sensor type to Telemeter</li>
      <li>Add Connection Map sensor type to Telemeter</li>
      <li>Add periodic cleaning of old telemetry data from the database</li>
    </ul>
  </li>
  <li>NomadNet <a href="https://github.com/markqvist/NomadNet/releases/tag/0.6.1">v0.6.1</a>
    <ul>
      <li>Add tabs to the announce stream</li>
      <li>Improve LXMF propagation node list UI</li>
      <li>Add acceptance rate stat to propagation node list entries</li>
    </ul>
  </li>
  <li>Rdsys <a href="https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/tags/1.0">v1.0</a> - First Rdsys table version
    <ul>
      <li>The Tor Project replaces BridgeDB with Rdsys for distributing bridges
        <ul>
          <li>moat: the type of the captcha bridge response is ‘moat-bridges’</li>
          <li>bridgedb-metrics: use country if available</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Mullvad partners with Obscura VPN and launches a “two-party VPN service that uses our WireGuard VPN servers as its exit hop”. [<a href="https://mullvad.net/en/blog/mullvad-partnered-with-obscura-vpn">Announcement</a>]
    <ul>
      <li>Obscura’s custom protocol, based on QUIC, mimics HTTP/3 to bypass firewalls and censorship.</li>
    </ul>
  </li>
  <li>Mynymbox launches email hosting service [<a href="https://x.com/mynymbox/status/1889084204643733741">Announcement</a>]
    <ul>
      <li>Mynymbox introduces a privacy-oriented email hosting service supporting POP3, IMAP, SMTP, and webmail. Users can bring their own domain and are not restricted to a specific email client.</li>
    </ul>
  </li>
  <li>Kagi now offers Privacy Pass, a cryptographic protocol that ensures user authentication without tracking personal data or searches [<a href="https://blog.kagi.com/kagi-privacy-pass">Announcement</a>]
    <ul>
      <li>The protocol adds an extra privacy layer by unlinking user searches from their identity.</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li>Rayhunter: Rust tool to detect cell site simulators on an orbic mobile hotspot [<a href="https://github.com/EFForg/rayhunter">Github</a>]
    <ul>
      <li>Rayhunter is an open-source tool that runs on affordable Orbic RC400L mobile hotspots to detect cell-site simulators used for mobile surveillance.</li>
      <li>The tool monitors control traffic between mobile networks and hotspots, alerting users to suspicious activities through a simple color-coded interface and storing detailed logs for expert analysis.</li>
    </ul>
  </li>
  <li>RAVA: an Open Hardware True Random Number Generator based on Avalanche Noise [<a href="https://github.com/gabrielguerrer/rng_rava">Github</a>]
    <ul>
      <li>RAVA is an open-source True Random Number Generator offering high-quality entropy with independent random bit generation.</li>
      <li>It features dual entropy cores, differential design, and full transparency with accessible hardware and software for customizability and integration.</li>
    </ul>
  </li>
  <li><a href="https://privx.li/">PrivX</a>: A secure, private pastebin alternative without JavaScript [<a href="https://github.com/TorDotWatch/privx">Github</a>]
    <ul>
      <li>It features AES-256 encryption, assigning unique keys to each paste, and employs a zero-knowledge architecture, preventing administrators from accessing stored data.</li>
      <li>PrivX is a fork of <a href="https://github.com/IncognitoBin/IncognitoBin">IncognitoBin</a>, and is also available on Tor <a href="http://5ubt5q7iirvcgrdeykiul77lvu5gnw3fsdhrh2jhrdn2kq35l4qoetyd.onion/">Onion</a>.</li>
    </ul>
  </li>
  <li><a href="https://cypherhub.onrender.com/">CypherHub</a>: A verifiably secure dead drop for sharing Bitcoin addresses and other secrets [<a href="https://stacker.news/items/901870">Description</a>]
    <ul>
      <li>A tool for sharing Bitcoin addresses and confidential information without logging into accounts</li>
      <li>Data encryption happens client-side in the browser, ensuring the server never receives unencrypted information. The recipient decrypts it using a shared password.</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>01:22:32 24242.io</li>
  <li>01:22:49 nostr.media</li>
  <li>01:22:58 <a href="https://www.frostr.org/">Frostr</a>: Simple t-of-n remote signing and key rotation protocol for nostr, using the powers of FROST [<a href="https://github.com/FROSTR-ORG">Github</a>]
    <ul>
      <li>FROSTR enables users to split their secret key into decentralized, distributable shares, enhancing security.</li>
      <li>Users can sign messages using t-of-n signing devices; if one share is compromised, the secret key remains safe.</li>
      <li>Shares can be discarded and replaced without changing the secret key or identity.</li>
    </ul>
  </li>
  <li>01:23:33 <a href="https://nostr-double-ratchet.iris.to/">nostr-double-ratchet</a>: Implementing double ratchet encryption in nostr [<a href="https://github.com/mmalmi/nostr-double-ratchet">Github</a>]
    <ul>
      <li>The implementation includes features such as invite links for secure session key exchange, with installation available via npm or yarn. (The project is currently a work in progress)</li>
    </ul>
  </li>
  <li>01:23:44 DVMCP: Bridging MCP servers to Nostr’s data vending machine ecosystem [<a href="https://github.com/gzuuus/dvmcp/">Github</a>]
    <ul>
      <li>DVMCP enables the integration of Model Context Protocol (MCP) servers with Nostr’s decentralized Data Vending Machine (DVM) ecosystem.</li>
      <li>The project includes packages for bridge implementation, discovery service for MCP tools, and shared utilities across components.</li>
    </ul>
  </li>
  <li>01:23:53 Samiz: BLE mesh for nostr notes when the internet is down [<a href="https://github.com/KoalaSat/samiz">Github</a>]
    <ul>
      <li>Samiz is a Bluetooth mesh system for sharing Nostr notes without internet, relying on local synchronization between devices.</li>
      <li>The system works by creating a session where devices near each other can automatically share and store notes, even in remote areas or during internet outages.</li>
    </ul>
  </li>
  <li>01:24:00 <a href="https://welshman.coracle.social/">Welshman</a>: A nostr toolkit focused on creating highly a configurable client system, extracted from the Coracle nostr client [<a href="https://github.com/coracle-social/welshman">Github</a>]
    <ul>
      <li>“A series of independent libraries for managing every aspect of your Nostr application.”</li>
    </ul>
  </li>
  <li>01:24:09 <a href="https://norma.network/">Norma</a>: A Nostr Relay Management Panel [<a href="https://github.com/Vin-it/norma">Github</a>]
    <ul>
      <li>Norma (Nostr Relay Manager), is a nostr client based on NIP-86 (Relay Management API)</li>
    </ul>
  </li>
  <li>01:24:20 Wallet Relay: High performance relay for enabling NWC &amp; Cashu Wallets [<a href="https://github.com/bitvora/wallet-relay">Github</a>]
    <ul>
      <li>“Wallet Relay is a specialized relay for wallet service providers to process NWC and Cashu Wallet events.”</li>
    </ul>
  </li>
  <li>01:24:27 <a href="https://nostr0.vercel.app/">Nostr0</a>: A web application that allows you to search and visualize Nostr events using npubs [<a href="https://github.com/Negr087/Nostr0">Github</a>]</li>
  <li>01:24:35 nAuth Protocol: decentralized two-party Authentication and secure document transmission [<a href="https://github.com/trbouma/safebox/blob/nauth-refactor/docs/NAUTH-PROTOCOL.md">Github</a>]
    <ul>
      <li>The nAuth protocol enables two parties to authenticate each other and securely share documents without third-party involvement</li>
      <li>Designed for scenarios like patient-physician interactions, nAuth allows either party to initiate authentication, accommodating devices with limitations such as the absence of a camera.</li>
    </ul>
  </li>
  <li>01:24:43 Hostr: Rental accommodation using purely peer-to-peer technologies such as Nostr [<a href="https://github.com/sudonym-btc/hostr">Github</a>]
    <ul>
      <li>The projects implements several NIPs: NIP-01 for event creation and subscription, NIP-05 for mapping Nostr keys to DNS-based identifiers, and NIP-33 for creating and updating listings and bookings.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Primal
    <ul>
      <li><a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.1.9">v2.1.9</a>
        <ul>
          <li>Multi-account feature</li>
          <li>Deep-linking</li>
          <li>Articles pagination</li>
          <li>Share photo/video via Primal app</li>
          <li>Bigger previews for Github links</li>
          <li>Legends contributions</li>
          <li>nevent with relay hints when copy note id</li>
          <li>nevent and nprofile when creating primal share links</li>
          <li>nevent and nprofile in the note editor for mentioned notes and users</li>
          <li>Ellipsis links in note content</li>
        </ul>
      </li>
      <li><a href="http://njump.me/nevent1qgspywh6ulgc0w3k6mwum97m7jkvtxh0lcjr77p9jtlc7f0d27wlxpsqypp92r7m4dnd9t2sf8uzju3l0wp3jhte5nx4lc7vjey2m4txq46r7lgzg8p">v2.1.6</a>
        <ul>
          <li>Improved feeds</li>
          <li>Deep linking threads, articles, profiles</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Coracle
    <ul>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.8">v0.6.8</a>
        <ul>
          <li>Correctly fetch and render NIP 22 comments</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.7">v0.6.7</a>
        <ul>
          <li>Add note info to DMs</li>
          <li>Make lnurl parsing more robust</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.6">v0.6.6</a>
        <ul>
          <li>Show complete website/lnurl</li>
          <li>Scan images for sensitive content</li>
          <li>Make muting on feeds more strict</li>
          <li>Apply muted words to nip05</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.1">v0.6.1</a>
        <ul>
          <li>Use wasted space on mobile notes</li>
          <li>Show PoW difficulty in settings</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/coracle/releases/tag/0.6.0">v0.6.0</a>
        <ul>
          <li>Add support for tor/local relays</li>
          <li>Use nstart for onboarding process</li>
          <li>Show more details on reaction notifications</li>
          <li>Improve mutes, add setting to completely hide muted people</li>
          <li>Add kind 20 rendering support</li>
          <li>Add pinned note support</li>
          <li>Remove broadcasting of note parents</li>
          <li>Add note scheduling via DVM</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Flotilla
    <ul>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.12">v0.2.12</a>
        <ul>
          <li>Make error reporting and analytics optional</li>
          <li>Replace long press with tap target</li>
          <li>Add reply to chat on mobile</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.11">v0.2.11</a>
        <ul>
          <li>Add in-app signup flow on ios</li>
          <li>Add profile deletion</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Iris <a href="https://njump.me/nevent1qqsvw58hj63rmlnmzvmv5nsrge9rfy8ghpx5ws2r4gh27afvt6s3ksspzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3qg53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngqywfgs9">Update</a>
    <ul>
      <li>Deploy double ratchet messaging (See Iris software release)</li>
    </ul>
  </li>
  <li>Yakihonne
    <ul>
      <li>Web <a href="https://njump.me/nevent1qgszpxr0hql8whvk6xyv5hya7yxwd4snur4hu4mg5rctz2ehekkzrvcqyr8alk7afvm2waes4wuhpq44rhdw49mn95k9asc7gqj2mmcf7n8d6shdg4n">v4.4.0</a>
        <ul>
          <li>Zap polls can now be added directly from the list or created instantly within notes and comments</li>
          <li>Muting users is now more reliable</li>
          <li>Users can download and export their NWC secret for wallets</li>
          <li>Wallets and account credentials are automatically saved upon signup and logout</li>
          <li>Faster login and signup when interacting with Yakihonne while logged out</li>
        </ul>
      </li>
      <li>Mobile <a href="https://njump.me/nevent1qgszpxr0hql8whvk6xyv5hya7yxwd4snur4hu4mg5rctz2ehekkzrvcqyr8alk7afvm2waes4wuhpq44rhdw49mn95k9asc7gqj2mmcf7n8d6shdg4n">v1.6.6</a>
        <ul>
          <li>Ability to export your NWC wallets and your keys</li>
          <li>Blink wallet is now available as one of the external wallets that can be used</li>
          <li>Private messages drafts are now available</li>
          <li>Notes stats optimised</li>
          <li>Wallet management overall performance has been improved</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>nos.social
    <ul>
      <li><a href="https://github.com/planetary-social/nos/releases/tag/v1.2.1-305">v1.2.1</a>
        <ul>
          <li>Add Lists view and two ways to navigate to it</li>
          <li>Add view for editing a list’s title and description</li>
          <li>Add List detail view</li>
          <li>Add view for managing users in a list</li>
          <li>Add ability to delete lists</li>
          <li>Add analytics for feed source selection and lists</li>
          <li>Internal Changes:
            <ul>
              <li>Add function for creating a new list and a test verifying list editing</li>
              <li>Localized strings on the feed filter drop-down view</li>
              <li>Audit codebase for strict access control and mutability annotations</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Keychat App
    <ul>
      <li><a href="https://github.com/keychat-io/keychat-app/releases/tag/1.27.2">v1.27.2</a> - Amber Login
        <ul>
          <li>Support for logging in or importing accounts using amber app</li>
          <li>Support for amber’s signMessage, signEvent, nip04, and nip44</li>
          <li>Refactored routing for the room settings page</li>
          <li>Browser support for sharing URLs to rooms</li>
        </ul>
      </li>
      <li><a href="https://github.com/keychat-io/keychat-app/releases/tag/1.26.8%2B6322">v1.26.8</a>
        <ul>
          <li>Add a scan button to the Cashu page</li>
          <li>Remove pubkeys from listening when disabling the chat identity</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Amber
    <ul>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.2.5">v3.2.5</a>
        <ul>
          <li>Add scroll bars</li>
        </ul>
      </li>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.2.3">v3.2.3</a>
        <ul>
          <li>Add translation string for sign_message method</li>
          <li>Add a log when encryption/decryption fails</li>
        </ul>
      </li>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.2.2">v3.2.2</a>
        <ul>
          <li>Allow to always reject permissions on the multi event screen</li>
          <li>Allow copying the bunker uri after connected</li>
          <li>Don’t try to url decode requests by native apps</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Algo Relay
    <ul>
      <li><a href="https://github.com/bitvora/algo-relay/releases/tag/v0.2.0">v0.2.0</a>
        <ul>
          <li>User Dashboard:
            <ul>
              <li>Allows any npub to login to the relay</li>
              <li>Ability to view the data used by the algorithm to generate a feed</li>
              <li>Ability to customize the weights to curate your own feed</li>
            </ul>
          </li>
        </ul>
      </li>
      <li><a href="https://github.com/bitvora/algo-relay/releases/tag/v0.1.5">v0.1.5</a>
        <ul>
          <li>Switch import back to 30 days</li>
          <li>Default to kind 1 if empty filter</li>
          <li>Sequential Migrations</li>
          <li>Page Handlers: introduces a new pattern to define static pages and api endpoints with a mux router</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>0xChat App <a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.7-beta">v1.4.7-beta</a>
    <ul>
      <li>Major Updates:
        <ul>
          <li>Private chat implementation changed to NIP-104 Nostr MLS (NIP-104 MLS is still in beta and should be used for testing purposes only.)</li>
        </ul>
      </li>
      <li>Other Updates:
        <ul>
          <li>NIP-17 and NIP-29 messages now support <code class="language-plaintext highlighter-rouge">q</code> tags</li>
          <li>You can swipe left to reply on your own messages</li>
          <li>Chat messages now support code block display</li>
          <li>Copy images from the clipboard</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nostur <a href="https://github.com/nostur-com/nostur-ios-public/releases/tag/1.18.1">v1.18.1</a>
    <ul>
      <li>Floating mini video player</li>
      <li>Videos:
        <ul>
          <li>Save to library</li>
          <li>Copy video URL</li>
          <li>Add bookmark</li>
        </ul>
      </li>
      <li>Improve video stream / chat view</li>
      <li>Top zaps on live chat</li>
      <li>Posting to Picture-first</li>
      <li>Profile view:
        <ul>
          <li>Show interactions with you (conversations, reactions, zaps, reposts)</li>
          <li>Show actual reactions instead of only Likes</li>
        </ul>
      </li>
      <li>Improve search + Bookmark search</li>
      <li>Detect nsfw / content-warning in posts</li>
      <li>‘Show more’ to show reactions outside Web of Trust</li>
      <li>‘Show more’ to show zaps outside Web of Trust</li>
      <li>Support .avif image format, .mp3, and .m4v video format</li>
      <li>Improve zap verification for changed wallets</li>
      <li>Improve outbox support</li>
      <li>Show label on restricted posts</li>
      <li>Low data mode: load media in app on tap instead of external browser</li>
    </ul>
  </li>
  <li>Nowser <a href="https://github.com/haorendashu/nowser/releases/tag/1.0.0">v1.0.0</a>
    <ul>
      <li>Linux webview support</li>
      <li>NIP46 encrypt and decrypt method change to NIP44</li>
      <li>i18n support</li>
      <li>Android signer try to get code by currentUser</li>
      <li>URL input support direct search someting</li>
      <li>Web URl input add suggestion</li>
    </ul>
  </li>
  <li>BitBanana
    <ul>
      <li><a href="https://github.com/michaelWuensch/BitBanana/releases/tag/v0.9.1">v0.9.1</a>
        <ul>
          <li>Pick first hop on lightning payments (LND)</li>
          <li>Rebalance channels (LND, use first and last hop in a self-payment)</li>
          <li>Inspect LND and Core Lightning logs</li>
          <li>Add search and verbosity filter to log view</li>
        </ul>
      </li>
      <li><a href="https://github.com/michaelWuensch/BitBanana/releases/tag/v0.9.0">v0.9.0</a>
        <ul>
          <li>Add Coin Control support</li>
          <li>“Send all” option</li>
          <li>Support for custom BlockExplorers on Regtest nodes</li>
          <li>Fixes for nodes with more than 500 outgoing lightning payments</li>
          <li>Performance improvements for nodes with lots of payments</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Kyoto <a href="https://github.com/rustaceanrob/kyoto/releases/tag/v0.9.0">v0.9.0</a>
    <ul>
      <li>Introduce log level and optimize release builds to remove heap allocations for debug messages</li>
      <li>Configure a custom DNS resolver</li>
    </ul>
  </li>
  <li>Mostro <a href="https://github.com/MostroP2P/mostro/releases/tag/0.13.2">v0.13.2</a>
    <ul>
      <li>Feat: Put the user’s reputation updated in the events</li>
      <li>Feat: Do not allow a taker to take multiple orders at once</li>
      <li>Shows relay list on relay list event job</li>
      <li>Fix on some full privacy cases</li>
      <li>Correct full privacy mode check when orders arrives</li>
    </ul>
  </li>
  <li>Grain <a href="https://github.com/0ceanSlim/grain/releases/tag/v0.3.0">v0.3.0</a>
    <ul>
      <li>Nostr Login &amp; Profile Page:
        <ul>
          <li>Introduce Nostr login to the front end, allowing users to authenticate using their Nostr key.</li>
          <li>Future updates will add more front-end functionality, including event management, delete requests, relay configuration for operators, and a dashboard with relay statistics.</li>
        </ul>
      </li>
      <li>User Sync (Experimental):
        <ul>
          <li>New user sync functionality allows the relay to sync events for its users from their outboxes.</li>
          <li>Add configurable sync options: define which event kinds to sync, define a limit of how many events to retrieve, and exclude non-whitelisted users from sync.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nostrmo <a href="https://github.com/haorendashu/nostrmo/releases/tag/2.9.6">v2.9.6</a>
    <ul>
      <li>This release mainly change remote signer (NIP-46) ‘s encrypt method from NIP-04 to NIP-44.</li>
    </ul>
  </li>
  <li>OpenLibrarian <a href="https://github.com/RydalWater/OpenLibrarian/releases/tag/v0.1.7">v0.1.7</a>
    <ul>
      <li>Add Book reviews</li>
      <li>NIP-07 Login</li>
      <li>Extensive client-side rebuild</li>
      <li>Add retries of <code class="language-plaintext highlighter-rouge">get_default_pages</code> on progress objects</li>
    </ul>
  </li>
  <li>GitPlaza: Nostr git stuff client for Desktop [<a href="https://codeberg.org/dluvian/gitplaza">Codeberg</a>]
    <ul>
      <li>GitPlaza is a Desktop Nostr client specialized in handling git stuff</li>
      <li><a href="https://codeberg.org/dluvian/gitplaza/releases/tag/v0.1.0">V0.1.0</a> - First release
        <ul>
          <li>Login via nsec</li>
          <li>Show activity feed of people you follow</li>
          <li>Create issues</li>
          <li>Comment on issues</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li>Chantools: Tools for managing LND and Lightning Network channels [<a href="https://github.com/lightninglabs/chantools">Github</a>]
    <ul>
      <li>Chantools is a collection of tools for managing LND and Lightning Network channels, especially in case of failures.</li>
      <li>It provides recovery options for scenarios like node crashes, missing backups, or issues with unconfirmed channels.</li>
    </ul>
  </li>
  <li><a href="https://hashpool.dev/">Hashpool</a>: An accountless mining pool that represents mining shares as ecash tokens [<a href="https://github.com/vnprc/hashpool">Github</a>]
    <ul>
      <li>The system utilizes “eHash” tokens, which are ecash tokens backed by proof of work rather than bitcoin. These tokens mature over time and can be traded as mining futures, allowing miners to hedge risks and buyers to purchase bitcoin at discounted rates.</li>
      <li>While Hashpool operates on a custodial basis through ecash mints, it offers perfect privacy through blind signatures. The platform enables small-scale miners to participate without KYC requirements and maintains no minimum withdrawal thresholds.</li>
    </ul>
  </li>
  <li><a href="https://t.me/zap_gram_bot">ZapGram</a>: Bitcoin Lightning Wallet on Telegram [<a href="https://github.com/mozharov/zapgram">Github</a>]
    <ul>
      <li>ZapGram integrates a Bitcoin Lightning wallet directly into Telegram, permits transactions within the messaging platform.</li>
    </ul>
  </li>
  <li><a href="https://questforsats.com/">Quest for Sats</a>: Geocaching with Bitcoin
    <ul>
      <li>Quest for Sats combines geocaching with Bitcoin, allow users to find hidden containers in their area and withdraw their earnings using a Lightning wallet.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>CLN <a href="https://github.com/ElementsProject/lightning/releases/tag/v25.02">v25.02</a>
    <ul>
      <li>Highlights for users:
        <ul>
          <li>Channel backup turns our peers into watchtowers by now allowing your node to generate penalty transactions</li>
          <li>Blacklisted runes can now be restored via <code class="language-plaintext highlighter-rouge">relist</code></li>
          <li>xpay has many, many bugfixes, and is now almost seamlessly compatible when <code class="language-plaintext highlighter-rouge">xpay-handle-pay</code> is used</li>
          <li><code class="language-plaintext highlighter-rouge">lightning-cli</code> has neater help output, and doesn’t crash occasionally on xpay notifications</li>
          <li><code class="language-plaintext highlighter-rouge">setconfig</code> does more safety checks and uses a separate “config.setconfig” file for runtime changes</li>
        </ul>
      </li>
      <li>Highlights for the network:
        <ul>
          <li>Splicing: stricter checking for better interoperability with Eclair.</li>
        </ul>
      </li>
      <li>Highlights for developers:
        <ul>
          <li>clnrest is now a rust plugin</li>
          <li><code class="language-plaintext highlighter-rouge">listpeerchannels</code> now contains fields<code class="language-plaintext highlighter-rouge">their_max_htlc_value_in_flight</code> and <code class="language-plaintext highlighter-rouge">our_max_htlc_value_in_flight</code> to better calculate channel limits</li>
          <li>New notifications <code class="language-plaintext highlighter-rouge">plugin_stopped</code> and <code class="language-plaintext highlighter-rouge">plugin_started</code></li>
          <li><code class="language-plaintext highlighter-rouge">fetchinvoice</code> now has BIP353 DNS payment instruction support</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Lightning Terminal <a href="https://github.com/lightninglabs/lightning-terminal/releases/tag/v0.14.1-alpha">v0.14.1</a>
    <ul>
      <li>This version of Lightning Terminal (LiT) ships the first update to the non-experimental version of Taproot Asset Channels</li>
      <li>Breaking changes
        <ul>
          <li>Taproot Asset Channels: Taproot Asset channels are NOT backward compatible with any previous version of Lightning Terminal</li>
          <li>Oracle RPC: The RPC protobuf definitions for the Price Oracle have changed. Asset exchange rates are now expressed as FixedPoint to achieve better precision</li>
          <li>Configuration changes: The configuration value and command line flag now needs a value and is no longer a boolean. The value now controls whether the node’s universe database can be accessed over RPC and either read or written to or both.</li>
          <li><code class="language-plaintext highlighter-rouge">litcli</code> changes: The Taproot Asset Channel related sub commands of <code class="language-plaintext highlighter-rouge">litcli ln</code> no longer require a custom macaroon to be specified, they now work with the default <code class="language-plaintext highlighter-rouge">lit.macaroon</code></li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Phoenix Wallet <a href="https://github.com/ACINQ/phoenix/releases/tag/android-v2.5.0">v2.5.0</a>
    <ul>
      <li>(android) Improved scanner performances: The scanner should be able to read QR codes faster, and do so on a wider range of devices</li>
      <li>Access to Tor now requires a third-party Tor Proxy VPN app (e.g. Orbot): With the Tor connection managed as a persistent VPN by a dedicated app, the connection is more stable, and background payments work much better.</li>
      <li>(ios) Display the final wallet balance in the home screen: Pending on-chain funds are now displayed in an updated window in the Home screen ; it also shows the funds available in the final wallet.</li>
      <li>(android) Removed legacy app: The old legacy app has now been removed. Along with other optimisations, this means the APK is now much smaller (16.5 MB instead of 72.5 MB).</li>
      <li>Note that there has been a major database rework in this version, which is not visible to the user but impacted many files in the project.</li>
    </ul>
  </li>
  <li>Phoenixd <a href="https://github.com/ACINQ/phoenixd/releases/tag/v0.5.0">v0.5.0</a>
    <ul>
      <li>Major rework of the internal payments db</li>
      <li>No more linux native build issues due to old toolchain, should build with no dependency on most recent distributions</li>
      <li>Rolling log file</li>
      <li>Fixed a memory leak in the TCP reconnection logic</li>
      <li>New <code class="language-plaintext highlighter-rouge">--seed-path</code> configuration option</li>
      <li>Ability to lookup outgoing payment by payment hash</li>
    </ul>
  </li>
  <li>Zeus <a href="https://github.com/ZeusLN/zeus/releases/tag/v0.10.0-rc5">v0.10.0-rc5</a>
    <ul>
      <li>Renewable channels</li>
      <li>NWC client support</li>
      <li>Ability to create multiple Embedded LND ‘node in the phone’ wallets</li>
      <li>Ability to delete Embedded LND wallets</li>
      <li>Embedded LND: v0.18.5-beta</li>
      <li>New share button (share ZEUS QR images)</li>
      <li>Activity: highlight filter icon when filters active</li>
      <li>Tools: Export Activity CSVs, Developer tools</li>
      <li>Activity: filter by max amount, memo, and note</li>
      <li>CLNRest: add payment timeout setting</li>
      <li>Receive: add advanced settings toggle</li>
      <li>ZEUS Pay: ability to delete addresses</li>
    </ul>
  </li>
  <li>Fedimint <a href="https://github.com/fedimint/fedimint/releases/tag/v0.6.0">v0.6.0</a> - On-Chain for Everyone
    <ul>
      <li>The on-chain wallet is no longer considered “expert-only”</li>
      <li>Other highlights since v0.5
        <ul>
          <li>Federation will now reject attempt to reuse ecash blind nonces, preventing possibility of loss of funds even in the event of client-side bugs and data corruption</li>
          <li>Fedimint will now query (configurable) external sources for feerate information to improve real time fee estimation</li>
          <li>On-chain feerate multiplier have been lowered, as it no longer needs to be as conservative</li>
          <li>LN payment events are now tracked, allowing tracking profit and fees statistics</li>
          <li>It’s now possible to customize LNv2 gateway fees</li>
          <li>Client recovery has been optimized and should be faster and use less data</li>
          <li>Core lightning gateway is no longer supported</li>
          <li>Work has been started on Iroh networking integration</li>
          <li>Fedimintd should use less memory now</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>Hub
        <ul>
          <li><a href="https://github.com/getAlby/hub/releases/tag/v1.15.0">v1.15.0</a> - Ian Goldberg
            <ul>
              <li>One-click connections for self-hosted hubs</li>
              <li>Add pagination to tx list</li>
              <li>Add peer and return_to query parameters to peer connection page</li>
              <li>Show app creation time in connection summary</li>
              <li>Show wallet pubkey on connection summary</li>
              <li>Add app cleanup page</li>
              <li>Add swap alert</li>
              <li>Show total and reserved balance in spending balance tooltip</li>
            </ul>
          </li>
          <li><a href="https://github.com/getAlby/hub/releases/tag/v1.14.2">v1.14.2</a> - Mike Godwin
            <ul>
              <li>In this release we also add some cool new widgets to the home screen and many new apps to the app store. Alby Hub now has a healthcheck indicator, better fiat support, NIP-44 encryption, and a way for self-hosters to support Alby! We’ve also added basic swap functionality to the node page so you can more easily manage your liquidity without having to open new channels.</li>
              <li>The Cashu backend was also updated - you can now recover stuck funds, and for new users you will have a recovery phrase which you can recover your funds in other wallets.</li>
              <li>New features:
                <ul>
                  <li>Add boltz.exchange swap out option</li>
                  <li>Add boltz swap in dialog</li>
                  <li>Use nip44 and versioning</li>
                  <li>PostgreSQL support</li>
                  <li>Enable multi-path payments in LND</li>
                  <li>Node page revamp for web and mobile</li>
                  <li>Display specific notes about counterparty above open channel buttons on increase incoming/outgoing flows</li>
                  <li>Show failure reason on transaction modal in transaction list</li>
                  <li>Add nostrcheck-server to Appstore</li>
                  <li>Add new apps to Hub’s Store (nostter, btcpay, coracle, lnbits)</li>
                  <li>Add new apps to appstore</li>
                  <li>Phoenixd subwallets</li>
                  <li>Add same counterparty alerts while opening channels</li>
                  <li>Currency switcher</li>
                </ul>
              </li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Go <a href="https://github.com/getAlby/go/releases/tag/v1.10.0">v1.10.0</a>
        <ul>
          <li>Support for PicknPay QRs</li>
          <li>BTC Map to find places to spend sats</li>
          <li>Improve Skeleton animations across the app</li>
        </ul>
      </li>
      <li>bitcoin-connect <a href="https://github.com/getAlby/bitcoin-connect/releases/tag/v3.7.0">v3.7.0</a>
        <ul>
          <li>Add alby hub</li>
          <li>Add coinos connector</li>
          <li>Add connection success screen</li>
          <li>Add slide up animation on modal open in mobile</li>
          <li>Add disconnect button while connecting a wallet</li>
          <li>Add NWA &amp; Alby Go</li>
        </ul>
      </li>
      <li>js-sdk
        <ul>
          <li><a href="https://github.com/getAlby/js-sdk/releases/tag/v4.1.0">v4.1.0</a>
            <ul>
              <li>Simplify NWA flow</li>
              <li>Add sign message method to Alby OAuth Client</li>
            </ul>
          </li>
          <li><a href="https://github.com/getAlby/js-sdk/releases/tag/v4.0.0">v4.0.0</a>
            <ul>
              <li>In this release the NWC deeplink flow is improved to better support different kinds of http-accessible wallets</li>
              <li>We also remove a dependency on an ESM event emitter package which was causing build errors in some projects</li>
              <li>New features
                <ul>
                  <li>New NWC deeplink flow to support other relays and wallet pubkeys</li>
                  <li>Add custom-timeout-values-for-requester-method</li>
                  <li>Custom <code class="language-plaintext highlighter-rouge">EventEmitter</code> classes</li>
                  <li>Add optional metadata field to <code class="language-plaintext highlighter-rouge">get_info</code> response</li>
                </ul>
              </li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Ark Labs HQ wallet-sdk <a href="https://github.com/ArkLabsHQ/wallet-sdk/releases/tag/v0.0.7">v0.0.7</a>
    <ul>
      <li>export <code class="language-plaintext highlighter-rouge">ArkAddress</code> and <code class="language-plaintext highlighter-rouge">VtxoTapscript</code></li>
      <li>Make the lib compatible with webpack</li>
      <li><code class="language-plaintext highlighter-rouge">Settle</code> implementation</li>
    </ul>
  </li>
  <li>Ark <a href="https://github.com/ark-network/ark/releases/tag/v0.5.0">v0.5.0</a> - Branch-only Signing Sessions and Connector Trees
    <ul>
      <li>New Features
        <ul>
          <li>Branch-only VTXO Tree Signing: Optimizes VTXO tree signing; drastically cuts down on the number of signatures you have to produce, making rounds quicker and less resource-intensive.</li>
          <li>Connector trees: Another notable addition is the move from a linear connector chain to a tree structure.</li>
        </ul>
      </li>
      <li>Optimizations
        <ul>
          <li>Network compatibility and transaction costs</li>
          <li>Round processing and client interaction</li>
          <li>Scalability improvements</li>
          <li>Client SDK API update</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Taproots assets <a href="https://github.com/lightninglabs/taproot-assets/releases/tag/v0.5.1">v0.5.1</a>
    <ul>
      <li>Database Migrations: <code class="language-plaintext highlighter-rouge">tapd</code> v0.5.1 contains non-revertible database migrations.</li>
      <li>Breaking changes
        <ul>
          <li>Downstream Projects: <code class="language-plaintext highlighter-rouge">litd</code> v0.14.x-alpha enhancements require both channel peers to upgrade to a <code class="language-plaintext highlighter-rouge">litd</code> version &gt;= v0.14.0-alpha to continue Lightning Channel functionality</li>
          <li><code class="language-plaintext highlighter-rouge">tapd</code> v0.5.x changes
            <ul>
              <li>Oracle RPC: The RPC protobuf definitions for the Price Oracle have changed</li>
              <li>Configuration changes: The configuration value and command line flag now needs a value and is no longer a boolean</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>lightning-kmp <a href="https://github.com/ACINQ/lightning-kmp/releases/tag/v1.9.0">v1.9.0</a>
    <ul>
      <li>Rename<code class="language-plaintext highlighter-rouge">OfferIssuerId</code></li>
      <li>Simplify outgoing payment state machine</li>
      <li>Remove support for <code class="language-plaintext highlighter-rouge">push_amount</code></li>
      <li>Use shared input’s txOut in <code class="language-plaintext highlighter-rouge">shouldSignFirst</code></li>
      <li>Make the project multi-modules</li>
      <li>Correctly set <code class="language-plaintext highlighter-rouge">next_commitment_number</code> during splice reconnect</li>
      <li>Add <code class="language-plaintext highlighter-rouge">require_confirmed_input</code> to RBF messages</li>
      <li>Add a <code class="language-plaintext highlighter-rouge">succeededAt</code> timestamp to payments</li>
    </ul>
  </li>
  <li>validating-lightning-signer <a href="https://gitlab.com/lightning-signer/validating-lightning-signer/-/releases/v0.13.0">v0.13.0</a> - Celestial Citadel
    <ul>
      <li>Added:
        <ul>
          <li>configure SimplePolicy values using vlsd2.toml</li>
          <li>fuzz: basic fuzzing of the vls-core crate</li>
          <li>developer flag for dev messages and fields</li>
          <li>core: oid derivation for ldk channel id</li>
          <li>protocol: implement sign_holder_htlc_tx for LDK / phase-2 code path</li>
        </ul>
      </li>
      <li>Changed:
        <ul>
          <li>core: Add new and oid methods to ChannelId and remove the oid/channel_id utility methods</li>
          <li>LSS: split lightning-storage-server into library and lssd</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>SideSwap <a href="https://github.com/sideswap-io/sideswapclient/releases/tag/v1.7.0">v1.7.0</a>
    <ul>
      <li>New swaps API</li>
      <li>Fee discount</li>
      <li>Cross-wallet swaps</li>
      <li>Peg-in/peg-out wallet balance</li>
    </ul>
  </li>
  <li>CDK <a href="https://github.com/cashubtc/cdk/releases/tag/v0.7.1">v0.7.1</a>
    <ul>
      <li>Mint builder add ability to set custom derivation paths</li>
    </ul>
  </li>
  <li>eNuts is no longer maintained [<a href="https://njump.me/nevent1qqs0jn2f7g4sm4s9gu9umq5gw8jr0wa3jg4vafhsjrxk4y2tl7yaj5spz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygzsm98u9kzcp35zkpc62shck8335gqtq5yt4w26xwl0pp2a72qavvpsgqqqqqqsjlh343">Note</a>]</li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:25:36 Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @sean (3,000 sats) “Open sourced decentralized CIA? Sounds like y’all need to tap into the intellectual Silk Road 🚬”</li>
      <li>@pink monkey (2,000 sats)</li>
      <li>@Anonymous (2,000 sats)</li>
      <li>@martinbarilik (750 sats) “Short AI intro 😁 right …”</li>
      <li>@Momo Tahmasbi (100 sats) “Arkansas Traveler was a great song recommendation!”</li>
      <li>@jespada (100 sats) “Zzzzap”</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tips-of-the-day">Tech Tips of the Day</h3>
<ul>
  <li>Encoding data within emoji using unicode variation selectors [<a href="https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/">Paul Butler’s Blog post</a>]
    <ul>
      <li>A demonstration on how to encode arbitrary data within a single emoji by utilizing Unicode variation selectors, which modify character presentation without visible changes.</li>
      <li>By appending sequences of these selectors to a base character, data can be concealed within any Unicode character.</li>
    </ul>
  </li>
  <li>Bypassing hotspot restrictions for data [<a href="https://juraj.bednar.io/en/blog-en/2025/03/07/bypassing-hotspot-restrictions-for-data/">Article by Juraj Bednar</a>]
    <ul>
      <li>Mobile carriers often detect tethering by monitoring Time to Live (TTL) values in data packets. Standard mobile devices send packets with TTL of 64, while tethered devices show TTL of 63.</li>
      <li>The solution involves setting device TTL to 65, making tethered traffic appear as direct phone traffic with TTL 64.</li>
    </ul>
  </li>
  <li>WA-Tunnel: Tunneling Internet traffic over Whatsapp [<a href="https://github.com/aleixrodriala/wa-tunnel">Github</a>]
    <ul>
      <li>WA-Tunnel allows TCP data tunneling via WhatsApp, useful for bypassing network restrictions such as limited carrier data.</li>
      <li>The system works by sending network packages as WhatsApp messages, splitting large data into files or text to avoid message limits.</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/03/07/">344</a>
        <ul>
          <li>Disclosure of fixed LND vulnerability allowing theft: Matt Morehouse <a href="https://delvingbitcoin.org/t/disclosure-lnd-excessive-failback-exploit/1493">posted</a> to Delving Bitcoin to announce the responsible disclosure of a vulnerability that affected LND versions before 0.18.</li>
          <li>Discussion about Bitcoin Core’s priorities: several blog posts by Antoine Poinsot about the future of the Bitcoin Core project were linked in a <a href="https://delvingbitcoin.org/t/antoine-poinsot-on-bitcoin-cores-priorities/1470/">thread</a> on Delving Bitcoin</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/02/28/">343</a>
        <ul>
          <li>Ignoring unsolicited transactions: Antoine Riard <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/e98ec3a3-b88b-4616-8f46-58353703d206n@googlegroups.com/">posted</a> to Bitcoin-Dev two draft BIPs that would allow a node to signal that it will no longer accept tx messages that it had not requested using an inv message, called unsolicited transactions.</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/02/21/">342</a>
        <ul>
          <li>Allowing mobile wallets to settle channels without extra UTXOs: Bastien Teinturier <a href="https://delvingbitcoin.org/t/zero-fee-commitments-for-mobile-wallets/1453">posted</a> to Delving Bitcoin about an opt-in variation of v3 commitments for LN channels that would allow mobile wallets to settle channels using the funds within the channel for all cases where theft is possible.</li>
          <li>Continued discussion about an LN quality of service flag: Joost Jager <a href="https://delvingbitcoin.org/t/highly-available-lightning-channels-revisited-route-or-out/1438">posted</a> to Delving Bitcoin to continue discussion about adding a quality of service flag to the LN protocol to allow nodes to signal that one of their channels was highly available.</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/02/14/">341</a>
        <ul>
          <li>Continued discussion about probabilistic payments: following Oleksandr Kurbatov’s <a href="https://delvingbitcoin.org/t/emulating-op-rand/1409">post</a> to Delving Bitcoin last week about emulating an OP_RAND opcode</li>
          <li>Continued discussion about ephemeral anchor scripts for LN: Matt Morehouse <a href="https://delvingbitcoin.org/t/which-ephemeral-anchor-script-should-lightning-use/1412/8">replied</a> to the thread about what ephemeral anchor script LN should use for future channels</li>
          <li>Stats on orphan evictions: developer 0xB10C <a href="https://delvingbitcoin.org/t/stats-on-orphanage-overflows/1421/">posted</a> to Delving Bitcoin with statistics about the number of transactions evicted from the orphan pools for his nodes</li>
          <li>Updated proposal for updated BIP process: Mark “Murch” Erhardt <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/25449597-c5ed-42c5-8ac1-054feec8ad88@murch.one/">posted</a> to the Bitcoin-Dev mailing list to announce that his draft BIP for a revised BIP process has been assigned the identifier BIP3 and is ready for additional review</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li>The Satoshi Nakamoto Institute <a href="https://news.nakamotoinstitute.org/p/introducing-the-reorg">introduces</a> <a href="https://nakamotoinstitute.org/podcasts/the-reorg/">The Reorg</a>, a new podcast hosted by @Bitstein, exploring “the SNI archives to reexamine our ideas after years of accumulated proof-of-work.”</li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Proton Wallet officially launches and is now accessible on iOS, Android, and web platforms, for all users [<a href="https://x.com/ProtonWallet/status/1888971248652235009">Announcement</a>]</li>
  <li>Custodial Lightning wallet service LifPay temporarily suspends operations to align with regulatory requirements [<a href="https://njump.me/nevent1qqszqgqwv503cax3hsue00savklqdqygsd52590s6emnqsy7304djaspzdmhxue69uhhwmm59e6hg7r09ehkuef0qgsq3v3kr3sqxtmr4zr6wnwc4cjrpn3ksfu7hc30am2vpcfu68jucqqrqsqqqqqpt3x780">Announcement</a>]
    <ul>
      <li>Users are advised to withdraw their bitcoin within 60 days by submitting a withdrawal request.</li>
    </ul>
  </li>
  <li>Orange Pill App introduces Lightning-enabled bitcoin wallet [<a href="https://www.orangepillapp.com/blog/orange-pill-app-wallet">Announcement</a>]
    <ul>
      <li>The wallet aims to enhance community engagement through features like mass zapping, and plans to introduce geo-zapping, enabling users to send Bitcoin to others based on geographic locations.</li>
    </ul>
  </li>
  <li>Brazilian financial solutions company Transfero partners with Lightspark to add speed and cost efficiency to Bitcoin transactions using the Lightning Network [<a href="https://www.lightspark.com/news/transfero-lightspark-partnership">Press release</a>]</li>
  <li>Tropic Square introduces pre-production samples of TROPIC01, an open architecture RISC-V secure element [<a href="https://www.cnx-software.com/2025/03/01/tropic-square-tropic01-is-an-auditable-open-architecture-tamper-proof-risc-v-secure-element-se-for-iot-and-microcontrollers/">CNX Software’s Article</a>]
    <ul>
      <li>TROPIC01 ensures tamper-proof hardware Root of Trust, enabling secure cryptographic key management and data storage in devices like hardware wallets and IoT products. [<a href="https://cdn.prod.website-files.com/67a4b8a23096bc77d4d941a8/67b82bd3b7f60bebae45104e_TROPIC01_Data_Brief_25.pdf">Product brief</a>]</li>
    </ul>
  </li>
  <li>Fold introduces its Bitcoin Rewards Credit Card, offering cashback in bitcoin [<a href="https://blog.foldapp.com/fold-bitcoin-rewards-credit-card-waitlist/">Press release</a>]</li>
  <li>Canaan announces the Avalon Q, a home mining device with a hash rate of 90 TH/s. [<a href="https://x.com/canaanio/status/1895481373487669575">Announcement</a>]</li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>OpenSats receives $250,000 donation from HRF’s Bitcoin Development Fund, directed at its Operations Budget [<a href="https://opensats.org/blog/additional-ops-budget-from-hrf">Announcement</a>]</li>
  <li>Vinteum announces its fifth grant to Pins for their work on LND [<a href="https://medium.com/vinteum-org/announcing-our-fifth-grant-pins-and-lnd-b37dbe004eae">Blog post</a>]
    <ul>
      <li>The donation has been divided for three non-profit organizations Brink, OpenSats, and the Human Rights Foundation</li>
    </ul>
  </li>
  <li>Blockstream opens its grant application portal for Bitcoin L2 projects, taking place on-site at the Lugano Research Hub [<a href="https://blockstream.typeform.com/to/KLeflywl">Portal</a>]</li>
  <li>Brink receives a $50,000 contribution to their open source Bitcoin development efforts from <a href="https://x.com/bitcoinbrink/status/1892915462926705003">VanEck</a>, and another $50,000 contribution from <a href="https://x.com/River/status/1897332682436305233">River</a></li>
  <li>Bitwise donates $150,000 to support Bitcoin open-source developers [<a href="https://x.com/BitwiseInvest/status/1891865302729883754">Announcement</a>]</li>
  <li>The University of Austin invests $5 million of its endowment in Bitcoin, partnering with Unchained for the initiative. [<a href="https://bitcoinnews.com/adoption/university-of-austin-5m-bitcoin-fund/">Announcement</a>]</li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li>Bitaxe miner with 3.3Th of hashrate successfully mines a Bitcoin block, defying odds of 1 in 250,000,000 [<a href="https://mempool.space/block/000000000000000000006414aea39be567cf1d5ff6cbf2d77254fe7c714b0d81">Block 887212</a>]
    <ul>
      <li>The device found a block with 719T difficulty, exceeding current difficulty levels, and has <a href="https://x.com/denverbitcoin/status/1899217414237123022">reportedly</a> been operating for less than a month, generating approximately 350M shares.</li>
    </ul>
  </li>
  <li>Braiins reveals plans to open-source its BCB 100 control board [<a href="https://x.com/BraiinsMining/status/1895463159894302837">Announcement</a>]
    <ul>
      <li>The release includes software (OpenWrt-based distribution, Linux support, and firmware source code) and hardware specifications (schematics, BOM, and CAD data), excluding the mining software.</li>
      <li>All materials will be available under GPLv3 on the Braiins GitHub repository by the end of March.</li>
    </ul>
  </li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li><a href="https://njump.me/naddr1qqxnzden8ymrjvf5xscnzde4qgsv83cj9336755plm3mjvudzzhxtvtxlln0w0cuyuk9cyfqvpmnr4crqsqqqa28hp0snm">Bisq trade trends</a>: An analysis of trading trends on the Bisq protocol in 2024
    <ul>
      <li>The number of trades on Bisq decreased in 2024, but USD volume per trade increased, indicating higher value per transaction.</li>
      <li>Payment methods like Strike, Zelle, and Cash By Mail showed different trends in the volume and average value of trades in 2024.</li>
      <li>Bisq’s surveillance discount was typically smaller than expected, with Cash By Mail offering the best rate and Strike the worst in 2024.</li>
    </ul>
  </li>
  <li>UK Government orders Apple to create backdoor for encrypted iCloud accounts [<a href="https://techcrunch.com/2025/02/10/uks-secret-apple-icloud-backdoor-order-is-a-global-emergency-say-critics/">TechCrunch</a>]
    <ul>
      <li>The UK Home Secretary’s office has issued a secret order under the Investigatory Powers Act of 2016, requiring Apple to provide access to user data protected by its Advanced Data Protection for iCloud.</li>
      <li>In response, Apple has withdrawn support for Advanced Data Protection in the UK, and <a href="https://appleinsider.com/articles/25/03/04/apple-goes-to-court-to-fight-uk-demand-for-icloud-encryption-backdoor">goes to court to fight UK’s demand</a>.</li>
    </ul>
  </li>
  <li>Mozilla revises Firefox terms after user backlash over data usage [<a href="https://techcrunch.com/2025/03/03/mozilla-rewrites-firefoxs-terms-of-use-after-user-backlash/">TechCrunch</a>]
    <ul>
      <li>Mozilla has revised its Firefox Terms of Use, removing the explicit promise to “never sell personal data”, citing evolving legal definitions of data sales.</li>
      <li>In response to feedback, Mozilla updates the terms to clarify that they do not claim ownership of user data and that data usage is limited to operating Firefox as described in the Privacy Notice.</li>
    </ul>
  </li>
  <li>Kraken’s 2024 <a href="https://blog.kraken.com/news/2024-kraken-transparency-report">Transparency Report</a>: Kraken received 6,826 data requests from law enforcement and government agencies across 71 countries, marking a 38.6% increase from 2023
    <ul>
      <li>U.S. agencies accounted for 28.6% of these requests, with the FBI submitting 614. Kraken provided data for 57% of all requests, covering 10,369 accounts, primarily linked to clients in the U.S. (34.5%), the U.K. (8.8%), and Germany (8.5%).</li>
    </ul>
  </li>
  <li>X blocks Signal.me links, prompts error messages indicating potential harm or spam [<a href="https://www.disruptionist.com/p/elon-musks-x-blocks-links-to-signal">Disruptionist</a>]
    <ul>
      <li>The company cites security issues with the domain, threatening to user safety.</li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #25832: tracing: network connection tracepoints [<a href="https://github.com/bitcoin/bitcoin/pull/25832">Merged</a>]
    <ul>
      <li>“This adds five new tracepoints with documentation and tests for network connections”</li>
    </ul>
  </li>
  <li>Bitcoin Core #27432: contrib: add tool to convert compact-serialized UTXO set to SQLite database [<a href="https://github.com/bitcoin/bitcoin/pull/27432">Merged</a>]</li>
  <li>BIP #1712: BIP3: Updated BIP Process [<a href="https://github.com/bitcoin/bips/pull/1712">Merged</a>]</li>
  <li>Rust Bitcoin #4114: Policy: Relax MIN_STANDARD_TX_NONWITNESS_SIZE to 65 [<a href="https://github.com/rust-bitcoin/rust-bitcoin/pull/4114">Merged</a>]</li>
  <li>Rust Payjoin #434: Multiparty Senders: NS1R [<a href="https://github.com/payjoin/rust-payjoin/pull/434/">Merged</a>]</li>
  <li>LND #9491: Allow coop closing a channel with HTLCs on it via lncli [<a href="https://github.com/lightningnetwork/lnd/pull/9491">Merged</a>]</li>
  <li>LDK #3440: Support receiving async payments [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3440">Merged</a>]</li>
  <li>LDK #3575: PeerStorage: Add feature and store peer storage in ChannelManager [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3575">Merged</a>]</li>
  <li>Eclair #2989: Add router support for batched splices [<a href="https://github.com/ACINQ/eclair/pull/2989">Merged</a>]</li>
  <li>Eclair #2979: Check peer features before attempting wake-up [<a href="https://github.com/ACINQ/eclair/pull/2979">Merged</a>]</li>
  <li>BOLT #1228: Zero-fee commitments using v3 transactions [<a href="https://github.com/lightning/bolts/pull/1228">Draft</a>]</li>
  <li>NIP #1807: Add On-Chain Send/Receive to NWC #1807 [<a href="https://github.com/nostr-protocol/nips/pull/1807">Open</a>]</li>
  <li>NIP #1777: NWC Deep Links: a standard for using deeplinks to communicate between a wallet and a nostr client [<a href="https://github.com/nostr-protocol/nips/pull/1777">Open</a>]</li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>President Trump confirms the creation of a U.S. Strategic Crypto Reserve, including BTC, ETH, XRP, SOL, and ADA [<a href="https://truthsocial.com/@realDonaldTrump/114093526901586124">Truth social post</a>]</li>
  <li>U.S. President brokers a prisoner swap, releasing BTC-e founder Alexander Vinnik [<a href="https://www.theblock.co/post/340474/president-trump-swaps-btc-e-operator-money-laundering-alexander-vinnik-prisoner-exchange-russia">The Block</a>]
    <ul>
      <li>Vinnik, co-founder of BTC-e, pleaded guilty to money laundering charges in the U.S. and France.</li>
    </ul>
  </li>
  <li>The U.S. SEC’s Division of Corporation Finance states that meme coins are akin to collectibles, not securities [<a href="https://www.sec.gov/newsroom/speeches-statements/staff-statement-meme-coins">Statement</a>]
    <ul>
      <li>Consequently, transactions involving meme coins do not require registration with the SEC, leaving purchasers and holders unprotected by federal securities laws.</li>
    </ul>
  </li>
  <li>Bitcoin asset seizure and civil contempt order [<a href="https://storage.courtlistener.com/recap/gov.uscourts.prd.186103/gov.uscourts.prd.186103.20.0.pdf">Court order</a>]
    <ul>
      <li>A U.S.federal judge holds Mr. Reynoso in civil contempt for violating a seizure warrant requiring him to transfer 119.65 BTC to a government-controlled wallet within 24 hours. Within hours of the warrant being served, Reynoso moved the bitcoin through multiple wallets, invalidating any claims of inability to access the funds. [<a href="https://mempool.space/tx/5316e2292019c12d17fe29a8c83880393edcc3bee0e45dd075aea4be4214b17e">Transaction</a>]</li>
      <li>The FBI discovered Ledger software on Reynoso’s laptop, and authorities confirmed his Bitcoin address through both the software interface and a text file in his Apple account.</li>
    </ul>
  </li>
  <li>U.S. Marshals Service struggles with managing seized cryptocurrencies [<a href="https://www.coindesk.com/policy/2025/02/20/u-s-marshals-service-managing-seized-assets-can-t-say-how-much-crypto-it-holds">CoinDesk</a>]
    <ul>
      <li>Previous reports and audits have criticized the agency’s inability to track forked assets and its reliance on insecure methods like unencrypted email for sharing bitcoin deposit addresses.</li>
    </ul>
  </li>
  <li>Nigeria’s release of Binance Executive Tigran Gambaryan linked to U.S. surveillance assistance deal [<a href="https://www.therage.co/the-cost-of-gambaryan/">The Rage</a>]
    <ul>
      <li>In October 2024, Nigeria released Binance executive Tigran Gambaryan, who had been detained since February 2024 on money laundering charges.</li>
      <li>The same day, the U.S. and Nigeria announced a “Bilateral Liaison Group on Illicit Finance and Cryptocurrencies”, providing Nigeria with US “resources and expertise” in investigating cybercrimes.</li>
    </ul>
  </li>
  <li>Argentina’s President Javier Milei faces legal and political backlash over failed LIBRA memecoin launch [<a href="https://www.reuters.com/world/americas/argentinas-opposition-threatens-impeachment-trial-after-milei-touts-crypto-coin-2025-02-16/">Reuters</a>]
    <ul>
      <li>Milei denies any involvement, claiming he had no prior knowledge of the token’s issues and is now calling for an internal investigation.</li>
    </ul>
  </li>
  <li>CBP intensifies ASIC miner seizures, expands scope to MicroBT and Canaan units [<a href="https://blockspace.media/insight/cbp-ramps-up-asic-miner-crackdown-with-seizures-new-import-holds/">Blockspace</a>]
    <ul>
      <li>U.S. Customs and Border Protection (CBP) is seizing Bitcoin mining ASICs at ports of entry, including Bitmain, MicroBT, and Canaan units, at the request of the Federal Communications Commission.</li>
    </ul>
  </li>
</ul>

<h4 id="central-banking">Central Banking</h4>
<ul>
  <li>The IMF requests El Salvador’s public sector to halt Bitcoin purchases as part of a $1.4 billion loan agreement [<a href="https://atlas21.com/imf-and-el-salvador-request-to-halt-bitcoin-accumulation-plan/">Atlas21</a>] [<a href="https://www.imf.org/en/News/Articles/2025/02/26/pr25043-el-salvador-imf-approves-new-40-month-us1-bn-eff-arr">Press release</a>]
    <ul>
      <li>The IMF’s conditions include banning public sector Bitcoin accumulation and mining, restricting issuance of Bitcoin-linked tokenized debt, and revoking Bitcoin’s legal tender status.</li>
    </ul>
  </li>
  <li>The European Central Bank announced an expansion of the Eurosystem initiative for settling transactions using distributed ledger technology in central bank money [<a href="https://www.ecb.europa.eu/press/pr/date/2025/html/ecb.pr250220_1~ce3286f97b.en.html">Press release</a>]
    <ul>
      <li>The initiative will explore how DLT can settle transactions within the Eurosystem.</li>
    </ul>
  </li>
  <li>Heraclius: A Byzantine fault tolerant database system with potential for modern payments systems [<a href="https://www.federalreserve.gov/econres/feds/files/2025012pap.pdf">Research paper</a>]
    <ul>
      <li>Heraclius is a project by the U.S. Federal Reserve which attempts to replicate Bitcoin’s decentralized security while keeping control in central hands.</li>
      <li>The Fed paper acknowledges Bitcoin as “the longest running electronic payment system that tolerates byzantine faults today”</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://bcc8333.com/">Barcelona Cyphers Conference</a>: Unleashing Decentralized Freedom
    <ul>
      <li>June 6-7, 2025 in Barcelona, Spain</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>How Big Brother can attack Bitcoin without spending a dime, by Harsha Goli [<a href="https://blockspace.media/insight/the-boring-banal-way-big-brother-can-shackle-bitcoin/">Opinion</a>]</li>
      <li>Prosecuting Privacy: Examining Samourai Wallet, Money Transmitters, and the Criminalization of Innovation, by Spencer Peek [<a href="https://www.defieducationfund.org/_files/ugd/84ba66_87dfb370e81a4766811bf16e5293c6da.pdf">Research paper</a>]</li>
      <li>Atlas Mined, by Jon [<a href="https://www.ungovernablemisfits.com/atlas-mined/">Article</a>]</li>
      <li>The Logic of Spending Bitcoin, by Parker Lewis [<a href="https://x.com/parkeralewis/status/1897340988772819036">Read</a>]</li>
      <li>What’s Driving Bitcoin Adoption in 2025?, by Sam Baker [<a href="https://blog.river.com/bitcoin-adoption-2025/">River’s Research report</a>]</li>
      <li>Every App Needs Bitcoin, by Miljan [<a href="https://primal.net/miljan/Every-App-Needs-Bitcoin-cy3uvd">Note</a>]</li>
      <li>Why Keys Matter, by Holdbod [<a href="https://njump.me/naddr1qvzqqqr4gupzp978pfzrv6n9xhq5tvenl9e74pklmskh4xw6vxxyp3j8qkke3cezqqxnzde5xycnjdeex5mrwwp406f0z0">Note</a>]</li>
      <li>Bybit’s $1.4b breach started with stock invest malware [<a href="https://crypto.news/bybits-1-4b-breach-started-with-stock-invest-malware-investigation-reveals/">Crypto.news</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, ROB HAMILTON, VIVEK</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Rob Hamilton &amp; Vivek to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR092 - Nostr Wallet Connect, DeepSeek, AI Coding, Sparrow, Bitcoin Keeper, Maple AI, Calculating Tx Sizes + MORE ft. Future Paul</title><link href="https://bitcoin.review/podcast/episode-92/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR092 - Nostr Wallet Connect, DeepSeek, AI Coding, Sparrow, Bitcoin Keeper, Maple AI, Calculating Tx Sizes + MORE ft. Future Paul" /><published>2025-02-11T13:00:00+00:00</published><updated>2025-02-11T13:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-92</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-92/"><![CDATA[<p>I’m joined by guest <a href="https://twitter.com/futurepaul">Future Paul</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="prelude-to-the-list">Prelude to the list</h3>
<ul>
  <li>00:01:00 Conversation on AI and building with AI</li>
</ul>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>00:22:02 New Coldcard Q tutorial by Loïc Morel on Plan B Network: <a href="https://planb.network/en/tutorials/wallet/hardware/coldcard-q-73e86d1a-6fe6-4d8b-bb15-8690298020e3">Getting Started with COLDCARD Q</a></li>
  <li>00:22:10 We are still looking for bitcoin builders to come on the show!</li>
  <li>00:23:13 Unleashed.Chat <a href="https://njump.me/nevent1qqsdzsm760uk0yjh07q84mppvezjp3dfjd55rv235kvl52m3ducqvvgpyfmhxue69uhkummnw3ez6an9wf5kv6t9vsh8wetvd3hhyer9wghxuet5qgsw3znfr6vdnxrujezjrhlkqqjlvpcqx79ys7gcph9mkjjsy7zsgyg67eke6">Update</a> - Deepseek R1 32B
    <ul>
      <li>Users can now access the DeepSeek R1 32B model on Unleashed.chat, all data remaining stored locally in the user’s browser.</li>
      <li>Future updates aim to integrate it as a DVM, API, and enhance its ability to search Nostr and the web while improving speed.</li>
    </ul>
  </li>
  <li>00:23:19 NWC and Olas/Primal</li>
</ul>

<h3 id="urgent-vulnerability-disclosures">Urgent Vulnerability Disclosures</h3>
<ul>
  <li>00:37:17 Replacement Cycling Attacks on Bitcoin Miners Block Templates [<a href="https://groups.google.com/g/bitcoindev/c/ZspZzO4sBys">Antoine Riard’s Disclosure</a>]
    <ul>
      <li>A variant of replacement cycling attacks allows adversarial miners to censor transactions in block templates, manipulating the Bitcoin fee distribution. This attack, tested on Bitcoin Core 26.0 and 29.0, exploits mempool mechanisms to gain an economic advantage over honest miners.</li>
      <li>The attack leverages non-UTXO transaction traffic and mempool policies like replace-by-fee to reorder transactions in block templates.</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:37:34 Sparrow Wallet
    <ul>
      <li><a href="https://github.com/sparrowwallet/sparrow/releases/tag/2.1.2">v2.1.2</a>
        <ul>
          <li>Indicate historical rates support in Exchange Source drop-down on General Settings</li>
          <li>Prefill the derivation to the default path for the chosen script type on watch only keystores</li>
          <li>Add local network usage description in Info.plist for macOS 15</li>
          <li>Support Coldcard P2TR address display over USB (Edge firmware only)</li>
          <li>Set the script type selection import button as the default button after BIP39 wallet discovery returns empty</li>
        </ul>
      </li>
      <li><a href="https://github.com/sparrowwallet/sparrow/releases/tag/2.1.0">v2.1.0</a>
        <ul>
          <li>Use Lark for USB hardware wallet communication (replaces HWI)</li>
          <li>Store and send multisig wallet registrations on Ledger devices to avoid re-registration</li>
          <li>Perform native pairing with the BitBox02 to avoid reliance on a previous external pairing configuration</li>
          <li>Support Jade Plus over USB</li>
          <li>Restore any adjusted table column widths and sort preferences on wallet load</li>
          <li>Support loading PSBTv2 files</li>
          <li>Skip labelled addresses when retrieving an unused address from the Receive tab, and the Send tab pay to wallet selection</li>
          <li>Always select a new address when sending multiple payments to the same open wallet</li>
          <li>Allow camera image mirroring to be changed from scanned image context menu and the application View menu</li>
          <li>Only show CPFP rate if child fee increases effective fee rate</li>
          <li>Add option to Bitcoin Core and Private Electrum server selection to scan a URL from a QR code</li>
          <li>Allow server URLs to be pasted into the server settings Host fields</li>
          <li>Enable Electrum RPC batching on mempool-electrs servers</li>
          <li>Add blackie.c3-soft.com testnet4 Public Electrum servers</li>
          <li>Add mempool.space exchange rate source</li>
          <li>Retrieve fee rates from configured source on non-mainnet networks where available</li>
          <li>Switch from paynym.is to paynym.rs and Tor equivalents</li>
          <li>Update child wallet labels to available paynyms on displaying the Paynym dialog</li>
          <li>Set transaction tab label to transaction label on opening transaction if available</li>
          <li>Show input label in the input tooltip on the transaction diagram if present</li>
          <li>Truncate labels in table columns to max persistable label length and notify the user via a tooltip</li>
          <li>Disable broadcast progress bar if disconnected, and re-enable if connected again</li>
          <li>Remove payjoin v1 verification step to check there is no previous UTXO information in the PSBT as per BIP78 change</li>
          <li>Exclude Taproot wallets and Jade, Tapsigner and Satochip HWWs from requiring the non witness tx field in PSBTs</li>
          <li>Improve socket address resolution handling when using a proxy</li>
          <li>Improve keystore import panel spacing in Linux</li>
          <li>Add Specter DIY multisig option to wallet import menu</li>
          <li>Replace forward slash with underscore in file names when saving PSBTs</li>
          <li>Improve Jade QR keystore import descriptions</li>
          <li>And many more</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:41:08 BDK <a href="https://github.com/bitcoindevkit/bdk/releases/tag/wallet-1.1.0">v1.1.0</a>
    <ul>
      <li>In this release of bdk_wallet v1.1.0 the tx builder is updated to use transaction version 2 by default, and support for wallets using testnet4 is now live.</li>
      <li>This release also includes important updates to bdk_electrum which has a new MSRV of 1.75.0 to stay current with the latest security fixes, bdk_bitcoind_rpc introduces a new compact block filter module, as well as various bug fixes and improvements.</li>
    </ul>
  </li>
  <li>00:41:35 Bitcoin Keeper
    <ul>
      <li>Mobile <a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v2.0.1">v2.0.1</a>
        <ul>
          <li>Fresh new design across the app</li>
          <li>Support Enhanced Vaults with Inheritance Key for BitBox02, Coldcard, Jade, and Ledger</li>
          <li>In app concierge support system</li>
          <li>Onboarding calls for Diamond Hands subscribers</li>
          <li>Coldcard Q QR support</li>
        </ul>
      </li>
      <li>Desktop <a href="https://github.com/bithyve/keeper-desktop/releases/tag/keeper-desktop-v0.2.0">v0.2.0</a>
        <ul>
          <li>Add support for Miniscript with Bitbox02, ColdCard, Jade, and Ledger</li>
          <li>Add support for BitBox02 pairing code</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:42:40 Wasabi Wallet <a href="https://github.com/WalletWasabi/WalletWasabi/releases/tag/v2.5.0">v2.5.0</a>
    <ul>
      <li>Fee rate estimations and exchange rate providers are now configurable</li>
      <li>Quality of Life Features: address old bugs and feature requests</li>
      <li>Backend and Coordinator packaged for Linux: The Debian package now includes two extra binaries: one for the backend (Wallet API) and one for the coordinator (Coinjoin API).</li>
    </ul>
  </li>
  <li>00:42:43 Blockstream
    <ul>
      <li>Green QT
        <ul>
          <li><a href="https://github.com/Blockstream/green_qt/releases/tag/release_2.0.20">v2.0.20</a>
            <ul>
              <li>Enable Liquid discounted fees for Confidential Transactions</li>
            </ul>
          </li>
          <li><a href="https://github.com/Blockstream/green_qt/releases/tag/release_2.0.19">v2.0.19</a>
            <ul>
              <li>Create support tickets from the application</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Green iOS / Android
        <ul>
          <li><a href="https://github.com/Blockstream/green_ios/releases/tag/release_4.1.5">iOS v4.1.5</a> / <a href="https://github.com/Blockstream/green_android/releases/tag/release_4.1.5">Android v4.1.5</a>
            <ul>
              <li>Liquid network: enabled discount fees</li>
            </ul>
          </li>
          <li><a href="https://github.com/Blockstream/green_ios/releases/tag/release_4.1.4">iOS v4.1.4</a> / <a href="https://github.com/Blockstream/green_android/releases/tag/release_4.1.4">Android v4.1.4</a>
            <ul>
              <li>Create support requests from the app</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:43:06 Electrs <a href="https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#0109-feb-01-2025">v0.10.9</a>
    <ul>
      <li>Allow concurrent DB background operations for SSDs</li>
      <li>Update bitcoin_slices to 0.10.0</li>
    </ul>
  </li>
  <li>Nunchuk Android <a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.9.62">v1.9.62</a>
    <ul>
      <li>Support android 15</li>
    </ul>
  </li>
  <li>00:43:44 Umbrel <a href="https://github.com/getumbrel/umbrel/releases/tag/1.4.0-beta.1">v1.4.0-beta.1</a>
    <ul>
      <li>umbrelOS 1.4 Beta 1 introduces Files, a new file manager that turns your Umbrel into a full-blown home cloud, along with Korean language support and various bug fixes.</li>
      <li>Create, upload, and organize files and documents.</li>
      <li>Share folders over your local network, and easily add them as network drives on macOS, Windows, iOS, or Android.</li>
      <li>Set up a shared folder as a Time Machine backup location on macOS</li>
      <li>Preview all your photos, videos, PDFs, and audio files</li>
      <li>Access app data folders</li>
      <li>External (USB) storage support for Umbrel Home arriving in umbrelOS 1.4 Beta 2.</li>
    </ul>
  </li>
  <li>00:44:29 Bisq <a href="https://github.com/bisq-network/bisq/releases/tag/v1.9.19">v1.9.19</a>
    <ul>
      <li>Produce exclusively low-R signatures from wallet keys</li>
      <li>“Transfer Same Bank” &amp; “Transfer Specific Banks” match case-insentitivity</li>
      <li>Create payment method “Faster Payments System (SBP)” for Russian Ruble</li>
      <li>New option in <code class="language-plaintext highlighter-rouge">PhoneNumberValidator</code> to enforce exact number of digits</li>
      <li>Add 500+ string translations to Russian language file</li>
      <li>Implement <code class="language-plaintext highlighter-rouge">BitcoinCoreSeedListDiscovery</code> method</li>
      <li>getoffers (api): Return all offers by default</li>
      <li>Add <code class="language-plaintext highlighter-rouge">suddenwhipvapor</code> mediator instance onion</li>
      <li>Improve resync handling</li>
      <li>Add missing snapshot creation in full DAO mode</li>
    </ul>
  </li>
  <li>00:44:40 Bisq2 <a href="https://github.com/bisq-network/bisq2/releases/tag/v2.1.5">v2.1.5</a>
    <ul>
      <li><strong>A bug has been discovered in that release. Please do not install it and wait until a new version is available.</strong></li>
      <li>Security update: To enhance security for buyers, sellers must have sufficient reputation to secure a trade for the specified amount.</li>
      <li>New features:
        <ul>
          <li>The new Profile Card comes with many features. Find the user profile details, trade terms, reputation, offers created and the public messages posted by clicking on the profile icon or profile name anywhere in the app.</li>
          <li>To improve on privacy, sensitive trade data will be automatically deleted after a certain period of time</li>
          <li>See trade details in the trade process window by clicking on the “Show details” button</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:44:51 Zaprite <a href="https://help.zaprite.com/en/articles/10504186-zaprite-release-notes-2025-02-03">v2025-02-03</a>
    <ul>
      <li>Add: New <a href="https://blog.zaprite.com/how-to-connect-btcpay-server/">BTCPay integration</a>, allowing users to accept bitcoin and lightning payments alongside fiat using self-hosted infrastructure.</li>
      <li>Update:
        <ul>
          <li>Transactions CSV: Add a new Customer Note column to our Transactions CSV export</li>
          <li>Square ACH: Update Square ACH payment flow to adhere to new requirements from Square</li>
        </ul>
      </li>
      <li>Remove: Transaction Canceled: Temporarily disabled the Transaction Canceled notification emails until we can resolve their over-sensitivity.</li>
    </ul>
  </li>
  <li>00:45:54 Mempal
    <ul>
      <li><a href="https://github.com/aeonBTC/Mempal/releases/tag/v1.5.1">v1.5.1</a>
        <ul>
          <li>Disable APK dependency metadata</li>
        </ul>
      </li>
      <li><a href="https://github.com/aeonBTC/Mempal/releases/tag/v1.5.0">v1.5.0</a>
        <ul>
          <li>Tapping the Mempal logo now opens a web browser to mempool.space or equivalent custom mempool server</li>
          <li>Rework widget implementation to solve update issues</li>
          <li>Customize proguard-rules file to shrink app size and increase overall performance</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:46:04 Bitcoin Safe
    <ul>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.0.6">v1.0.6</a>
        <ul>
          <li>bitbox02: Added initial device setup option “restore from seed” without needing vendor software</li>
          <li>Jade: Bugfix for unlocking a newly initialized device</li>
          <li>Stricter tests for clean wallet shutdowns</li>
        </ul>
      </li>
      <li><a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.0.3">v1.0.3</a>
        <ul>
          <li>Add Tor support through proxy</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>BTC Map <a href="https://github.com/teambtcmap/btcmap-android/blob/master/CHANGELOG.md">v0.9.2</a>
    <ul>
      <li>Add merchant boosts</li>
      <li>Add comments screen</li>
      <li>Speed up element search within an area</li>
      <li>Show user location marker</li>
      <li>Show more info on deleted elements</li>
      <li>Add Polish and Brazilian translation</li>
      <li>Allow users to post merchant comments</li>
    </ul>
  </li>
  <li>00:48:50 ESP Miner <a href="https://github.com/skot/ESP-Miner/releases/tag/v2.6.0b2">v2.6.0b2</a>
    <ul>
      <li>Is SPIRAM Available?</li>
      <li>Keep old pool config synchronized until reboot</li>
      <li>Add support for extranonce2_len&lt;4</li>
      <li>SSID WiFi lookup</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>00:49:02 cbip32: A fast, secure, low-dependency C implementation of BIP32 [<a href="https://github.com/jamesob/cbip32">Github</a>]
    <ul>
      <li>The library depends only on libsecp256k1 and libsodium, for minimal dependency.</li>
      <li>Extensive testing includes cross-implementation fuzz testing against python-bip32 and verystable.</li>
    </ul>
  </li>
  <li>00:49:15 <a href="https://stackstates.com/">StackStates</a>: A map of the United States that shows legislation of official Bitcoin adoption [<a href="https://github.com/marksftw/stackstates">Github</a>]</li>
  <li>00:49:21 <a href="https://instamouse.com/kanzure/bitcoin">Instamouse bitcoin</a>: A full Bitcoin Core development environment accessible directly through a web browser
    <ul>
      <li>The environment includes pre-compiled Bitcoin Core software, with options to recompile if desired. Tools like Visual Studio Code and Qt Creator are pre-installed for development purposes.</li>
      <li>The setup operates in regtest mode, with the Bitcoin configuration file located at ~/.bitcoin/bitcoin.conf. An autolaunch script is available and can be modified or deleted as needed.</li>
    </ul>
  </li>
  <li>00:50:24 Iris Wallet Desktop: RGB on Lightning from a simple interface [<a href="https://github.com/RGB-Tools/iris-wallet-desktop">Github</a>]
    <ul>
      <li>The wallet enables users to manage RGB assets, including issuance, spending, and receiving, within a familiar wallet application.</li>
      <li>Releases its first experimental release with the <a href="https://github.com/RGB-Tools/iris-wallet-desktop/releases/tag/0.1.0">v0.1.0</a></li>
    </ul>
  </li>
  <li>00:50:43 <a href="https://explorer.timechainindex.com/">Explorer.timechainindex</a>: An address and transaction explorer by Timechainindex, powered by Mempool.space API
    <ul>
      <li>Users can save the explorer’s webpages locally and run them from their own mempool instance by changing the “api_endpoint” to their local mempool directory.</li>
    </ul>
  </li>
  <li>00:50:54 <a href="https://thebullishbitcoiner.github.io/tx-tree/">txTree</a>: A tool to explore UTXO connections
    <ul>
      <li>txTree is a tool that visualizes Bitcoin transactions by fetching and displaying transaction data in a tree structure</li>
    </ul>
  </li>
  <li>00:50:58 <a href="https://supertestnet.github.io/hurricash/">HurriCash</a>: A multisig tool for collaborative bitcoin transactions [<a href="https://github.com/supertestnet/hurricash">Github</a>]
    <ul>
      <li>The platform guides users through an initial transaction to allocate necessary funds, followed by a coinjoin process to collectively fund the multisig wallet.</li>
    </ul>
  </li>
  <li>00:51:29 <a href="https://thebitcointrail.space/">The Bitcoin Trail</a>: A community-driven bitcoin-themed game in development
    <ul>
      <li>The Bitcoin Trail began as a fun, stacking-themed game concept. Players can fund new features by zapping sats, including custom tombstones, news events, sound effects, new characters, and game mechanics.</li>
      <li>The game aims to evolve dynamically, with features like in-game stops, custom graphics, and even original music—all dependent on user contributions.</li>
    </ul>
  </li>
  <li>00:51:41 <a href="https://bitcoinlaws.io/">Bitcoin Laws</a>: A dedicated platform that monitors legislative measures related to Bitcoin and digital assets across various jurisdictions.</li>
  <li>00:51:50 <a href="https://coinmarketcrap.co/">CoinMarketCrap</a>: A website that provides bitcoin &amp; shitcoins market cap rankings, and more. [<a href="https://github.com/sha-265/coinmarketcrap.co">Github</a>]</li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>00:54:19 Researchers uncover two security flaws, FLOP and SLAP, in Apple’s A and M-series chips, enabling attackers to steal sensitive data through speculative execution attacks [<a href="https://arstechnica.com/security/2025/01/newly-discovered-flaws-in-apple-chips-leak-secrets-in-safari-and-chrome/">ArsTechnica</a>]
    <ul>
      <li>FLOP exploits the Load Value Predictor to access memory contents, while SLAP manipulates the Load Address Predictor to intercept JavaScript strings in Safari. Affected devices include iPhones (13–16 series), iPads, and Macs from 2021 onwards.</li>
      <li>Researchers demonstrate that FLOP can steal saved credit card information from Square storefronts, while SLAP can recover email data from ProtonMail, Amazon purchase details, and Reddit comments. [<a href="https://predictors.fail/">Demo</a>]</li>
    </ul>
  </li>
  <li>00:54:33 Cybersecurity firm Kaspersky identifies “SparkCat” malware in both Google Play and Apple’s App Store targeting cryptocurrency owners [<a href="https://cyberinsider.com/sparkcat-malware-found-in-google-play-and-apple-app-store/">CyberInsider</a>]
    <ul>
      <li>SparkCat employs OCR technology to extract sensitive information, including cryptocurrency wallet passwords from users’ photos. Infected apps request access to photo galleries under the guise of chat support features.</li>
    </ul>
  </li>
  <li>00:54:40 A reported exploit is targeting users who access adult websites through their Phantom or Trust Wallet browser [<a href="https://x.com/dom_lucre/status/1886552067059195928">Twitter post</a>]
    <ul>
      <li>Users are advised to avoid viewing adult content using these wallet-integrated browsers to prevent potential security breaches and loss of funds.</li>
    </ul>
  </li>
  <li>00:56:30 Lazarus Group deploys electron-based malware to steal cryptocurrency data [<a href="https://securityonline.info/lazarus-group-deploys-electron-based-malware-to-target-cryptocurrency-enthusiasts/">Security Online</a>]
    <ul>
      <li>The Lazarus Group embeds malware into an open-source project, Uniswap Sniper Bot, to target cryptocurrency advanced users. This attack follows similar strategies where they exploited Python and Node.js repositories.</li>
    </ul>
  </li>
  <li>00:56:36 Coinbase users lose millions to social engineering scams amid security failures [<a href="https://x.com/zachxbt/status/1886411879939031530">ZachXBT Analysis</a>]
    <ul>
      <li>Coinbase users have lost over $65 million between December 2024 and January 2025 due to social engineering scams. These scams involve attackers spoofing Coinbase phone numbers and emails to trick victims into transferring funds.</li>
    </ul>
  </li>
  <li>00:56:57 Singapore-based cryptocurrency exchange Phemex suffers $85 million hack, halts withdrawals [<a href="https://www.securityweek.com/hackers-drain-over-85-million-from-crypto-exchange-phemex/">Security Week</a>]
    <ul>
      <li>On January 23, 2025, the platform detected unusual activity in its hot wallets, leading to the theft of over $85 million in various cryptocurrencies.</li>
      <li>Phemex is collaborating with third-party security firms and law enforcement agencies to investigate the breach and has announced plans to compensate affected users.</li>
    </ul>
  </li>
  <li>00:57:56 Peer-to-peer cryptocurrency trading platform NoOnes suffers $8 million exploit due to Solana bridge vulnerability [<a href="https://cryptoslate.com/noones-acknowledges-8-million-exploit-after-zachxbt-raises-concerns/">CryptoSlate</a>]
    <ul>
      <li>The breach involved multiple small transactions, each under $7,000, across various networks, then subsequently funneled through Tornado Cash.</li>
    </ul>
  </li>
  <li>Bug in Solana-based wallet Solflare exposes 4,800 email addresses onchain, links them to more than 6,700 distinct wallets [<a href="https://njump.me/nevent1qqsgtzhthmkxjnmupvxukd5hguwudnzwa2drxa2m03p8l8ma2srz7rqpz4mhxue69uhkummnw3ezummcw3ezuer9wchsyg8h9rv7decysdvwwzfs7h9xfvyhwuxe38xds6z5lescak5u3gupqcpsgqqqqqqsdzw0gf">Note by Jameson Lopp</a>]
    <ul>
      <li>A bug in Solflare’s transaction signing process caused users’ email profiles to be sent onchain during a ‘claim’ event. This issue specifically affected users who used Solflare with Ledger hardware wallets.</li>
    </ul>
  </li>
  <li>WhatsApp reports Paragon Solutions’ spyware targeting journalists and civil society members [<a href="https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/">Reuters</a>]
    <ul>
      <li>WhatsApp detects hacking attempts on approximately 90 users, including journalists and civil society members, by Israeli spyware company Paragon Solutions.</li>
      <li>Despite Paragon’s claims of ethical practices and selling only to stable democratic governments, WhatsApp’s findings raise concerns about the commercial spyware industry’s impact.</li>
    </ul>
  </li>
  <li>00:58:40 Chinese AI startup Deepseek exposes over a million plaintext chat records, API keys, and internal logs due to unsecured ClickHouse databases. [<a href="https://www.bleepingcomputer.com/news/security/deepseek-exposes-database-with-over-1-million-chat-records/">Bleeping Computer</a>]
    <ul>
      <li>Security firm Wiz discovers the vulnerability, noting that the publicly accessible databases allowed arbitrary SQL queries without authentication.</li>
    </ul>
  </li>
  <li>00:58:16 Five dollars wrench attacks:
    <ul>
      <li>Russian national released after being cleared of involvement in kidnapping in Indonesia [<a href="https://news.faharas.net/239481/penampakan-bos-geng-rusia-perampok/">News Farahas</a>]
        <ul>
          <li>The incident was made public in early February 2025, more than a month after the kidnapping occurred, when a Ukrainian national and his driver were ambushed in Bali, Indonesia. Four masked attackers, armed with weapons, forced them into a villa and stole cryptocurrency worth approximately ~$220,000. Authorities are still searching for eight other suspects.</li>
        </ul>
      </li>
      <li>Criminal gang jailed for kidnapping and extorting cryptocurrency from victim [<a href="https://www.gmp.police.uk/news/greater-manchester/news/news/2025/january/criminal-gang-who-kidnapped-vulnerable-man-for-cryptocurrency-jailed-for-76-years/">Police report</a>]
        <ul>
          <li>On 2 December 2023, police discovered a kidnapped man in an Irlam flat. He had been assaulted, tied up, and forced to transfer cryptocurrency under duress.</li>
          <li>The investigation revealed the gang had targeted the victim multiple times, using violence, threats, and even drugging him to obtain cryptocurrency. They had extorted over £100,000 before the final kidnapping.</li>
        </ul>
      </li>
      <li>Three individuals are charged with kidnapping and assault over a failed cryptocurrency investment in Accra, Ghana [<a href="https://www.graphic.com.gh/news/general-news/ghana-news-cryptocurrency-fiasco-businessman-appeals-to-a-g-over-assault-kidnapping.html">Graphic Online</a>]
        <ul>
          <li>The alleged assault occurred on December 19, 2024, when the victim was handcuffed, beaten, and electrocuted at one of the assaillant’s office for about 13 hours.</li>
          <li>The attack followed claims that the victim held $600,000 linked to a misappropriated $1.6 million investment. Police intelligence intervened after a tip-off.</li>
        </ul>
      </li>
      <li>Criminals steal cryptocurrencies after invading family’s home in São Paulo, Brazil [<a href="https://livecoins.com.br/bandidos-roubam-criptomoedas-apos-render-familia-dentro-de-sua-propria-residencia-em-sao-paulo/">Livecoins</a>]
        <ul>
          <li>A group of criminals broke into a home in São Paulo, held a family hostage, and stole their cryptocurrencies. The attackers stayed in contact with a third accomplice by phone.</li>
          <li>The stolen amount is estimated at $16,000, and the criminals also took the victims’ cell phones. The Civil Police have launched an investigation but have not yet identified any suspects, nor how the criminals discovered the family’s holdings.</li>
        </ul>
      </li>
      <li>A 30-year-old entrepreneur active in cryptocurrencies is kidnapped near Troyes, France during a staged client meeting [<a href="https://archive.is/1ULsg">JDD</a>]
        <ul>
          <li>Four individuals, including a fake client, hold him hostage and demand a €20,000 ransom.</li>
        </ul>
      </li>
      <li>Australian billionaire Tim Heath fights off kidnappers at his luxury apartment in Tallinn, Estonia [<a href="https://www.dailymail.co.uk/news/article-13995147/Aussie-billionaire-Tim-Heath-kidnapping.html">DailyMail</a>]
        <ul>
          <li>The attackers, reportedly disguised as painters, had planned to abduct him and take him to a remote location. Heath, a cryptocurrency gambling entrepreneur, was targeted just before his new casino’s grand opening.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="audience-questions">Audience Questions</h3>
<ul>
  <li>01:00:55 Why, when you sign a transaction on the COLDCARD, does it generate 2 files. A “signed” and a “final” transaction. What’s the difference between the 2?</li>
  <li>01:01:50 P1: What’s the maximum number of outputs there can be for a bitcoin transaction?</li>
  <li>01:03:43 P2: Is there any way to estimate what the size that a transaction will be depending on it’s number of outputs? For example is a 1 input, 3 output tx 33% bigger than a 1 input, 2 output tx? Is it a linear calculation, or a curve?</li>
  <li>01:04:13 Does using a passphrase offer any protection against a malicious hardware wallet? Or is it the same level as risk as just generating a regular seed?</li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>01:06:10 Maple AI by OpenSecret, is an end-to-end encrypted chat tool that enables private conversations with a general-purpose AI assistant, is now publicly available [<a href="https://github.com/OpenSecretCloud/opensecret">Github</a>] [<a href="https://blog.opensecret.cloud/opensecret-technicals/">Technical primer</a>]</li>
  <li>01:06:20 SimpleX <a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.3.0-beta.2">v6.3.0-beta.2</a>
    <ul>
      <li>Send mentions, mentions-only notification mode for groups</li>
      <li>Support on-device message expiration per chat</li>
      <li>Send reports to group moderators</li>
      <li>Fast group deletion</li>
      <li>To keep original filename private, use timestamp as video filename</li>
      <li>Support connecting to SMP servers via port 443 (via Advanced network settings)</li>
    </ul>
  </li>
  <li>01:11:00 TailsOS <a href="https://tails.net/news/version_6.12/">v6.12</a>
    <ul>
      <li>Prevent an attacker from monitoring Tor circuits:
        <ul>
          <li>In Tails 6.11 or earlier, an attacker who has already taken control of an application in Tails could then exploit vulnerabilities in Onion Circuits and our Tor Browser wrapper that might lead to deanonymization.</li>
        </ul>
      </li>
      <li>Prevent an attacker from changing the Persistent Storage settings</li>
    </ul>
  </li>
  <li>01:13:24 Reticulum MeshChat <a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.20.0">v1.20.0</a>
    <ul>
      <li>Add ability to manage additional interface types and settings thanks to @RFnexus in #60</li>
      <li>Add ability to double click lxmf.delivery nodes in network visualiser to launch conversation</li>
      <li>Add ability to double click nomadnetwork.node nodes in network visualiser to launch page browser</li>
      <li>Add ability to reload ports when adding or editing an interface</li>
      <li>Add IFAC network name to interface info when enabled</li>
    </ul>
  </li>
  <li>NomadNet <a href="https://github.com/markqvist/NomadNet/releases/tag/0.6.0">v0.6.0</a>
    <ul>
      <li>Add ability to configure LXMF PN max_peers and static_peers</li>
      <li>Update required RNS to 0.9.1 and LXMF to 0.6.1</li>
    </ul>
  </li>
  <li>Signal now allows users to transfer their message history and the last 45 days of media when linking a new Desktop or iPad device to their primary account [<a href="https://signal.org/blog/a-synchronized-start-for-linked-devices/">Announcement</a>]
    <ul>
      <li>Signal bundles the user’s data into a compressed, encrypted archive, which is then sent to the new device through Signal’s servers.</li>
    </ul>
  </li>
  <li>01:25:26 VPN provider Mullvad updates payment method options and adds Lightning payment as experimental beta feature with a 10% discount [<a href="https://mullvad.net/en/account/payment/lightning">Payment portal</a>]
    <ul>
      <li>Previously, a third-party <a href="https://vpn.sovereign.engineering/">service</a> was available to top-up Mullvad accounts, or purchase vouchers, using Lightning.</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li><a href="https://zextras.com/carbonio">Carbonio</a>: A self-hosted digital workplace solution [<a href="https://github.com/Zextras">Github</a>]
    <ul>
      <li>It features modern tools for email management, calendar coordination, video meetings, and collaborative document editing, designed for scalability and security.</li>
      <li>The platform supports mobile access and provides businesses with a secure alternative to hyperscale cloud providers while offering robust file management and privacy controls.</li>
    </ul>
  </li>
  <li><a href="https://www.stoutner.com/privacy-browser-android/">Privacy browser android</a>: An open-source browser designed to minimize data sent to the internet and stored on devices [<a href="https://gitweb.stoutner.com/">Code repository</a>]
    <ul>
      <li>By default, it disables privacy-sensitive features like JavaScript and cookies, allowing users to enable them as needed per site.</li>
      <li>Currently utilizing Android’s built-in WebView, future versions plan to adopt a forked version called Privacy WebView.</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>01:26:17 Ark Wallet SDK: A TypeScript library for building Bitcoin wallets with support for both on-chain and off-chain transactions via Ark protocol. [<a href="https://github.com/arklabshq/wallet-sdk">Github</a>]
    <ul>
      <li>The SDK offers JavaScript developers a secure, portable solution for implementing Bitcoin functionality without WebAssembly dependencies.</li>
    </ul>
  </li>
  <li><a href="https://www.raycast.com/saunter/vortex">Vortex</a>: A Raycast extension that lets you control you bitcoin lightning wallet directly from MacOS [<a href="https://github.com/raycast/extensions/tree/5bda66fb25f9e0ad1ecf537cd7e354ac3f92cd7e/extensions/vortex/">Code repository</a>]
    <ul>
      <li>The latest update introduces a Redeem command, allowing users to convert Cashu tokens into their Nostr Wallet Connect connected wallets.</li>
      <li>Users can now withdraw satoshis from any LNURL-withdraw invoice into their connected wallets swiftly.</li>
    </ul>
  </li>
  <li><a href="https://mnt.cash/">MNT</a>: Cashu mint with admin dashboard [<a href="https://github.com/gandlafbtc/mint">Github</a>]
    <ul>
      <li>MNT introduces a new Cashu mint featuring an integrated admin dashboard.</li>
      <li>The platform simplifies the management of ecash transactions by providing a user-friendly interface.</li>
    </ul>
  </li>
  <li><a href="https://paywally.pages.dev/">Paywally</a>: A standalone web app with a lightning paywall powered by Cashu
    <ul>
      <li>The application fetches a 19-satoshi invoice from a specified Lightning Network address, creates a melt quote with this invoice, and upon payment, grants access to the protected content.</li>
    </ul>
  </li>
  <li><a href="https://supertestnet.github.io/mint_marketcap/">Mint Marketcap</a>: A stats website that tries to guess how much money bitcoiners store on ecash mints [<a href="https://github.com/supertestnet/mint_marketcap">Github</a>]
    <ul>
      <li>It queries each cashu mint for an invoice, extracts the public key, and retrieves associated data to approximate holdings.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Rust Lightning <a href="https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.1.1">v0.1.1</a> - “Onchain Matters”
    <ul>
      <li>API Updates:
        <ul>
          <li>Re-Add a <code class="language-plaintext highlighter-rouge">ChannelManager::send_payment_with_route</code></li>
          <li>Add <code class="language-plaintext highlighter-rouge">RawBolt11Invoice::{to,from}_raw</code></li>
        </ul>
      </li>
      <li>Security: 0.1.1 fixes a denial-of-service vulnerability allowing channel counterparties to cause force-closure of unrelated channels.</li>
    </ul>
  </li>
  <li>Zeus <a href="https://github.com/ZeusLN/zeus/releases/tag/v0.9.5">v0.9.5</a>
    <ul>
      <li>Embedded LND: Seed: allow export of ypriv/zpriv (export to external wallets like Sparrow)</li>
      <li>CLNRest: add ability to use all funds for channel open</li>
      <li>Activity list: performance improvements</li>
      <li>Lurker mode improvements</li>
      <li>Improve display of memos and keysend messages</li>
      <li>Allow return key for password login</li>
      <li>Automatically include routing hints if node has only unannounced channels</li>
      <li>Wallets list: better highlighting of active mode</li>
      <li>Enhance on-chain receive workflow and address type selection</li>
      <li>Migration to new storage system</li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>Alby Go <a href="https://github.com/getAlby/go/releases/tag/v1.9.0">v1.9.0</a>
        <ul>
          <li>Real-time push notifications of sent and received payments</li>
          <li>Support to pay 0-amount invoices</li>
          <li>Update LN address flow to avoid confusion</li>
          <li>Increase button touch area in header for ease of use</li>
        </ul>
      </li>
      <li>Lightning-browser-extension <a href="https://github.com/getAlby/lightning-browser-extension/releases/tag/v3.11.0">v3.11.0</a> - Pleiades over Half Dome
        <ul>
          <li>Separate card for just importing nostr key</li>
          <li>Add sinhalese to language switcher</li>
          <li>Add tamil and russian language to locale switcher</li>
          <li>Show pending and failed transactions for NWC</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Aqua Wallet <a href="https://github.com/AquaWallet/aqua-wallet/releases/tag/0.2.7">v0.2.7</a>
    <ul>
      <li>New Features:
        <ul>
          <li>Select from different price feeds</li>
          <li>Set a passcode</li>
          <li>Toggle between the Bitcoin Price, Total Account Balance, and hide account balance on the header</li>
          <li>Send and receive Liquid USDt on 4 new chains</li>
          <li>Add a button to clear inputs in address entry fields</li>
          <li>Add new Share Logs features in settings to help debug errors</li>
        </ul>
      </li>
      <li>Integrations:
        <ul>
          <li>Add Changelly for USDt swaps in the US and Thailand</li>
          <li>Add BTC Direct to buy Bitcoin in Europe</li>
          <li>Add Money Badger support for Lightning payments at Pick n Pay</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>CDK <a href="https://github.com/cashubtc/cdk/tree/main/releases/tag/v0.7.0">v0.7.0</a>
    <ul>
      <li><code class="language-plaintext highlighter-rouge">Token::to_raw_bytes</code> serializes generic token to raw bytes</li>
      <li><code class="language-plaintext highlighter-rouge">Token::try_from</code> for <code class="language-plaintext highlighter-rouge">Vec&lt;u8&gt;</code> constructs a generic token from raw bytes</li>
      <li><code class="language-plaintext highlighter-rouge">TokenV4::to_raw_bytes()</code> serializes a TokenV4 to raw bytes following the spec</li>
      <li><code class="language-plaintext highlighter-rouge">Wallet::receive_raw</code> which receives raw binary tokens</li>
      <li>cdk-mint-rpc: Mint management gRPC client and server</li>
      <li>cdk-common: cdk specific types and traits</li>
      <li>cashu: Core types and functions defined in NUTs</li>
    </ul>
  </li>
  <li>Cashu-ts <a href="https://github.com/cashubtc/cashu-ts/releases/tag/v2.2.0">v2.2.0</a>
    <ul>
      <li>Move to vite for bundling (updated target + typescript, added standalone builds)</li>
      <li>Add custom output data for consumers to take control over the output data used for proof creation</li>
      <li>Use <code class="language-plaintext highlighter-rouge">sendOption</code> type in function argument</li>
    </ul>
  </li>
  <li>Nutshell <a href="https://github.com/cashubtc/nutshell/releases/tag/0.16.5">v0.16.5</a>
    <ul>
      <li>This maintenance release contains various bug fixes for the mint and the wallet. Most notably, overpaid Lightning fees are now issued to the user at the next restart of the mint in cases where the mint has crashed or turned off while an outgoing Lightning payment was still pending.
        <ul>
          <li>Add restart policy for Redis Docker container</li>
          <li>Issue NUT-08 overpaid Lightning fees for melt quote checks on startup</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Clams Remote <a href="https://github.com/clams-tech/Remote/releases/tag/remote-2.6.0">v2.6.0</a>
    <ul>
      <li>Add TipModal component to settings screen</li>
    </ul>
  </li>
  <li>Plan B Network [<a href="https://planb.network/en/public-communication/blogs-and-news/feature/jan-new-features">January update</a>]
    <ul>
      <li>Brand-new student dashboard</li>
      <li>Add course conclusion pages</li>
      <li>Expand resources section</li>
      <li>Announce future search portal</li>
      <li>Plan B Network launches Plan ₿ Labs - Lightning, a biweekly live session focusing on the Lightning Network’s developments and technical intricacies [<a href="https://x.com/planb_network/status/1883909506993913966">Announcement</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li><a href="https://roz.coracle.social/">Roz</a>: A notary for nostr events [<a href="https://github.com/coracle-social/roz">Github</a>]
    <ul>
      <li>Roz is a proof-of-concept notary for nostr events, providing timestamp verification for event authenticity.</li>
    </ul>
  </li>
  <li><a href="https://vertexlab.io/">Vertex</a>: A fast, reliable and open source Web of Trust DVM service based on the Personalized Pagerank algorithm [<a href="https://github.com/vertex-lab">Github</a>]
    <ul>
      <li>The service features a custom-designed data structure for rapid access to Pagerank and Personalized Pagerank within nostr, with all responses cryptographically signed by Vertex’s key.</li>
    </ul>
  </li>
  <li><a href="https://lockbox.fiatjaf.com/">Lockbox</a>: A Nostr relay that accepts notes that should only be read by people you follow [<a href="https://git.fiatjaf.com/lockbox">Code repository</a>]
    <ul>
      <li>Lockbox allows users to publish notes visible only to those they follow, using specific nostr protocols like NIP-70 and NIP-42</li>
      <li>Notes can be shared from any client, but require the inclusion of a “-“ tag and support for authentication.</li>
    </ul>
  </li>
  <li>nostrdb-mcp: A Model Context Protocol server for nostrdb [<a href="https://github.com/damus-io/nostrdb-mcp">Github</a>]
    <ul>
      <li>nostrdb-mcp enables LLMs to interact with the nostrdb command-line tool for local queries. The server uses your Notedeck directory by default, allowing it to search your notes.</li>
    </ul>
  </li>
  <li><a href="https://freeflow.app/">Freeflow</a>: A TikTok clone in Flutter and Nostr [<a href="https://github.com/nostrlabs-io/freeflow">Github</a>]
    <ul>
      <li>Users willing to post content can use zap.stream or olas to create shorts.</li>
    </ul>
  </li>
  <li><a href="https://www.pinja.in/">Pinja</a>: A decentralized social media using the Nostr protocol
    <ul>
      <li>The platform offers features such as messaging, notifications, and search functionality.</li>
    </ul>
  </li>
  <li><a href="https://bitvid.network/">BitVid</a>: A decentralized platform where users can share videos and follow creators with privacy and freedom [<a href="https://github.com/PR0M3TH3AN/bitvid">Github</a>]
    <ul>
      <li>The platform employs WebTorrent for peer-to-peer video streaming and Nostr for secure, password-free user authentication</li>
    </ul>
  </li>
  <li>Crawler: A nostr crawler that generates random walks used for computing monte-carlo pagerank and personalized pagerank [<a href="https://github.com/vertex-lab/crawler">Github</a>]
    <ul>
      <li>Vertex-lab’s crawler continuously scans the nostr network, focusing on follow lists (kind3s), to maintain an updated database.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>rust-nostr <a href="https://github.com/rust-nostr/nostr/releases/tag/v0.39.0">v0.39.0</a>
    <ul>
      <li>Add NIP96 support</li>
      <li>Add NIP22 helpers</li>
      <li>Adjust NIP01</li>
      <li>Add <code class="language-plaintext highlighter-rouge">try_connect</code> and <code class="language-plaintext highlighter-rouge">wait_for_connection</code> methods for better connection handling</li>
      <li>Add support for custom WebSocket clients (both in Rust, Python, Kotlin and Swift)</li>
      <li>New JVM bindings</li>
      <li>Huge reduction of UniFFI bindings binaries size</li>
    </ul>
  </li>
  <li>Primal <a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.1.4">v2.1.4</a>
    <ul>
      <li>This update implemented the following:
        <ul>
          <li>Primal Wallet NWC</li>
          <li>Primal Legend cards</li>
          <li>Legends &amp; Primal OG Leaderboards</li>
          <li>Updated Legends Settings with leaderboard toggle and shoutout edits</li>
          <li>Deep links for primal.net notes</li>
          <li>Spotify and Tidal link previews</li>
          <li>Embedded web player for YouTube, Spotify and Tidal</li>
          <li>Rendering referenced note zaps</li>
          <li>Support for kind20 referenced events in feeds</li>
          <li>Showing top zaps in all note feeds (incl. thread screen)</li>
          <li>Clikcable zap links in Reactions screen &amp; Wallet TX details</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Olas <a href="https://njump.me/nevent1qqspwvafemvmthp2f6qh67h3zt0xftvwzfsrx626rn3fmx8lph83stcppamhxue69uhkummnw3ezumt0d5q3wamnwvaz7tmwdaehgu3wvekhgtnhd9azucnf0gq3gamnwvaz7tmjv4kxz7fwdehhxarj9e3xwqguwaehxw309ahx7um5wghxy6t5vdhkjmn9wgh8xmmrd9skc3kw6kx">Update</a>
    <ul>
      <li>Multiple images per post</li>
      <li>Pause videos when switching away from the video feed</li>
      <li>Add Instagram-like filters</li>
      <li>Improve Nostr-native wallet</li>
      <li>Improve NWC reliability</li>
      <li>Add setting to toggle between displaying posts squared or full-length</li>
    </ul>
  </li>
  <li>Damus
    <ul>
      <li><a href="https://njump.me/naddr1qqjrjvtxvc6nwcee95unvv3e956rsef495unxep495ekzv3exa3kycnpx56nvq3q8m76awca3y37hkvuneavuw6pjj4525fw90necxmadrvjg0sdy6qsxpqqqp65w2r5vyn">v1.12</a> App Store release
        <ul>
          <li>Render Gif and video files while composing posts</li>
          <li>Add profile info text in stretchable banner with follow button</li>
          <li>Paste Gif image similar to jpeg and png files</li>
        </ul>
      </li>
      <li>Launch of the Alpha version of <a href="https://damus.io/notedeck/">Notedeck</a> for all users, Damus’ multiplatform Nostr client [<a href="https://x.com/damusapp/status/1885504397721166167">Announcement</a>]</li>
    </ul>
  </li>
  <li>Futr <a href="https://njump.me/note1709sh6ltc7y4emjfmtqd2970egcltwu5thr2rpvr2g03xnflh58q0swqve">v0.2.0</a>
    <ul>
      <li>Comment support with threaded discussions (NIP-10)</li>
      <li>Repost and quote repost functionality (NIP-18)</li>
      <li>Improve post rendering and content display</li>
      <li>Event deletion support (NIP-09)</li>
      <li>Persistent LMDB-based storage for all data</li>
      <li>LRU caching system for improved performance</li>
      <li>Optimize timeline storage and retrieval</li>
      <li>Better subscription handling and event processing</li>
      <li>Improve relay connection stability with websocket ping/pong</li>
      <li>Better relay discovery through NIP-65 (Inbox &amp; Outbox Model)</li>
      <li>Optimize subscription management</li>
      <li>Enhance relay authentication</li>
      <li>Reference post display</li>
      <li>Comment threading and counts</li>
      <li>Better notification handling for post updates</li>
      <li>Consolidate LMDB operations</li>
      <li>Improve subscription lifecycle management</li>
      <li>Enhance tag parsing and handling</li>
      <li>Optimize event caching and invalidation</li>
    </ul>
  </li>
  <li>Flotilla
    <ul>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.7">v0.2.7</a>
        <ul>
          <li>Add calendar events</li>
          <li>Make reply indicator nicer</li>
          <li>Make share indicator nicer</li>
          <li>Improve feed loading</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.6">v0.2.6</a>
        <ul>
          <li>Add reply to long-press menu</li>
          <li>Replace nsec.app signup with njump.me</li>
          <li>Add new messages button in rooms</li>
          <li>Add media server settings</li>
          <li>Add build hash to about page</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.5">v0.2.5</a>
        <ul>
          <li>Improve room and data loading</li>
          <li>Drop support for legacy event kinds</li>
          <li>Add support for back button navigation on android</li>
          <li>Remove note to self page (still available via chat)</li>
          <li>Improve chat conversation search</li>
          <li>Change how reply UI works</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Yakihonne
    <ul>
      <li>Web <a href="https://njump.me/nevent1qqs2nrvrhypwvqdmjd9aq7z3y2mcg2yjp8ztvzvflchdl969pxsqacszyqsfsmac8em4m9k33r99e803pnndvylqadl9w69q7zcjkd7d4ssmxqcyqqqqqqgg6vglk">v4.3.0</a> / Mobile <a href="https://njump.me/nevent1qqs2nrvrhypwvqdmjd9aq7z3y2mcg2yjp8ztvzvflchdl969pxsqacszyqsfsmac8em4m9k33r99e803pnndvylqadl9w69q7zcjkd7d4ssmxqcyqqqqqqgg6vglk">v1.6.4</a>
        <ul>
          <li>Yakihonne wallet name customization for newly created wallets</li>
          <li>Option to toggle between collapsed or expanded notes in the feed for a personalized experience</li>
          <li>Notification preferences can now be managed directly from the settings page</li>
          <li>Quick access to your profile with the newly added profile button</li>
          <li>Native poll rendering and voting functionality within notes</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nak <a href="https://njump.me/nevent1qqsqqqqk8p2q42fd6r4apt38gfcs735vw3f27c7g097zl4dm39l46vgzyqalp33lewf5vdq847t6te0wvnags0gs0mu72kz8938tn24wlfze688776h">Update</a>
    <ul>
      <li>Nak wallet: Implement NIP-60 token receiving, sending and swapping</li>
      <li>Nak curl: Wrap the actual curl command and add a NIP-98 header to it, allowing APIs calls with Nostr authorization</li>
      <li>Nak mcp: Allow AIs to search people on Nostr, publish notes, mention people, read notes with built-in outbox model</li>
      <li>Nak outbox: List NIP-65 relays for a given pubkey</li>
      <li>Add option to pipe multiline JSON into ‘nak event’ or ‘nak req’</li>
    </ul>
  </li>
  <li>Narr <a href="https://github.com/fiatjaf/narr/releases/tag/v0.3.3">v0.3.3</a>
    <ul>
      <li>Setup amd64 and arm64 docker image builds</li>
      <li>Increase article fetching limit to 300.</li>
    </ul>
  </li>
  <li>Njump.me <a href="https://njump.me/nevent1qqsqqqrf9qpefte5fepz3wmz3u4uf022zrsj0m0lw0nara2g3ys0kvspp4mhxue69uhkummn9ekx7mqzyqalp33lewf5vdq847t6te0wvnags0gs0mu72kz8938tn24wlfze6frtjlt">Update</a>
    <ul>
      <li>Add support for kind:20 photos</li>
    </ul>
  </li>
  <li>Keycast <a href="https://njump.me/note18rmtnvwectesnkk06u99qgxh0h48ce3mp3p0m8twpkvpvupetp2q6juv5z">Update</a>
    <ul>
      <li>Docker now actually builds properly</li>
      <li>Simplify own domain setup</li>
      <li>Simplify config via a single .env file</li>
      <li>Add config for “allowed pubkeys”</li>
    </ul>
  </li>
  <li>Citrine <a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.7.1">v0.7.1</a>
    <ul>
      <li>Add the restore follows button back</li>
      <li>Show notification when backing up database</li>
      <li>Listen for pokey broadcasts</li>
    </ul>
  </li>
  <li>nos.social <a href="https://github.com/planetary-social/nos/releases/tag/v1.1.1-299">v1.1.1</a>
    <ul>
      <li>Add Lists view and two ways to navigate to it</li>
      <li>Add view for editing a list’s title and description</li>
      <li>Add List detail view</li>
      <li>Add view for managing users in a list</li>
      <li>Add ability to delete lists</li>
      <li>Add analytics for feed source selection and lists</li>
    </ul>
  </li>
  <li>Amber
    <ul>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.2.1">v3.2.1</a>
        <ul>
          <li>Add some details when signing a contact list</li>
          <li>Refactor check for logged in account</li>
          <li>After granting notification permissions show the notification</li>
        </ul>
      </li>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.2.0">v3.2.0</a>
        <ul>
          <li>Add profile picture in the incoming requests screen when using a large screen device</li>
          <li>Add more event kinds translations</li>
          <li>Add a log with the bunker request response</li>
          <li>Use the relay from the request to send the response when no app is found</li>
        </ul>
      </li>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.1.9">v3.1.9</a>
        <ul>
          <li>Add missing logs for relay errors</li>
          <li>Change listen for new connections button text and icons</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Macadamia <a href="https://github.com/zeugmaster/macadamia/releases/tag/0.2.1">v0.2.1</a>
    <ul>
      <li>This release is the first to be published to the App Store:
        <ul>
          <li>UI Improvements and project structure</li>
          <li>Token V4 support, drop multi mint token redeem capability</li>
          <li>Hide Mints instead of deleting</li>
          <li>SwiftData thread safety &amp; melt recoverability</li>
          <li>Add Onboarding</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>KeyChat App <a href="https://github.com/keychat-io/keychat-app/releases/tag/1.26.5%2B6319">v1.26.5</a>
    <ul>
      <li>Add browser tab</li>
      <li>Support nip07 to login websites</li>
    </ul>
  </li>
  <li>Fountain <a href="https://njump.me/nevent1qqsd9q6rc6wtql3l0rzpvg95sqxnyav99u65l3an676sxfq7amdgrjqzypjn3yj7h7mxraqcmrraqa97ut52l4mcwqwa3yrsctdfxm2hre2uxqcyqqqqqqgpj28fp">v1.1.14</a>
    <ul>
      <li>Improve Nostr connect</li>
      <li>Add ability to switch between NIP55 and nsec</li>
      <li>Add the ability to seek while paused</li>
    </ul>
  </li>
  <li>Pokey <a href="https://github.com/KoalaSat/pokey/releases/tag/v0.1.4-alpha">v0.1.4-alpha</a>
    <ul>
      <li>Features
        <ul>
          <li>Permanent and note notifications are now separated in 2 groups to be managed by Android settings</li>
          <li>Number of connected relays now displays as part of the permanent notification</li>
        </ul>
      </li>
      <li>What’s Changed
        <ul>
          <li>Create a group for the service notification</li>
          <li>Show connected relays</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Haven
    <ul>
      <li><a href="https://github.com/bitvora/haven/releases/tag/v1.0.5">v1.0.5</a>
        <ul>
          <li>Support for DB backup with Digital Ocean Spaces</li>
        </ul>
      </li>
      <li><a href="https://github.com/bitvora/haven/releases/tag/v1.0.4">v1.0.4</a>
        <ul>
          <li>feat(lmdb): make LMDB map size configurable</li>
          <li>NIP-40 and ReplaceableEvents</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Algo Relay <a href="https://github.com/bitvora/algo-relay/releases/tag/v0.1.4">v0.1.4</a>
    <ul>
      <li>Ranking any note type: support for NIP-20 &amp; NIP-23</li>
    </ul>
  </li>
  <li>nos2x-fox <a href="https://github.com/diegogurpegui/nos2x-fox/releases/tag/v1.17.0">v1.17.0</a>
    <ul>
      <li>Unique unified prompt popup to avoid flooding windows</li>
      <li>New kind description in prompt popup</li>
    </ul>
  </li>
  <li>Plebeian app launches the MVP of Plebeian.Market, its decentralized marketplace dedicated to goods and services tailored for the Bitcoin and Nostr communities [<a href="https://www.nobsbitcoin.com/plebeian-app-launches-mvp-of-plebeian-market-platform/">No BS Bitcoin</a>]
    <ul>
      <li>After four years of development and multiple pivots, the Plebeian app has settled on NOSTR to demonstrate a proof of concept that is poised to disrupt traditional commerce.</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:26:35 Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>@Anonymous (2,100 sats) “Second best bitcoin show!”</li>
      <li>@Anonymous (2,100 sats) “Created Bip85 seed for friend. Exported xpub to his bluewallet for deposits, and he recorded seed phrase. After listening to pod I freaked… SUCCESS!!! Seed words were good, on hardware wallet.”</li>
      <li>@AVERAGE_GARY (100 sats) “🤝🫶🫂🤌🫡👏🔥🥳🙇🏻‍♂️”</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tips-of-the-day">Tech Tips of the Day</h3>
<ul>
  <li><a href="https://linkcleaner.app/">Link cleaner</a>: An open-source progressive web app for removing tracking parameters from URLs [<a href="https://github.com/corbindavenport/link-cleaner">Github</a>]
    <ul>
      <li>It works offline, can bulk process multiple links and integrate with device share menus.</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/02/07/">340</a>
        <ul>
          <li>Channel force closure vulnerability in LDK</li>
          <li>Zero-knowledge gossip for LN channel announcements</li>
          <li>Discovery of previous research for finding optimal cluster linearization</li>
          <li>Erlay update</li>
          <li>Tradeoffs in LN ephemeral anchor scripts</li>
          <li>Emulating OP_RAND</li>
          <li>Discussion about lowering the minimum transaction relay feerate</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/01/31/">339</a>
        <ul>
          <li>Vulnerability in LDK claim processing</li>
          <li>Replacement cycling attacks with miner exploitation</li>
          <li>Updated stats on compact block reconstruction</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/01/24/">338</a>
        <ul>
          <li>Draft BIP for unspendable keys in descriptors</li>
          <li>PSBTv2 integration testing</li>
          <li>Correction about offchain DLCs</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="lightning--l2-1">Lightning + L2+</h4>
<ul>
  <li>Tether announces the integration of USDT on bitcoin’s Lightning Network, utilizing the Taproot Assets protocol developed by Lightning Labs [<a href="https://lightning.engineering/posts/2025-01-30-Tether-on-Lightning/">Announcement</a>]
    <ul>
      <li>With over 350 million users, Tether aims to enable instant, low-cost cross-border USDT transactions on Lightning.</li>
      <li>Developers are encouraged to integrate USDT on Lightning by downloading the latest version of the litd suite, which combines necessary services into a single binary for an easy integration.</li>
    </ul>
  </li>
  <li>Core Lightning now offers bounties for open-source contributions on the CLN Build on L2 platform [<a href="https://x.com/Core_LN/status/1884867145743716774">Announcement</a>]
    <ul>
      <li>Developers can browse <a href="https://community.corelightning.org/c/cln-bounties/">issues</a>, claim bounties, and contribute to CLN’s development.</li>
    </ul>
  </li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Blockstream launches Blockstream Asset Management and announces two Bitcoin-based investment funds: the Blockstream Income Fund and the Blockstream Alpha Fund, both set to open in Q1 2025. [<a href="https://blockstream.com/press-releases/2025-01-23-blockstream-asset-management-launch-bitcoin-funds/">Press release</a>]
    <ul>
      <li>The Blockstream Income Fund aims to generate stable, predictable USD-based income by lending against Bitcoin collateral with conservative loan-to-value ratios.</li>
      <li>The Blockstream Alpha Fund is designed to capitalize on Bitcoin’s ecosystem through diverse strategies, offering institutions and accredited investors exposure to Bitcoin’s growth potential.</li>
    </ul>
  </li>
  <li>Casa launches Casa Business, enabling companies to hold digital assets in a 3-key vault for self-custody [<a href="https://blog.casa.io/introducing-casa-business/">Blog post</a>]
    <ul>
      <li>The platform offers team signing, allowing multiple key holders within a company to manage the treasury securely</li>
    </ul>
  </li>
  <li>Galoy launches Lana, a lending platform enabling banks to offer fiat loans secured by bitcoin collateral [<a href="https://www.galoy.io/galoy-blog/galoy-launches-lana-to-unlock-digital-asset-collateralized-lending-for-challenger-community-banks">Blog post</a>]
    <ul>
      <li>Bitcoin-backed loans allow customers to access liquidity without selling assets, avoiding capital gains taxes.</li>
    </ul>
  </li>
  <li>European fintech company Bringin launches its debit card  [<a href="https://x.com/bringinxyz/status/1884948259833016386">Announcement</a>]
    <ul>
      <li>The card integrates with Google Pay and Apple Pay via the Curve app, and enables tap-and-pay functionality at global merchants.</li>
    </ul>
  </li>
  <li>Trivago integrates with Travala, allowing users to book hotels using over 100 cryptocurrencies, including bitcoin [<a href="https://www.theblock.co/post/338722/trivago-travala-integration-crypto-payments">The Block</a>]</li>
  <li>Braiins Mining introduces <a href="https://solo.braiins.com/stats">Braiins Solo</a>, a dedicated solo pool designed for miners who want to mine independently, to avoid diluting the hashrate of the original Braiins Mining pool.</li>
  <li>Bitcoin financial services company River announces zero-fee status for U.S.-based open-source Bitcoin developers and non-profits funding such development [<a href="https://blog.river.com/open-source-zero-fee/">Announcement</a>]</li>
  <li>Rumble announces the development of Rumble Wallet, aiming to provide creators with a new way to transact using Bitcoin and Tether [<a href="https://cryptoslate.com/rumble-bets-on-bitcoin-with-new-creator-payment-wallet/">CryptoSlate</a>]
    <ul>
      <li>Rumble has also entered a cloud services agreement with the Government of El Salvador, providing cloud storage, computing, databases, load balancers, and Kubernetes integration.</li>
    </ul>
  </li>
  <li>FTX Recovery Trust to begin distributing funds to creditors in the convenience class (claims under $50,000) in February 2025 [<a href="https://x.com/FTX_Official/status/1886889964073373711">Announcement</a>]</li>
  <li>Open House Group introduces bitcoin payments for property purchases in Japan [<a href="https://www.prnewswire.com/apac/news-releases/open-house-group-launches-real-estate-sales-via-cryptocurrency-302365274.html">PR Newswire</a>]
    <ul>
      <li>The company collaborates with Diamond Hands, Japan’s largest Lightning Network community, to explore applications in real estate.</li>
      <li>Research areas include operating full nodes for businesses and utilizing the Lightning Network for IoT micropayments.</li>
    </ul>
  </li>
  <li>Digital Currency Group (DCG) launches Fortitude Mining, a wholly-owned subsidiary focusing on venture mining across various digital assets [<a href="https://www.businesswire.com/news/home/20250129138884/en/DCG-Launches-Fortitude-Mining-A-New-Venture-Mining-Subsidiary-Targeting-High-Growth-Digital-Assets">Business Wire</a>]</li>
</ul>

<h4 id="ai">AI</h4>
<ul>
  <li>Block introduces <a href="https://block.github.io/goose/docs/quickstart/">codename goose</a>: An open-source, extensible AI agent that goes beyond code suggestions [<a href="https://github.com/block/goose">Github</a>]
    <ul>
      <li>Goose is compatible with a wide range of large language model providers, allowing users to choose and integrate their preferred model.</li>
    </ul>
  </li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>OpenSats <a href="https://opensats.org/blog/ninth-wave-of-bitcoin-grants">announces</a> the Ninth Wave of Bitcoin Grants, supporting four projects that enhance open-source innovation, privacy, and accessibility within the Bitcoin ecosystem: Kibo, El Tor, Nutstash, and rust-bitcoin.</li>
  <li>The 256 Foundation raises a total of 3.146 BTC for open-source bitcoin mining during its Telehash fundraiser [<a href="https://x.com/econoalchemist/status/1884756993312698567">Twitter post</a>]
    <ul>
      <li>Supporters contributed hashrate to a self-hosted mining pool, which successfully solved block 881423 during the event.</li>
    </ul>
  </li>
  <li>Brink renews its financial support for all of its 8 Bitcoin Core engineers through 2025: @fanquake, @glozow, @hhebasto, @theStack, @dergoegge, @stphnvlstk, @fjahr and @marcofleon [<a href="https://x.com/bitschmidty/status/1887559865050018285">Announcement</a>]</li>
  <li>HRF announces all 11 bounties of its Bitcoin Bounty Challenge have been claimed by developers [<a href="https://njump.me/nevent1qqsyjvkr2gzs8yrsq2actl0xrj7cstng8gsgy26fuwla4q9s2jmz74qpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3q7xvf49kht23cddxgw92rvfktkd3vqvjgkgsdexh9847wl0927tqsyhpwhy">Announcement</a>]</li>
  <li>Spiral renews grant to Justin Moeller (@m1sterc001guy) for his work on Fedimint [<a href="https://x.com/spiralbtc/status/1884292908049920136">Announcement</a>]</li>
  <li>Bitcoin association Einundzwanzig announces a 0.021 bitcoin donation to both <a href="https://x.com/_einundzwanzig_/status/1886794610703220825">Sparrow Wallet</a> and <a href="https://x.com/_einundzwanzig_/status/1886412747836969194">Alby</a>, and 0.1 bitcoin to the <a href="https://njump.me/nevent1qqsq08pc8x4gx7yu9uye2rpesexpn7w8a95zshmxq2thuepcfgfk5fqpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3qqv02xpsc3lhxxx5x7xswf88w3u7kykft9ea7t78tz7ywxf7mxs9qad0sl4">legal defense of the Samourai Wallet developers</a>.</li>
  <li>Breez secures $5 million to expand bitcoin payment integration [<a href="https://medium.com/breez-technology/breez-has-been-building-momentum-and-were-just-getting-started-06cf97c272ab">Blog post</a>]</li>
  <li>Taproot Wizards raises $30 million in a post-seed funding round to enhance OP_CAT [<a href="https://www.theblock.co/post/338805/taproot-wizards-raises-30-million-to-expand-op_cat-functionality-on-bitcoin">The Block</a>]</li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li><a href="https://proto.xyz/">Proto</a> announces a long-term partnership with <a href="https://256foundation.org/">The 256 Foundation</a>, donating 256,000 Intel BZM2 chips to support decentralized bitcoin mining initiatives [<a href="https://www.mining.build/blog/decentralization-is-bigger-than-any-one-entity/">Announcement</a>]</li>
  <li>Braiins Mining open sources its BCB 100 bitcoin mining control board as a contribution to the open-source mining initiative led by the 256 Foundation [<a href="https://x.com/BraiinsMining/status/1885036577702703232">Announcement</a>]
    <ul>
      <li>The BCB 100, designed for Bitmain S19 series and Mini Miner, is now available for public use and development.</li>
    </ul>
  </li>
  <li>Decentralization concerns grow as Bitcoin mining pools consolidate [<a href="https://x.com/JStefanop1/status/1887235853312757968">Twitter post</a>]
    <ul>
      <li>The Bitcoin mempool displays live centralized mining pools that share the same Stratum jobs, reflecting increased consolidation. These pools collectively account for over 35% of the total network hashrate.</li>
      <li>Antpool leads the consolidation, while other major Chinese pools like F2Pool and ViaBTC—known to collaborate with Antpool—are not included in this count. This suggests that over 51% of the hashrate is controlled by a few entities.</li>
    </ul>
  </li>
  <li>Stolen identities lead to $1.9m bitcoin mining power theft in Malaysia [<a href="https://theminermag.com/news/2025-01-24/bitcoin-mining-identity-power-theft/">The Miner Mag</a>]
    <ul>
      <li>Forty-five homeowners and business operators in Malaysia received power bills after tenants allegedly stole their identities to mine Bitcoin illegally.</li>
    </ul>
  </li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>France bans crypto mixers to combat money laundering [<a href="https://www.senat.fr/amendements/commissions/2023-2024/735/Amdt_COM-59.html">Amendment N°COM-59</a>]
    <ul>
      <li>The ban anticipates a similar European regulation effective from July 10, 2027. The French Senate’s legal commission adopted the amendment to address the alledgedly increasing use of mixers in laundering illicit funds.</li>
    </ul>
  </li>
  <li>DARPA to launch pre-crime anti-money laundering program [<a href="https://www.therage.co/darpa-aml-precrime/">The Rage</a>]
    <ul>
      <li>The Defense Advanced Research Projects Agency (DARPA) announces the Anticipatory and Adaptive Anti-Money Laundering (A3ML) program, aiming to develop algorithms that detect suspicious financial patterns to anticipate and prevent money laundering activities.</li>
      <li>The objective of the program is to “eliminate global money laundering by replacing the current manual, reactive, and expensive analytic practices with agile, algorithmic methods”.</li>
    </ul>
  </li>
  <li>Swiss FinMa accused of overstepping authority in implementing new KYC rule [<a href="https://www.therage.co/leaked-email-finma-abused-authority-to-implement-new-kyc-rule-based-on-tabloid-news-2/">The Rage</a>]
    <ul>
      <li>A leaked email reveals that Switzerland’s Financial Market Supervisory Authority (FINMA) instructed Self-Regulatory Organizations to enforce a monthly 1,000 CHF limit on no-KYC transactions for Virtual Asset Service Providers. Critics argue that FINMA overstepped its authority, as it is permitted to issue guidance but not direct instructions to SROs.</li>
    </ul>
  </li>
  <li>United Kingdom demands Apple to provide global backdoor access to encrypted data [<a href="https://archive.ph/M7I2C">The Washington Post</a>]
    <ul>
      <li>The UK government has secretly ordered Apple to grant blanket access to users’ encrypted cloud backups under the Investigatory Powers Act. This unprecedented demand applies worldwide, forcing Apple to either compromise encryption or withdraw the service in the UK. Apple has refused to comment but is expected to challenge the order.</li>
    </ul>
  </li>
  <li>Digital rights group EFF urges dismissal of charges against Tornado Cash developer Roman Storm [<a href="https://www.coindesk.com/policy/2025/01/29/digital-rights-group-eff-calls-for-roman-storm-dismissal-in-tornado-cash-case">CoinDesk</a>]
    <ul>
      <li>The Electronic Frontier Foundation emphasizes that many privacy tools are dual-use, serving legitimate purposes but potentially misused by bad actors. They argue that holding developers liable for misuse of their open-source software threatens innovation and privacy rights.</li>
    </ul>
  </li>
  <li>Poland proposes changes to EU Chat Control, but concerns remain [<a href="https://www.patrick-breyer.de/en/half-good-new-polish-chat-control-proposal-to-be-discussed-on-wednesday/">Blog post</a>]
    <ul>
      <li>Poland proposes making chat content searches voluntary instead of mandatory, aiming to protect encryption while still allowing surveillance.</li>
      <li>The proposed ban on anonymous communication would require users to present an ID or facial verification to set up email or messaging accounts.</li>
    </ul>
  </li>
  <li>The EU’s Artificial Intelligence Act prohibits real-time remote biometric identification by law enforcement in public spaces, except under specific circumstances. [<a href="https://reclaimthenet.org/eu-ai-act-effectively-legalizes-biometric-mass-surveillance">Reclaim The Net</a>]
    <ul>
      <li>Exceptions include situations involving a present or foreseeable terrorist threat, allowing law enforcement to use such technology under certain conditions.</li>
      <li>Critics argue that these exceptions effectively legalize biometric mass surveillance, as they provide legal avenues for its deployment.</li>
    </ul>
  </li>
  <li>The Reserve Bank of India teams up with fintech firms MobiKwik, Cred, and Yes Bank to pilot the digital rupee [<a href="https://www.businesstoday.in/personal-finance/news/story/mobikwik-cred-join-hands-with-rbi-to-fully-launch-cbdc-ers-for-android-check-features-usage-462318-2025-01-28">Business Today</a>]
    <ul>
      <li>The e₹ wallet app requires video verification and enforces daily limits of ₹50,000 ($577) and ₹10,000 ($115) per transaction. These platforms, with a combined user base of 180 million, will provide public access via the e₹ wallet app.</li>
    </ul>
  </li>
  <li>Google revises AI principles, removes pledge against weaponization [<a href="https://techcrunch.com/2025/02/04/google-removes-pledge-to-not-use-ai-for-weapons-from-website/">TechCrunch</a>]
    <ul>
      <li>Google has updated its AI principles, removing previous commitments to avoid developing AI for weapons and surveillance. This change aligns Google with other tech companies like Meta and OpenAI, which permit certain military applications of their technologies.</li>
    </ul>
  </li>
</ul>

<h4 id="security">Security</h4>
<ul>
  <li>Tropic Square releases TROPIC01 RISC-V-based secure element samples for testing [<a href="https://www.tropicsquare.com/tropic01-samples">Announcement</a>]
    <ul>
      <li>TROPIC01 is an open and auditable secure element designed to safeguard hardware systems.</li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #21590: Safegcd-based modular inverses in MuHash3072 [<a href="https://github.com/bitcoin/bitcoin/pull/21590">Merged</a>]</li>
  <li>Bitcoin Core #31397: p2p: track and use all potential peers for orphan resolution [<a href="https://github.com/bitcoin/bitcoin/pull/31397">Merged</a>]</li>
  <li>Bitcoin Core #31376: Miner: never create a template which exploits the timewarp bug [<a href="https://github.com/bitcoin/bitcoin/pull/31376">Merged</a>]</li>
  <li>LDK #3408: Add static invoice creation utils to <code class="language-plaintext highlighter-rouge">ChannelManager</code> [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3408">Merged</a>]</li>
  <li>BOLT #1110: Peer storage for nodes to distribute small encrypted blobs [<a href="https://github.com/lightning/bolts/pull/1110">Merged</a>]</li>
  <li>Eclair #2982: Add liquidity griefing protection for liquidity ads [<a href="https://github.com/ACINQ/eclair/pull/2982">Merged</a>]</li>
  <li>Eclair #2968: Send <code class="language-plaintext highlighter-rouge">channel_announcement</code> for splice transactions on public channels [<a href="https://github.com/ACINQ/eclair/pull/2968">Merged</a>]</li>
  <li>NIP #1713: Add NIP-4A Event Onion Routing [<a href="https://github.com/nostr-protocol/nips/pull/1713">Open</a>]</li>
  <li>NIP #1718: NIP-101 - Decentralized Trust System for Nostr [<a href="https://github.com/nostr-protocol/nips/pull/1718">Open</a>]</li>
  <li>NIP #1728: Re-write NIP 89 to accommodate relays/dvms [<a href="https://github.com/nostr-protocol/nips/pull/1728">Open</a>]</li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>Czech President Petr Pavel signs a bill exempting Bitcoin and other digital assets from capital gains tax if held for more than three years [<a href="https://www.coindesk.com/policy/2025/02/06/czech-republic-to-eliminate-taxes-on-long-term-crypto-gains">CoinDesk</a>]
    <ul>
      <li>Individual transactions up to CZK 100,000 (approximately $4,136) per year will not need to be reported to tax authorities</li>
    </ul>
  </li>
  <li>Czech National Bank Governor plans to propose investing up to 5% of the bank’s €140 billion reserves in bitcoin [<a href="https://www.coindesk.com/markets/2025/01/29/czech-central-bank-governor-to-present-plan-to-add-bitcoin-to-its-reserve-ft">CoinDesk</a>]
    <ul>
      <li>The governor emphasizes that diversifying assets with bitcoin is beneficial, stating that the cryptocurrency’s value is likely to rise independently of U.S. President Donald Trump’s backing.</li>
      <li>European Central Bank President Christine Lagarde dismisses the proposal, asserting that bitcoin will not be part of central bank reserves due to concerns over its liquidity, safety, and security. [<a href="https://www.reuters.com/markets/europe/ecbs-lagarde-slaps-down-czech-proposal-bitcoin-reserves-2025-01-30/">Reuters</a>]</li>
    </ul>
  </li>
  <li>Tornado Cash developer Alexey Pertsev released from prison to prepare appeal [<a href="https://www.coindesk.com/policy/2025/02/07/tornado-cash-developer-alexey-pertsev-set-to-be-released-from-prison">CoinDesk</a>]
    <ul>
      <li>In May 2024, Pertsev was sentenced to 64 months in prison for money laundering.</li>
    </ul>
  </li>
  <li>U.S. government argues money isn’t property to justify seizure [<a href="https://reason.com/2025/01/31/the-government-says-money-isnt-property-so-it-can-take-yours">Reason</a>]
    <ul>
      <li>The U.S. Department of Justice contends that confiscating $50,000 from small business doesn’t violate property rights, asserting that “money is not necessarily ‘property’ for constitutional purposes.”</li>
      <li>The DOJ’s argument includes three points: the government creates money, so individuals can’t own it; the government can tax money, indicating lack of ownership; and the Constitution permits government spending for the “general welfare.”</li>
    </ul>
  </li>
  <li>El Salvador amends Bitcoin law following IMF agreement [<a href="https://www.reuters.com/world/americas/lawmakers-el-salvador-rush-new-bitcoin-reform-after-imf-deal-2025-01-30/">Reuters</a>]
    <ul>
      <li>On January 29, 2025, El Salvador’s Congress approved a bill to amend the nation’s bitcoin law, aligning with a $1.4 billion loan agreement made with the IMF in December 2024.</li>
    </ul>
  </li>
  <li>U.S. President Trump establishes working group on digital assets [<a href="https://www.whitehouse.gov/presidential-actions/2025/01/strengthening-american-leadership-in-digital-financial-technology/">Press release</a>]
    <ul>
      <li>The group aims to develop a federal regulatory framework for digital assets, including stablecoins, and will evaluate establishing a national digital asset reserve.</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://www.bitcoin-renaissance.com/">Bitcoin Renaissance</a>: A pioneering ​thought leadership summit that marks a new ​chapter in the evolution of the Bitcoin ​ecosystem.
    <ul>
      <li>February 27-28, 2025 in Denver, U.S</li>
    </ul>
  </li>
  <li><a href="https://apres.tech/v40-bitcoin-ski-summit-2025">Bitcoin Ski Summit</a>: The Bitcoin Ski Summit is an immersive, invite-only gathering in the heart of the Tetons.
    <ul>
      <li>March 5-9, 2025 in Teton Village, U.S</li>
    </ul>
  </li>
  <li><a href="https://optoutconf.com/">Opt Out Conf</a>: A Bitcoin only conference about Philosophy, Freedom, Economy, Open Source, Privacy, Individual Sovereignty, Nostr, Layer 2 and more!
    <ul>
      <li>March 29, 2025 in Buenos Aires, Argentina</li>
    </ul>
  </li>
  <li><a href="https://swiss-bitcoin-conference.com/">Swiss Bitcoin Conference</a>: Bitcoin only conference in Kreuzlingen on Lake Constance
    <ul>
      <li>April 24-27, 2025 in Creuzlings, Switzerland</li>
    </ul>
  </li>
  <li><a href="https://bitcareforum.it/">BitCare Forum</a>: The Italian Bitcoin Conference
    <ul>
      <li>May 10, 2025 in Brescia, Italy</li>
    </ul>
  </li>
  <li><a href="https://budapestbitcoin.com/">Budapest Bitcoin</a>: The Bitcoin Conference with a bit of difference
    <ul>
      <li>August 8-9, 2025 in Budapest, Hungary</li>
    </ul>
  </li>
  <li><a href="https://www.learningbitcoin.ca/">Learning Bitcoin</a>: A Bitcoin Education Conference
    <ul>
      <li>August 16-17, 2025 in Vancouver, Canada</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>Bitcoin Payments: From Digital Gold to Everyday Currency, by Breez &amp; 1A1z [<a href="https://breez.technology/report/">Report</a>]</li>
      <li>Block Size Report, by Orange Surf [<a href="https://research.mempool.space/block-size-report/">Mempool Research</a>]</li>
      <li>What <em>is</em> a nostr app anyway?, by hodlbod [<a href="https://njump.me/naddr1qvzqqqr4gupzp978pfzrv6n9xhq5tvenl9e74pklmskh4xw6vxxyp3j8qkke3cezqqxnzden8qer2desx5mnzv3cs2k68w">Note</a>]</li>
      <li>Is It the Money or Is It the People?, by Don Olanrewaju [<a href="https://mises.org/mises-wire/it-money-or-it-people">Mises Institute</a>]</li>
      <li>Everyone knows your location, by Tim Sh [<a href="https://timsh.org/tracking-myself-down-through-in-app-ads/">Blog post</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, FUTURE PAUL</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guest Future Paul to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR091 - AnchorWatch Trident Vault, Ledger Co-founder Kidnapped, Blue Wallet, M17, The Case for Multi-vendor Setups, Tails removes HWW Support + MORE ft. Craig &amp;amp; Rob</title><link href="https://bitcoin.review/podcast/episode-91/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR091 - AnchorWatch Trident Vault, Ledger Co-founder Kidnapped, Blue Wallet, M17, The Case for Multi-vendor Setups, Tails removes HWW Support + MORE ft. Craig &amp;amp; Rob" /><published>2025-01-24T10:00:00+00:00</published><updated>2025-01-24T10:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-91</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-91/"><![CDATA[<p>I’m joined by guests <a href="https://twitter.com/craigraw">Craig Raw</a> and <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>00:01:11 Ross Ulbricht receives ‘a full and unconditional pardon’ from U.S President Donald Trump [<a href="https://freeross.org/donate/">Fundraiser</a>]</li>
  <li>00:03:44 New <a href="https://coinkite.com/careers#Marketing%20Manager">Marketing Manager position</a> open at Coinkite</li>
  <li>00:03:48 Exchanges BullBitcoin, River, Strike, Relai, CashApp, and Swan were added to <a href="https://bitcoinsecurity.guide/">BitcoinSecurity.guide</a></li>
  <li>00:04:15 Check out <a href="https://olas.app/">Olas</a> Awesome new nostr app from Pablo</li>
  <li>00:04:48 Call for guests: If you are a maker, working on bitcoin projects, we would love to have you on the show. Reach out at producer@coinkite.com</li>
</ul>

<h3 id="urgent-vulnerability-disclosures">Urgent Vulnerability Disclosures</h3>
<ul>
  <li>00:05:58 Ledger co-founder David Balland released after kidnapping [<a href="https://www.bloomberg.com/news/articles/2025-01-23/co-founder-of-french-crypto-startup-freed-after-kidnapping">Bloomberg</a>]
    <ul>
      <li>David Balland, co-founder of French crypto wallet startup Ledger SAS, was kidnapped from his home in central France on Tuesday, kidnappers demandning a substantial ransom in cryptocurrency.</li>
      <li>Balland was freed on Wednesday night following a police operation and being rescued by the GIGN. He is currently receiving treatment from emergency services.</li>
      <li>The kidnappers are said to have sent a finger as part of their request for money.</li>
    </ul>
  </li>
  <li>00:12:28 AxeOS CSRF Vulnerability: Using CSRF Attack to update the Payout Address on BitAxe Bitcoin Miners [<a href="https://snotra.uk/axeos-csrf-vulnerability.html">Snotra’s disclosure</a>]
    <ul>
      <li>AxeOS, the firmware for Bitaxe Bitcoin miners, lacks authentication and CSRF protections in its web interface, enabling unauthorized users on the same network to alter settings, including the stratum user, which determines the Bitcoin address for payouts.</li>
      <li>A <a href="https://poc.snotra.cloud/bitaxe.html">proof-of-concept</a> demonstrates that visiting a malicious website can change a Bitaxe’s settings without user consent, redirecting mining rewards to an attacker’s Bitcoin address.</li>
      <li>The web server’s permissive CORS headers further exacerbate the vulnerability, possibly allowing attackers to change hardware settings or upload malicious firmware.</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:12:58 AnchorWatch launches U.S. service for bitcoin holders [<a href="https://x.com/AnchorWatch/status/1876297172204888193">Announcement</a>]
    <ul>
      <li>AnchorWatch offers a bitcoin custody service with insurance from Lloyd’s of London, targeting U.S. customers holding between $250K and $100M in bitcoin.
        <ul>
          <li>Key features of AnchorWatch’s service:</li>
          <li>Insured custody for bitcoin without requiring users to give up their keys</li>
          <li>Lloyd’s of London Coverholder</li>
          <li>Trident Vault provides protection through signing transactions while insured</li>
          <li>Seamless transition to self-custody when policy ends</li>
          <li>AnchorWatch aims to provide protection against various risks, including theft, loss of keys, and death.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li><a href="https://github.com/Blockstream/miniscript-templates/blob/main/mint-005.md">Mint-005</a>
    <ul>
      <li>Mint-005 is a 3 key joint custody vault that provides a way for a Principal to secure bitcoin with the help of an Agent.</li>
      <li>It uses a negative control approach, where by default funds cannot be moved unless both the Principal and the Agent sign the transaction.</li>
      <li>There are recovery mechanisms in place for situations where a party loses their keys or the agreement between the Principal and the Agent expires.</li>
    </ul>
  </li>
  <li>00:47:28 Bitcoin Core <a href="https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-28.1.md">v28.1</a>
    <ul>
      <li>This release includes new features, various bug fixes and performance improvements, as well as updated translations.</li>
      <li>P2P
        <ul>
          <li>When the <code class="language-plaintext highlighter-rouge">-port</code> configuration option is used, the default onion listening port will now
be derived to be that port + 1 instead of being set to a fixed value (8334 on mainnet).
This re-allows setups with multiple local nodes using different <code class="language-plaintext highlighter-rouge">-port</code> and not using <code class="language-plaintext highlighter-rouge">-bind</code>,
which would lead to a startup failure in v28.0 due to a port collision.</li>
          <li>#30568 addrman: change internal id counting to int64_t</li>
        </ul>
      </li>
      <li>Key: #31166 key: clear out secret data in DecodeExtKey</li>
      <li>Build:
        <ul>
          <li>#31013 depends: For mingw cross compile use <code class="language-plaintext highlighter-rouge">-gcc-posix</code> to prevent library conflict</li>
          <li>#31502 depends: Fix CXXFLAGS on NetBSD</li>
        </ul>
      </li>
      <li>Test:
        <ul>
          <li>#31016 test: add missing sync to feature_fee_estimation.py</li>
          <li>#31448 fuzz: add cstdlib to FuzzedDataProvider</li>
          <li>#31419 test: fix MIN macro redefinition</li>
          <li>#31563 rpc: Extend scope of validation mutex in generateblock</li>
        </ul>
      </li>
      <li>Doc: #31007 doc: add testnet4 section header for config file</li>
      <li>CI: #30961 ci: add LLVM_SYMBOLIZER_PATH to Valgrind fuzz job</li>
      <li>Misc:
        <ul>
          <li>#31267 refactor: Drop deprecated space in <code class="language-plaintext highlighter-rouge">operator""_mst</code></li>
          <li>#31431 util: use explicit cast in MultiIntBitSet::Fill()</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:48:10 Wasabi Wallet <a href="https://github.com/WalletWasabi/WalletWasabi/releases/tag/v2.4.0">v2.4.0</a>
    <ul>
      <li>Add support sending to Silent Payment addresses: receiving is a work in progress</li>
      <li>Instead of TestNet 3, Wasabi now uses TestNet 4</li>
      <li>Release Notes are now also available in the client</li>
      <li>A donation button has been added on the main screen</li>
    </ul>
  </li>
  <li>00:48:15 BDK <a href="https://github.com/bitcoindevkit/bdk/releases/tag/v0.30.1">v0.30.1</a> - DEPRECATED
    <ul>
      <li>The <a href="https://crates.io/crates/bdk">bdk</a> library is now deprecated and replaced by <a href="https://crates.io/crates/bdk_wallet">bdk_wallet</a>. All projects should migrate to <a href="https://crates.io/crates/bdk_wallet/1.0.0">bdk_wallet 1.0.0</a> or newer as soon as possible.
        <ul>
          <li>Update bdk 0.30.x README docs to deprecate the bdk library</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:48:27 Nunchuk Android <a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.9.59">v1.9.59</a>
    <ul>
      <li>Taproot multisig wallets</li>
      <li>Revamp add key flow</li>
      <li>Honey Badger Premier</li>
    </ul>
  </li>
  <li>00:48:37 Specter Desktop <a href="https://github.com/cryptoadvance/specter-desktop/releases/tag/v2.1.1">v2.1.1</a>
    <ul>
      <li>Add wallet export to Jade via QR</li>
      <li>Expose internal node to localhost only</li>
      <li>HWI upgrade to 2.4.x</li>
      <li>Make Specter work with Bitcoin Core 28.0</li>
      <li>Remove BLE code for Jade</li>
    </ul>
  </li>
  <li>00:49:02 Bitcoin Keeper
    <ul>
      <li><a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v1.3.3">v1.3.3</a>
        <ul>
          <li>Redesign Electrum Server Management</li>
          <li>Add Keystone remote signing support</li>
          <li>PDF export for individual wallet configuration files</li>
        </ul>
      </li>
      <li><a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v1.3.2">v1.3.2</a>
        <ul>
          <li>Concierge: Introducing new technical support</li>
          <li>Simplify collaborative wallet setup</li>
          <li>Support alphanumeric PIN for Portal</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:49:18 Blue Wallet <a href="https://github.com/BlueWallet/BlueWallet/releases/tag/v7.0.7">v7.0.7</a>
    <ul>
      <li>Import xpub as zpub/ypub if it was ever used</li>
      <li>New wallet export screen</li>
      <li>Display Lightning details in Invoice View</li>
      <li>Add HKD fiat</li>
      <li>Add loading indicator to Edit Vault row</li>
      <li>Set preferred server from menu</li>
      <li>Keyboard accessory on vault modal</li>
      <li>Android menu icons</li>
      <li>And many fixes</li>
    </ul>
  </li>
  <li>00:50:32 BTC Pay Server <a href="https://github.com/btcpayserver/btcpayserver/releases/tag/v2.0.6">v2.0.6</a>
    <ul>
      <li>This release contains a security fix for merchants using refunds/pull payments On-Chain with automated payout processors</li>
      <li>New features
        <ul>
          <li>SEO: Add ability to customize HTML meta tags and HTML lang attribute for crowdfund and PoS</li>
          <li>Add the ability for merchants to manually transition a payout from the <code class="language-plaintext highlighter-rouge">InProgress</code> state to <code class="language-plaintext highlighter-rouge">AwaitingPayment</code></li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:55:39 Liana <a href="https://github.com/wizardsardine/liana/releases/tag/v9.0">v9.0</a> - It’s over 90.00k !
    <ul>
      <li>Breaking changes
        <ul>
          <li>Running Liana v9 on an existing installation will migrate its database. Once migrated the database won’t be compatible with previous versions of Liana.</li>
          <li>The new Minimum Supported Rust Version of the GUI software is now 1.80</li>
        </ul>
      </li>
      <li>Liana daemon / library
        <ul>
          <li>The daemon feature was removed, we expect user to use their own process manager like systemd</li>
          <li>Three new columns are added to the table transaction: the number of inputs, the number of outputs and if the transaction is a coinbase transaction</li>
          <li>A new column is added to the coins table: <code class="language-plaintext highlighter-rouge">is_from_self</code> and a new <code class="language-plaintext highlighter-rouge">field is_from_self</code> is added to the coin entry of the <code class="language-plaintext highlighter-rouge">list_coins</code> command</li>
        </ul>
      </li>
      <li>Liana GUI
        <ul>
          <li>New button on the transactions panel allows user to do an export of their transactions to an external file using the CSV format</li>
          <li>Bitcoind and electrum information in the settings panel can now be copied to clipboard</li>
          <li>Coins that are change from transactions that user control are now part of the balance</li>
          <li>Unconfirmed coins can now be selected by the automatic selection if the coins is from transaction which inputs are controlled by the wallet</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:55:58 Blockstream
    <ul>
      <li>Green QT <a href="https://github.com/Blockstream/green_qt/releases/tag/release_2.0.17">v2.0.17</a>
        <ul>
          <li>Add graphical assets for Jade Plus</li>
          <li>Support video promo on Linux</li>
          <li>Show total spent amount in transaction details</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:57:58 BoltzExchange
    <ul>
      <li>boltz-web-app <a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.6.1">v1.6.1</a>
        <ul>
          <li>Safety check before calculating fees</li>
          <li>Show when no lockup can be found for refund</li>
          <li>Show routing fees</li>
          <li>Pro build configuration</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:58:00 Live Wallet <a href="https://github.com/Jwyman328/LiveWallet/releases/tag/1.0.0">v1.0.0</a>
    <ul>
      <li>Transaction privacy analyzing</li>
      <li>Transaction output labeling (KYC, do not spend)</li>
    </ul>
  </li>
  <li>00:58:11 Kyoto
    <ul>
      <li><a href="https://github.com/rustaceanrob/kyoto/releases/tag/v0.8.0">v0.8.0</a>
        <ul>
          <li>Request the broadcast minimum fee rate from connected peers</li>
        </ul>
      </li>
      <li><a href="https://github.com/rustaceanrob/kyoto/releases/tag/v0.7.0">v0.7.0</a>
        <ul>
          <li>Request a block using the <code class="language-plaintext highlighter-rouge">Client</code></li>
          <li>Add <code class="language-plaintext highlighter-rouge">broadcast_random</code> convenience method on <code class="language-plaintext highlighter-rouge">Client</code></li>
          <li>Request a <code class="language-plaintext highlighter-rouge">Range</code> of block headers from <code class="language-plaintext highlighter-rouge">Client</code></li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:58:19 ESP-Miner
    <ul>
      <li><a href="https://github.com/skot/ESP-Miner/releases/tag/v2.5.0">v2.5.0</a>
        <ul>
          <li>Critical fix: CSRF vulnerability patch</li>
        </ul>
      </li>
      <li><a href="https://github.com/skot/ESP-Miner/releases/tag/v2.4.5">v2.4.5</a>
        <ul>
          <li>Critical fix on devices without PSRAM module: Allow device to start without SPIRAM</li>
        </ul>
      </li>
      <li><a href="https://github.com/skot/ESP-Miner/releases/tag/v2.4.3">v2.4.3</a>
        <ul>
          <li>Enable PSRAM</li>
          <li>Configure GPIO in Kconfig</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:58:21 Bitcoin Safe <a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.0.1">v1.0.1</a>
    <ul>
      <li>Add dark mode support</li>
      <li>Add delete coin category (via right click context menu) additionally to the “drag to delete button” method</li>
      <li>Fixes missing USB (HWI) support in Windows and Mac builds</li>
    </ul>
  </li>
  <li>00:58:40 BTC Map
    <ul>
      <li><a href="https://github.com/teambtcmap/btcmap-android/releases/tag/v0.9.1">v0.9.1</a>
        <ul>
          <li>Allow users to post merchant comments</li>
          <li>Add special icon for debug builds</li>
        </ul>
      </li>
      <li><a href="https://github.com/teambtcmap/btcmap-android/releases/tag/v0.9.0">v0.9.0</a>
        <ul>
          <li>Switch to vector maps</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>00:58:44 Bitaxe Touch: A new touch screen single ASIC chip Bitcoin solo miner [<a href="https://www.solosatoshi.com/unveiling-the-bitaxe-touch-the-worlds-first-touchscreen-bitcoin-miner/">Announcement</a>]
    <ul>
      <li>The Bitaxe Touch, developed by Open Source Miners United, is a touch screen Bitcoin miner featuring an 800×480 pixel LCD that displays real-time Bitcoin price, Mempool data, power usage, hashrate, and temperature.</li>
      <li>It is powered by the Bitaxe 601 Gamma, and utilizes the BM1370 ASIC chip from the Bitmain S21 Pro, with a hash rate of up to 1.6 TH/s.</li>
    </ul>
  </li>
  <li>00:58:51 Coinswap: Functioning, minimal-viable binaries and libraries to perform a trustless, p2p Maxwell-Belcher Coinswap Protocol [<a href="https://github.com/citadel-tech/coinswap">Github</a>]
    <ul>
      <li>The project offers a minimal viable implementation of a trustless, peer-to-peer Maxwell-Belcher Coinswap protocol using HTLCs on Bitcoin.</li>
      <li>It includes automated integration testing on Bitcoin Regtest and operates over Tor by default. The system supports multiple users (makers, taker, and directory server).</li>
      <li>Coinswap releases its [v0.1.0]<code class="language-plaintext highlighter-rouge">(https://github.com/citadel-tech/coinswap/releases/tag/v0.1.0</code>) - First Public Beta Release
        <ul>
          <li>Complete Protocol Specification:
            <ul>
              <li>The full Coinswap protocol has been formalized and documented in detail</li>
              <li>Explore the Coinswap Protocol Specification to understand how it ensures decentralized, private, and censorship-resistant swaps</li>
            </ul>
          </li>
          <li>Functional Test Coverage:
            <ul>
              <li>A robust set of functional tests has been introduced to simulate swap scenarios and ensure protocol correctness</li>
              <li>Dive into the tests and explore various swap situations: Functional Tests</li>
            </ul>
          </li>
          <li>Modular Protocol Design: All protocol components have been modularized for flexibility, extensibility, and easier integration into other Bitcoin applications</li>
          <li>Command-Line Applications: Coinswap introduces three key command-line apps:
            <ul>
              <li><code class="language-plaintext highlighter-rouge">makerd</code>: Run as a swap service provider and earn fees</li>
              <li><code class="language-plaintext highlighter-rouge">maker-cli</code>: Manage your maker server via a command-line interface</li>
              <li><code class="language-plaintext highlighter-rouge">taker</code>: Act as a client and perform swaps with multiple makers</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:59:20 <a href="https://paulmillr.com/noble/#scure">Scure</a>: Audited &amp; minimal library for creating, signing &amp; decoding Bitcoin transactions [<a href="https://github.com/paulmillr/scure-btc-signer">Github</a>]
    <ul>
      <li>The library allows users to create, sign, and decode Bitcoin transactions, including support for classic and SegWit addresses.</li>
      <li>Scure provides functionality for Schnorr &amp; Taproot BIP340/BIP341, and BIP174 PSBT, with minimal dependencies.</li>
    </ul>
  </li>
  <li>00:59:28 <a href="https://bitcoinisdata.com/">Bitcoin Is Data</a>: A comprehensive Bitcoin metrics and visualizations platform launches two new sections related to UTXOs, Quantity of UTXOs and Balances of UTXOs, segmented by Bitcoin transaction types.</li>
  <li>Bitcoin Fee Indicator: A system tray application that fetches and displays current Bitcoin transaction fee rates [<a href="https://github.com/frnandu/bitcoin-fee-indicator">Github</a>]
    <ul>
      <li>It shows various fee rates, including fastest, half-hour, hourly, economy, and minimum, updating every 5 minutes.</li>
    </ul>
  </li>
  <li>Kernel-Node: An experimental bitcoin node written in Rust using the libbitcoinkernel library [<a href="https://github.com/TheCharlatan/kernel-node">Github</a>]
    <ul>
      <li>Its primary function is to validate blocks but not to serve them to the network. The implementation highlights the limited initial API of the kernel library.</li>
    </ul>
  </li>
  <li>00:59:43 Qoinstr: A GUI tool for rust-joinstr [<a href="https://github.com/pythcoiner/qoinstr">Github</a>]
    <ul>
      <li>Qoinstr is a work-in-progress graphical user interface designed to interact with the rust-joinstr library</li>
    </ul>
  </li>
  <li><a href="https://fool.shinyapps.io/firstrshiny/">First Rshiny</a>: An interactive visualization tool used to explore Bitcoin’s dollar-cost averaging performance</li>
  <li>00:59:53 <a href="https://opentollgate.github.io/tollgate/">TollGate</a>: A tool enabling WiFi routers to accept Bitcoin payments for internet access
    <ul>
      <li>TollGate allows users with a router and internet connection to operate as internet service providers by accepting Bitcoin payments for access.</li>
    </ul>
  </li>
  <li>Explore <a href="https://mempool.space/">Mempool.space</a> through two new lenses:
    <ul>
      <li><a href="https://mempoo.space/">Mempoo.space</a>, a Bitcoin Poo Explorer showing ordinals as poo emojis</li>
      <li><a href="https://memepool.space/">Memepool.space</a>, a Bitcoin Meme Explorer, showing memes in blocks</li>
    </ul>
  </li>
  <li><a href="https://www.bitcoinfax.net/">BitcoinFax</a>: Send faxes worldwide with bitcoin payments over the Lightning Network</li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>01:01:27 Unique 0-click deanonymization attack targeting Cloudflare-backed apps, Signal and Discord users vulnerable [<a href="https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117">Disclosure</a>]
    <ul>
      <li>A researcher discovers a 0-click attack leveraging Cloudflare caching to locate users within a 250-mile radius. This method uses the cf-ray HTTP header to identify the closest datacenter based on cached resource requests.</li>
      <li>A tool called Cloudflare Teleport briefly exploited this before being patched</li>
    </ul>
  </li>
  <li>01:02:00 UEFI secure boot vulnerability allows malicious bootkit deployment [<a href="https://thehackernews.com/2025/01/new-uefi-secure-boot-vulnerability.html">The Hacker News</a>]
    <ul>
      <li>ESET researchers discover CVE-2024-7344, a vulnerability enabling attackers to bypass UEFI Secure Boot, leading to potential deployment of malicious bootkits.</li>
      <li>The flaw exists in a UEFI application signed by Microsoft’s third-party UEFI certificate, affecting multiple real-time system recovery software suites.</li>
      <li>Exploitation allows execution of untrusted code during system boot, granting persistent access even on systems with Secure Boot enabled.</li>
    </ul>
  </li>
  <li>01:02:23 Google Ad directs users to malicious homebrew clone [<a href="1880730173634699393">Twitter post</a>]
    <ul>
      <li>A sponsored Google ad linked users to a fake Homebrew site with a cURL command distributing malware. The malicious site’s URL differed by just one letter from the official Homebrew site.</li>
    </ul>
  </li>
  <li>01:03:01 Critical rsync vulnerability on Linux and Unix systems, affecting versions 3.2.7 to 3.4.0, necessitates urgent updates [<a href="https://www.cyberciti.biz/linux-news/cve-2024-12084-rsyn-security-urgent-update-needed-on-unix-bsd-systems/">Cyberciti</a>]
    <ul>
      <li>A heap-based buffer overflow vulnerability, identified as CVE-2024-12084, is found in the rsync daemon due to improper handling of attacker-controlled checksum lengths. This flaw allows an attacker to write out of bounds in the sum2 buffer.</li>
    </ul>
  </li>
  <li>01:03:31 January 2025 Patch Tuesday: 10 critical vulnerabilities and eight zero-days among 159 CVEs [<a href="https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-january-2025/">Crowdstrike Blog post</a>]
    <ul>
      <li>Three zero-day vulnerabilities in Windows Hyper-V NT Kernel Integration VSP are actively exploited, allowing attackers to gain SYSTEM privileges</li>
      <li>Other zero-day vulnerabilities affect Microsoft Access, Windows App Package Installer, and Windows Themes, potentially leading to remote code execution or elevation of privileges.</li>
    </ul>
  </li>
  <li>01:03:48 Unsecured tunneling protocols expose 4.2 million hosts, including VPNs and routers [<a href="https://thehackernews.com/2025/01/unsecured-tunneling-protocols-expose-42.html">The Hacker News</a>]
    <ul>
      <li>Researchers identify security flaws in tunneling protocols, affecting 4.2 million hosts, including VPN servers and routers.</li>
      <li>Affected protocols lack authentication and encryption, allowing attackers to inject malicious traffic and perform denial-of-service attacks.</li>
    </ul>
  </li>
  <li>01:03:58 Apple’s CUPS printing system vulnerable to spoofing attacks [<a href="https://cyberinsider.com/apples-cups-printing-system-vulnerable-to-spoofing-attacks/">CyberInsider</a>]
    <ul>
      <li>Security researcher Simone Margaritelli discloses a critical vulnerability in Apple’s Common UNIX Printing System (CUPS), highlighting its failure to verify TLS certificates. This flaw permits attackers on the same network to impersonate IPP-over-HTTPS (IPPS) printers, enabling them to intercept, modify, or redirect print jobs, potentially exposing sensitive data and compromising systems.</li>
      <li>The vulnerability arises from CUPS’s integration with Apple’s Bonjour discovery service, which automatically trusts network printers without proper authentication.</li>
    </ul>
  </li>
  <li>01:04:11 Security researcher Thomas Roth demonstrates code execution on Apple’s ACE3 USB-C controller, enabling firmware extraction [<a href="https://www.forbes.com/sites/daveywinder/2025/01/14/apple-iphone-usb-c-hacked-what-you-need-to-know/">Forbes</a>]
    <ul>
      <li>Apple acknowledges the attack’s complexity and does not perceive it as an immediate threat, opting not to address it currently.</li>
    </ul>
  </li>
  <li>01:05:32 Five dollars wrench attacks:
    <ul>
      <li>A Canadian, volunteer moderator on a cryptocurrency forum, becomes the target of individuals who believe he possesses significant wealth in bitcoin [<a href="https://www.lapresse.ca/actualites/justice-et-faits-divers/2025-01-06/tentative-alleguee-d-enlevement/ils-avaient-de-l-equipement-pour-me-torturer.php">La Presse</a>]
        <ul>
          <li>Suspects, including two minors, allegedly plan to kidnap and torture him to extract his passwords, assuming he holds millions in cryptocurrency</li>
        </ul>
      </li>
      <li>A 56-year-old man found tied up in car trunk after kidnapping in eastern France [<a href="https://www.francebleu.fr/infos/faits-divers-justice/un-homme-retrouve-ligote-dans-le-coffre-d-une-voiture-interceptee-par-la-police-pres-du-mans-deux-hommes-en-fuite-7958611">France Bleu</a>]
        <ul>
          <li>The victim, kidnapped on December 31, 2024, was found tied up in the trunk of a car intercepted by police, 600 kilometers from his home.</li>
          <li>The kidnappers, armed and masked, reportedly demanded a ransom from the victim’s son, a cryptocurrency influencer based in Dubai, after holding the family hostage.</li>
        </ul>
      </li>
      <li>Pakistani trader kidnapped, forced to transfer $340,000 in cryptocurrency, seven arrested [<a href="https://decrypt.co/299993/pakistani-trader-kidnapped-340000-crypto">Decrypt</a>]
        <ul>
          <li>Seven individuals, including a Counter-Terrorism Department officer, were arrested for kidnapping crypto trader Mohammed Arsalan in December 2024.
Arsalan was abducted and forced to transfer $340,000 from his Binance account. The criminals later released him after the ransom was paid.</li>
        </ul>
      </li>
      <li>Turkish man tied up and robbed of nearly $300,000 in cryptocurrency by three individuals in Pattaya, Thailand [<a href="https://www.bangkokpost.com/thailand/general/2940227/police-hunt-suspects-in-b10m-pattaya-crypto-robbery">Bangkok Post</a>]
        <ul>
          <li>The assailants binded Erkol’s hands and ankles, leaving him to seek help from a condominium security guard</li>
        </ul>
      </li>
      <li>Korean bitcoin trader rescued after abduction in Batangas, Philippines [<a href="https://www.philstar.com/nation/2025/01/20/2415405/korean-bitcoin-trader-rescued-batangas">Philstar</a>]
        <ul>
          <li>Taehwa Kim, a 40-year-old Korean bitcoin trader, is rescued in Batangas, after being kidnapped in Makati City.</li>
          <li>Kim meets a prospective buyer for his car at his condominium. During a test drive, three men force him into another vehicle, blindfold and tie his hands, and detain him for three days.</li>
        </ul>
      </li>
      <li>Feds arrest a gang of 4 men accused of plotting to kidnap Miami jeweler for cryptocurrency [<a href="https://www.local10.com/news/local/2025/01/15/feds-arrest-goons-they-say-plotted-to-kidnap-rob-miami-jeweler-one-good-bop-should-do-it/">Local10</a>]
        <ul>
          <li>The group used a Telegram group chat to plan the kidnapping of a Miami jeweler and theft of $2 million in cryptocurrency. Unbeknownst to them, an informant in their group chat alerted the FBI, leading to their arrest.</li>
          <li>The suspects, armed with firearms, allegedly planned to kidnap the jeweler using a wired SUV provided by an undercover agent. The group intended to exchange watches for cryptocurrency as a ruse, then hold the victim for ransom.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>01:07:17 Tails <a href="https://tails.net/news/version_6.11/index.en.html">v6.11</a>
    <ul>
      <li>Critical security fixes
        <ul>
          <li>Prevent an attacker from installing malicious software permanently</li>
          <li>Prevent an attacker from monitoring online activity</li>
          <li>Prevent an attacker from changing the Persistent Storage settings</li>
        </ul>
      </li>
      <li>New feature: Detection of partitioning errors
        <ul>
          <li>Sometimes, the partitions on a Tails USB stick get corrupted. This creates errors with the Persistent Storage or during upgrades.</li>
          <li>Tails now warns about such partitioning errors earlier.</li>
        </ul>
      </li>
      <li>Changes and updates
        <ul>
          <li>Remove support for hardware wallets in Electrum. Trezor wallets stopped working in Debian 12 (Bookworm), and so in Tails 6.0 or later.</li>
          <li>Add a link to the Tor Connection assistant from the menu of the Tor status icon on the desktop.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:09:52 <a href="https://m17project.org/">Module_17</a>, M17 modem board for 9600-baud capable radios [<a href="https://github.com/M17-Project/Module_17/">Github</a>]</li>
  <li>Reticulum MeshChat <a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.19.0">v1.19.0</a>
    <ul>
      <li>Add setting to enable and disable transport mode</li>
      <li>Add ability to cancel sending messages</li>
      <li>Add button to open an LXMF address when no conversations are open</li>
      <li>Add button to open a nomadnet url without having to click a random node first</li>
      <li>Telemetry requests from Sideband no longer show up as empty messages</li>
    </ul>
  </li>
  <li>SideBand <a href="https://github.com/markqvist/Sideband/releases/tag/1.3.0">v1.3.0</a>
    <ul>
      <li>Increased performance by updating included RNS and LXMF to latest versions</li>
      <li>Add ability to cancel outgoing messages</li>
      <li>Add ability to render messages formatted with markdown</li>
      <li>Add ability to compose messages with markdown</li>
      <li>Add ability to query peer telemetry from the map by right-clicking on the peer</li>
      <li>Add auto-switching of message mode on attachment</li>
      <li>Add indication if receiver rejects message</li>
      <li>Add support for SX1280 bandwidth options to RNode configuration</li>
      <li>Add ability to launch RNode flasher directly from utilities</li>
    </ul>
  </li>
  <li>NomadNet <a href="https://github.com/markqvist/NomadNet/releases/tag/0.5.7">v0.5.7</a>
    <ul>
      <li>Add sync transfer rate to PN list display</li>
      <li>Update urwid API calls to handle deprecations</li>
    </ul>
  </li>
  <li>Mullvad VPN <a href="https://mullvad.net/en/blog/split-tunneling-on-macos">v2024.4</a>
    <ul>
      <li>introduces split tunneling in version for macOS, allowing users to exclude specific apps from the VPN</li>
      <li>Limitations include the inability to exclude Safari and other WebKit-based apps, performance overhead due to additional tunneling, and availability restricted to macOS 13 and above</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li><a href="https://peergos.org/">Peergos</a>: A p2p, secure file storage, social network and application protocol [<a href="https://github.com/peergos/peergos">Github</a>]
    <ul>
      <li>Peergos is an open-source platform that can be self-hosted and enables secure, peer-to-peer file storage and sharing without central nodes.</li>
    </ul>
  </li>
  <li><a href="https://privacyspreadsheet.com/messaging-apps">PrivacySpreadsheet</a>: A privacy evaluation of messaging apps [<a href="https://github.com/du82/privacyspreadsheet.com">Github</a>]</li>
  <li>cjdns: An encrypted IPv6 network using public-key cryptography for address allocation and a distributed hash table for routing [<a href="https://github.com/cjdelisle/cjdns">Github</a>]
    <ul>
      <li>cjdns leverages a distributed hash table for routing, which enables scalable, near-zero-configuration networking.</li>
    </ul>
  </li>
  <li><a href="https://botan.randombit.net/">Botan</a>: An open-source cryptography library for C++ with extensive features including TLS, X.509, modern and post-quantum cryptography, plus TPM and RNG support [<a href="https://github.com/randombit/botan">Github</a>]
    <ul>
      <li>It provides APIs in C++, C, and Python, alongside other language bindings, and includes a command-line interface.</li>
    </ul>
  </li>
  <li><a href="https://sticktock.com/">Sticktock</a>: Share TikToks Safely. No Ads, No Spyware, No Phone App. [<a href="https://github.com/PrivacySafe/sticktock">Github</a>]
    <ul>
      <li>StickTock is an open-source tool allowing users to watch TikTok videos privately, without ads or tracking. [<a href="http://b7vypdv52igjfg7vwhlofny45koaa4ltletx67ranlwfotiiqwza2eyd.onion/">Onion</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li><a href="https://valet.finance/">Valet</a>: A Bitcoin + Lightning wallet for Android [<a href="https://github.com/standardsats/valet">Github</a>]
    <ul>
      <li>Valet is a non-custodial Lightning wallet designed to offer stable purchasing power for users through hosted channels.</li>
      <li>Developed as a fork of the <a href="https://github.com/Tactical-Advantage-Trading/wallet">Simple Bitcoin Wallet</a>, features include coin control, batching, and hardware wallet integration.</li>
    </ul>
  </li>
  <li><a href="https://www.eggstr.com/">Eggstr</a>: A platform that enables users to deploy and manage Bitcoin and Lightning applications with their own domain
    <ul>
      <li>It offers a variety of self-hosted apps, including LNBits, Alby Hub, Strfry (a Nostr relay), Nostr Address, and Blossom Server.</li>
    </ul>
  </li>
  <li><a href="https://rizful.com/">Rizful</a>: A service offering instant disposable Lightning nodes
    <ul>
      <li>Rizful offers cloud-hosted, disposable Lightning nodes designed for fast, high-uptime performance, with instant inbound capacity.</li>
    </ul>
  </li>
  <li>Zeus2Koinly: A script to convert Zeus Wallet’s export format into Koinly’s import format [<a href="https://github.com/makeasnek/Zeus2Koinly/">Github</a>]</li>
  <li>pWallet: A lightweight UI for Phoenix Server that can be set up and run entirely using Docker [<a href="https://github.com/hodladi/pwallet">Github</a>]</li>
  <li><a href="https://lnbeats.com/">LNBeats</a>: A value-for-value music streaming app, using the Lightning Network</li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Rust Lightning <a href="https://github.com/lightningdevkit/rust-lightning/releases/tag/v0.1">v0.1</a> - “Human Readable Version Numbers”
    <ul>
      <li>API Updates
        <ul>
          <li>The <code class="language-plaintext highlighter-rouge">lightning-liquidity</code> crate has been moved into the <code class="language-plaintext highlighter-rouge">rust-lightning</code> git tree, enabling support for both sides of the LSPS channel open negotiation protocols</li>
          <li>This release includes support for BIP 353 Human Readable Names resolution</li>
          <li>On-chain state resolution now more aggressively batches claims into single transactions, reducing on-chain fee costs when resolving multiple HTLCs for a single channel force-closure</li>
          <li>And many more</li>
        </ul>
      </li>
      <li>Performance Improvements
        <ul>
          <li>LDK now verifies <code class="language-plaintext highlighter-rouge">channel_update</code> gossip messages without holding a lock, allowing additional parallelism during gossip sync</li>
          <li>LDK now checks if it already has certain gossip messages before verifying the message signatures, reducing CPU usage during gossip sync after the first startup</li>
        </ul>
      </li>
      <li>Node Compatibility: LDK now handles fields in the experimental range of BOLT 12 messages</li>
      <li>Security: v0.1 fixes a funds-theft vulnerability when paying BOLT 12 offers as well as a funds-lockup denial-of-service issue for anchor channels.</li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>Hub <a href="https://github.com/getAlby/hub/releases/tag/v1.13.0">v1.13.0</a> - Eva Galperin
        <ul>
          <li>In this release we add some cool new apps to the app store, an auto-unlock feature for self-hosted hubs, extra information about pending closed channels, and some security improvements for isolated apps and budgeting.
            <ul>
              <li>Auto unlock for self-hosted hubs</li>
              <li>ZapPlanner custom app</li>
              <li>Add simple boost widget app</li>
              <li>Add Clams to Hub’s Store</li>
              <li>Include funding transaction in pending closing channel message</li>
              <li>Add balance details for pending channel closures</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>JS SDK <a href="https://github.com/getAlby/js-sdk/releases/tag/v3.9.0">v3.9.0</a>
        <ul>
          <li>Add nip 44 and versioning support</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Mostro <a href="https://github.com/MostroP2P/mostro/releases/tag/v0.13.0">v0.13.0</a>
    <ul>
      <li>This version dramatically improves privacy for users with <a href="https://mostro.network/protocol/key_management.html">keys management</a> implementation: a way clients rotate keys for every trade adding another privacy layer to gift wrap previous implementation.</li>
    </ul>
  </li>
  <li>BitBanana <a href="https://github.com/michaelWuensch/BitBanana/releases/tag/v0.8.9">v0.8.9</a>
    <ul>
      <li>Add Payment Path view (LND)</li>
      <li>Implement “Enable Offer” command for Core Lightning &gt;=24.11</li>
      <li>Allow offers without description (Core Lightning)</li>
      <li>Add description and payer note for paid bolt12 offers in transaction history</li>
      <li>Increase VPN start timeout to improve UX on slow internet connection</li>
    </ul>
  </li>
  <li>Nutshell <a href="https://github.com/cashubtc/nutshell/releases/tag/0.16.4">v0.16.4</a>
    <ul>
      <li>This release brings two new protocol spec updates to nutshell, NUT-19 and NUT-20. It also includes a new HTTP compression middleware.
        <ul>
          <li>Add MPP methods key to info endpoint</li>
          <li>Add HTTP compression middleware</li>
          <li>NUT-19: Cached Requests and Responses</li>
          <li>NUT-20 (signatures on quotes) for mint and wallet side</li>
          <li>Add period at the end of the phrase</li>
          <li>Add NUT-19 example for caching responses</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li><a href="https://start.njump.me/">Nstart</a>: A straight-forward nostr onboarding wizard [<a href="https://github.com/dtonon/nstart">Github</a>]
    <ul>
      <li>Nstart is a user-friendly onboarding tool for Nostr, offering key features like local backups and customizable contact suggestions.</li>
      <li>It incorporates a multi-signer bunker to protect Nsec keys, allowing for easy recovery and access even in case of failure or theft.</li>
    </ul>
  </li>
  <li><a href="https://www.kanbanstr.com/">Kanbanstr</a>: A new nostr client for task management [<a href="https://github.com/vivganes/kanbanstr">Github</a>]
    <ul>
      <li>Users can log in via nsec, npub, or NIP-07, create boards with customizable columns, and organize tasks using cards.</li>
      <li>Current features include markdown support in cards, automatic mapping of cards to columns by status, and assigning tasks with “zap” tags to facilitate payment. Pending updates include programmatic functionalities and enabling direct zaps for task payments.</li>
    </ul>
  </li>
  <li>Noshtastic: A geo-specific virtual Nostr relay for Meshtastic [<a href="https://github.com/ksedgwic/noshtastic">Github</a>]
    <ul>
      <li>Noshtastic operates as a decentralized Nostr relay independent of the internet, using Meshtastic devices for communication.</li>
      <li>It employs negentropy-based synchronization and region-specific geohash tagging to distribute messages locally without internet connectivity.</li>
    </ul>
  </li>
  <li><a href="https://next-alexandria.gitcitadel.eu/">Alexandria</a>: A Nostr knowledge base and long-form article reader [<a href="https://github.com/ShadowySupercode/gc-alexandria">Github</a>]
    <ul>
      <li>Alexandria is designed to display modular, long-form articles in a clean, distraction-free interface for focused reading.</li>
      <li>It supports Nostr events, allowing users to interact with organized content in a structured format.</li>
    </ul>
  </li>
  <li><a href="https://nosotros.app/">Nosotros</a>: A nostr web client optimized for both mobile and desktop usability [<a href="https://github.com/cesardeazevedo/nosotros">Github</a>]
    <ul>
      <li>Built using TypeScript, it includes testing support and a progressive web app design for smooth functionality.</li>
    </ul>
  </li>
  <li>Bostr: A nostr relay bouncer [<a href="https://codeberg.org/Yonle/bostr">Code repository</a>]
    <ul>
      <li>Bostr is a minimalist HTTP server built with Go, designed to serve static files efficiently. It also acts as a nostr relay aggregator proxy, consolidating data from multiple relays.</li>
      <li><a href="https://codeberg.org/Yonle/bostr2">Bostr2</a>, is a bostr next generation project</li>
    </ul>
  </li>
  <li>Tides: A Nostr messenger browser extension for Chrome &amp; Brave [<a href="https://github.com/arbadacarbaYK/Tides">Github</a>]
    <ul>
      <li>Tides is a browser extension that provides secure, private messaging using the Nostr protocol. It supports real-time encryption, contact management, and media sharing.</li>
      <li>Users can log in via NIP-07 extension, Chrome storage, or manual key input</li>
    </ul>
  </li>
  <li>CLN NWC: Nostr Wallet Connect plugin for CLN [<a href="https://github.com/gudnuf/cln_nwc">Github</a>]
    <ul>
      <li>Users can configure or manually start the plugin, create connections with budgets, list active connections, and revoke them as needed.</li>
      <li>Payment requests are routed via Nostr relays.</li>
    </ul>
  </li>
  <li><a href="https://emojito.meme/">Emojito</a>: A platform based on the nostr application framework <a href="https://github.com/verbiricha/ngine">ngine</a> to create personalized emoji sets
    <ul>
      <li>Nostr interactions: users can use personalized reactions, provided their client supports NIP-30</li>
    </ul>
  </li>
  <li><a href="https://huggingface.co/some1nostr/Nostr-Llama-3.1-8B">Nostr Llama 3.1 8B</a>: A model built on Nostr notes from around 7,000 users
    <ul>
      <li>Fine-tuned using multiple datasets, including Evol-Instruct-Code and CodeFeedback-Filtered-Instruction.</li>
      <li>With 8.03B parameters, this model is based on Meta’s Llama 3.1</li>
    </ul>
  </li>
  <li><a href="https://granary.io/">Granary</a>: A social web translator that fetches and converts data between platforms, formats, and protocols, including Nostr [<a href="https://github.com/snarfed/granary">Github</a>]
    <ul>
      <li>It supports social networks, HTML, and JSON with microformats2, ActivityStreams 1 and 2 (including ActivityPub), Atom, RSS, and JSON Feed. It works as a Python library and REST API, supporting read and write operations for data interoperability.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Olas
    <ul>
      <li><a href="https://github.com/pablof7z/olas/releases/tag/0.1.9">v0.1.9</a>
        <ul>
          <li>Web cleanup</li>
        </ul>
      </li>
      <li><a href="https://njump.me/nevent1qvzqqqqqqypzp75cf0tahv5z7plpdeaws7ex52nmnwgtwfr2g3m37r844evqrr6jqyxhwumn8ghj7e3h0ghxjme0qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qghwaehxw309aex2mrp0yh8qunfd4skctnwv46z7qpqxymquwrjnk0ekr9ztgpgk04cj9q3n5qy8pw3t5z3dhhe5r89kseqr83qjp">v0.1.8</a>
        <ul>
          <li>Reaction, comments, zaps, etc now showing up on the content view</li>
        </ul>
      </li>
      <li><a href="https://github.com/pablof7z/olas/releases/tag/0.1.7">v0.1.7</a>
        <ul>
          <li>Add color style so text shows in dark mode</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Notedeck <a href="https://njump.me/naddr1qvzqqqr4gupzq3qcntalp5jhzm0x4aunm3suzylv74skvjqezt8pfss99kmz7wtvqqpzutsp6rexg">Latest codebase changes</a>
    <ul>
      <li>Add <code class="language-plaintext highlighter-rouge">t</code> tags for hashtags</li>
      <li>Use HashSet, lowercase, and add emoji tests</li>
      <li>Add test and format</li>
      <li>Adjust context menu/grip circle sizes</li>
      <li>Extract timing from AppSizeHandler to TimedSerializer</li>
      <li>Introduce ZoomHandler</li>
    </ul>
  </li>
  <li>Amethyst
    <ul>
      <li><a href="https://github.com/vitorpamplona/amethyst/releases/tag/v0.94.3">v0.94.3</a>
        <ul>
          <li>Add iMeta tags to GIF urls to optimize GIF previews</li>
          <li>Maintain note reaction visibility when scrolling</li>
        </ul>
      </li>
      <li><a href="https://github.com/vitorpamplona/amethyst/releases/tag/v0.94.1">v0.94.1</a> - GIFs and Custom Emoji inputs
        <ul>
          <li>Add a <code class="language-plaintext highlighter-rouge">:</code> command to link custom emojis on new posts and chats. Similar to the @ for user search, just start typing to find your custom emojis.</li>
          <li>Create your GIF and rection libraries on emojito.meme</li>
        </ul>
      </li>
      <li><a href="https://github.com/vitorpamplona/amethyst/releases/tag/v0.94.0">v0.94.0</a> - Encrypted Media on DMs
        <ul>
          <li>Adds support for encrypted media uploads on NIP-17 DMs</li>
          <li>Integrates with Pokey’s Broadcast receiver</li>
          <li>Shows NIP-22 replies in the replies tab of the user profile</li>
          <li>New upload screen for chats</li>
          <li>Add support for multiple media uploads at the same time.</li>
          <li>Add support to display PictureEvents with multiple images at the same time</li>
          <li>Add QR code private key export dialog</li>
          <li>Add new picture and video events to the user profile gallery</li>
          <li>Add basic support for RelationshipStatus to Quartz</li>
          <li>And much more</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>YakiHonne
    <ul>
      <li>Web
 		- <a href="https://njump.me/nevent1qqsp0zn70fpfx8hjglr78nvau84jzn7yfgcqlwls33lpltpqvch6zeczyqsfsmac8em4m9k33r99e803pnndvylqadl9w69q7zcjkd7d4ssmxqcyqqqqqqgk6pw8g">v4.2.3</a>
      - Add support for uploading multiple images or videos in notes, comments, and messages
      - Refine the search mechanism for better accuracy and performance
        <ul>
          <li><a href="https://njump.me/nevent1qgszpxr0hql8whvk6xyv5hya7yxwd4snur4hu4mg5rctz2ehekkzrvcqypdcwtq7kcvt9uguu4gztlnl4e67wkrrfkqe7dk7hxunnmlt5pqwwz4xk4j">v4.2.2</a>
            <ul>
              <li>Add language support for Spanish, Portuguese, Thai, Japanese, and Italian</li>
              <li>Enable support for processing invoice payments in notes</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Mobile <a href="https://njump.me/nevent1qgszpxr0hql8whvk6xyv5hya7yxwd4snur4hu4mg5rctz2ehekkzrvcqypdcwtq7kcvt9uguu4gztlnl4e67wkrrfkqe7dk7hxunnmlt5pqwwz4xk4j">v1.6.1</a>
        <ul>
          <li>Add language support for Spanish, Portuguese, Thai, Japanese, and Italian</li>
          <li>Add ability to multi-select and upload media</li>
          <li>Introduce enhanced video player</li>
          <li>Add media through your camera into notes</li>
          <li>Enable support for processing invoice payments in notes</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Flotilla
    <ul>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.3">v0.2.3</a>
        <ul>
          <li>Add NIP 56 reports for messages and threads</li>
          <li>Add ToS and privacy policy</li>
          <li>Add avatar fallback icons</li>
          <li>Add mark as read to chats</li>
          <li>Add send button to chat compose</li>
          <li>Accommodate onion URLs</li>
          <li>Improve loading and notifications</li>
        </ul>
      </li>
      <li><a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.1">v0.2.1</a>
        <ul>
          <li>Improve performance, as well as scrolling and loading</li>
          <li>Improve NIP 29 compatibility</li>
          <li>Refine notifications</li>
          <li>Add join space CTA</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Njump.me <a href="https://njump.me/nevent1qvzqqqqqqypzqwlsccluhy6xxsr6l9a9uhhxf75g85g8a709tprjcn4e42h053vaqyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qgmwaehxw309aex2mrp0yh8wetnw3jhymnzw33jucm0d5hszymhwden5te0wahhgtn4w3ux7tn0dejj7qguwaehxw309a382cmtv46zucm0wfskxmr99eek7cmfv9kz7qguwaehxw309a3ksunfwd68q6tvdshxummnw3erztnrdakj7qpqqqqxj2qrjjhngnjz9zak9retcj755y8pylkl7ul868653zfqlveqteck93">Latest codebase changes</a>
    <ul>
      <li>Add support for kind:20 photos</li>
    </ul>
  </li>
  <li>0xChat App
    <ul>
      <li><a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.6-release">v1.4.6</a>
        <ul>
          <li>Add reactions and mention notification button to chats</li>
          <li>Long press the “Like” button on moments to select an emoji</li>
        </ul>
      </li>
      <li><a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.5-release">v1.4.5</a>
        <ul>
          <li>Add support for NIP46 login</li>
          <li>Adapt UI for tablet devices</li>
          <li>Introduce connection ping status</li>
          <li>Implement search functionality for Moments</li>
          <li>Set default relays for first login</li>
          <li>Add default reaction emojis</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Citrine <a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.7.0">v0.7.0</a>
    <ul>
      <li>Update quartz dependency</li>
      <li>Check if events are deleted</li>
      <li>Recover service after crash</li>
      <li>Add back button in the events screen</li>
    </ul>
  </li>
  <li>nos.social <a href="https://github.com/planetary-social/nos/releases/tag/v1.1-296">v1.1</a>
    <ul>
      <li>Nos now publishes the hashtags it finds in your note when you post</li>
      <li>Update the default relays that are added when you create an account</li>
      <li>Add feed picker view (UI only)</li>
      <li>Add feed source customizer drop-down view</li>
      <li>Make feed source selector work</li>
      <li>Add empty state for lists/relays drop-down</li>
      <li>Add support for decrypting private tags in kind 30000 lists</li>
      <li>Add pop-up tip for feed customization</li>
      <li>Add remembering which feed source is selected</li>
    </ul>
  </li>
  <li>Nostur <a href="https://github.com/nostur-com/nostur-ios-public/releases/tag/346">v1.17.0</a>
    <ul>
      <li>Sync already seen/read across multiple devices</li>
      <li>New 😂-feed</li>
      <li>Support new Olas/picture format (viewing)</li>
      <li>Support Frost/multi-sig login</li>
      <li>Support for .heic image format in posts</li>
      <li>Show extra autopilot relays used on Post Preview (default off)</li>
      <li>Login with nip05 (read-only)</li>
      <li>Undelete button for deleted posts</li>
    </ul>
  </li>
  <li>Nostrmo <a href="https://github.com/haorendashu/nostrmo/releases/tag/2.9.5">v2.9.5</a>
    <ul>
      <li>Add Pc tray support</li>
      <li>Add Pc notice support</li>
      <li>Add support for some linux packages</li>
      <li>Relay dtail page can jump to jumble.social</li>
      <li>User can config their Client tag</li>
      <li>Add note tail support</li>
    </ul>
  </li>
  <li>Nostrss <a href="https://github.com/Asone/nostrss/releases/tag/v1.1.0">v1.1.0</a>
    <ul>
      <li>Optional cache: A default size can still be set with env values, however if no env value is provided and no cache size is defined for a feed, no limit will be set.</li>
      <li>Dependencies updates: Note that this new version uses a version on tokio-cron-scheduler which changes the scheduler pattern to be used.</li>
    </ul>
  </li>
  <li>Zapstore
    <ul>
      <li><a href="https://github.com/zapstore/zapstore/releases/tag/0.2.2">v0.2.2</a>
        <ul>
          <li>Replace buggy WoT API-based service with Vertex DVM-based service (alpha)</li>
        </ul>
      </li>
      <li><a href="https://github.com/zapstore/zapstore/releases/tag/0.2.0">v0.2.0</a>
        <ul>
          <li>Sign in with NIP-55 (Amber)</li>
          <li>Ability to zap via NWC and view zap receipts</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Voyage <a href="https://github.com/dluvian/voyage/releases/tag/v0.17.2">v0.17.2</a>
    <ul>
      <li>Force nip22 usage when reply has 6 or less characters</li>
      <li>Use v2 replies by default for new installs</li>
      <li>Don’t set grandparent p-tags</li>
    </ul>
  </li>
  <li>Strfry <a href="https://github.com/hoytech/strfry/releases/tag/1.0.4">v1.0.4</a>
    <ul>
      <li>New config: maxReqFilterSize. This allows REQs with many more filters</li>
      <li>Default <code class="language-plaintext highlighter-rouge">maxReqFilterSize</code> was increased to 200</li>
      <li>Reduce log spam by not dumping full invalid events</li>
      <li>In sync and stream commands, provide the connected URL to write policy plugins</li>
    </ul>
  </li>
  <li>Nostrss <a href="https://github.com/Asone/nostrss/releases/tag/v1.1.0">v1.1.0</a>
    <ul>
      <li>Dependencies updates: Note that this new version uses a version on tokio-cron-scheduler which changes the scheduler pattern to be used.</li>
      <li>Optional cache: The feed cache is now optional. A default size can still be set with env values, however if no env value is provided and no cache size is defined for a feed, no limit will be set.</li>
    </ul>
  </li>
  <li>Amber
    <ul>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.1.8">v3.1.8</a>
        <ul>
          <li>Add button to clear cached data in settings</li>
          <li>Fix multiple bunker requests not clearing when accepting or rejecting</li>
        </ul>
      </li>
      <li><a href="https://github.com/greenart7c3/Amber/releases/tag/v3.1.0">v3.1.0</a>
        <ul>
          <li>Move bunker and nostrconnect to its own files</li>
          <li>Show relays after the app is connected</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Algo Relay <a href="https://github.com/bitvora/algo-relay/releases/tag/v0.1.3">v0.1.3</a>
    <ul>
      <li>Uselessly preallocate some slices</li>
      <li>Dev refresh feeds</li>
      <li>Saving the Social Graph</li>
      <li>Purge Data Functionality</li>
    </ul>
  </li>
  <li>Wot Relay <a href="https://github.com/bitvora/wot-relay/releases/tag/v0.1.16">v0.1.16</a>
    <ul>
      <li>Ignore follow list for people who follow spammers</li>
    </ul>
  </li>
  <li>Feeder <a href="https://github.com/spacecowboy/Feeder/releases/tag/2.8.0">v2.8.0</a>
    <ul>
      <li>Add native Nostr NIP-23 feed support</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:12:29 Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @Anonymous (3,333 sats) “I don’t know who this Rob guy is but congrats to him on the launch of his new fishing company!”</li>
      <li>@manbyt (2,100 sats) “Itm!”</li>
      <li>@agichoote (1,000 sats) “I see the new ep out and I don’t even need to see what else is out there”</li>
      <li>@btconboard (300 sats) “The people using miniscript are people too despite their extra extra autism, NVK”</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tip-of-the-day">Tech Tip of the Day</h3>
<ul>
  <li><a href="https://itoa.hex.dance/">ITOA</a>: A web-based tool that converts images into ASCII art, with support for both monochrome and color output [<a href="https://github.com/solst-ice/itoa">Github</a>]</li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/01/17/">337</a>
        <ul>
          <li>Continued <a href="https://delvingbitcoin.org/t/ecash-tides-using-cashu-and-stratum-v2/870">discussion</a> about rewarding pool miners with tradeable ecash shares</li>
          <li>Offchain DLCs: developer conduition <a href="https://mailmanlists.org/pipermail/dlc-dev/2025-January/000186.html">posted</a> to the DLC-dev mailing list about a contract protocol that allows an offchain spend of the funding transaction signed by both parties to create multiple DLCs</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/01/10/">336</a>
 		- Investigating mining pool behavior before fixing a Bitcoin Core bug: Abubakar Sadiq Ismail <a href="https://delvingbitcoin.org/t/analyzing-mining-pool-behavior-to-address-bitcoin-cores-double-coinbase-reservation-issue/1351">posted</a> to Delving Bitcoin about a bug discovered in 2021 by Antoine Riard that results in nodes reserving 2,000 vbytes in block templates for coinbase transactions rather than the intended 1,000 vbytes
        <ul>
          <li>Contract-level relative timelocks: Gregory Sanders <a href="https://delvingbitcoin.org/t/contract-level-relative-timelocks-or-lets-talk-about-ancestry-proofs-and-singletons/1353">posted</a> to Delving Bitcoin about finding a solution for a complication he discovered about a year ago (see Newsletter #284) when creating a proof-of-concept implementation of LN-Symmetry</li>
          <li>Multiparty LN-Symmetry variant with penalties for limiting published updates: Daniel Roberts <a href="https://delvingbitcoin.org/t/broken-multi-party-eltoo-with-bounded-settlement/1364">posted</a> to Delving Bitcoin about preventing a malicious channel counterparty from being able to delay channel settlement by deliberately broadcasting old states at a higher feerate than an honest counterparty is paying for confirmation of the final state</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2025/01/03/">335</a>
        <ul>
          <li>News:
            <ul>
              <li>Deanonymization attacks against centralized coinjoin: Yuval Kogman <a href="https://groups.google.com/g/bitcoindev/c/CbfbEGozG7c/m/w2B-RRdUCQAJ">posted</a> to the Bitcoin-Dev mailing list details about several privacy-reducing vulnerabilities in the centralized coinjoin protocols used by current versions of the Wasabi and Ginger wallets, plus past versions of the Samourai, Sparrow, and Trezor Suite software wallets</li>
              <li>Updated ChillDKG draft: Tim Ruffing and Jonas Nick <a href="https://groups.google.com/g/bitcoindev/c/HE3HSnGTpoQ/m/Y2VhaMCrCAAJ">posted</a> to the Bitcoin-Dev mailing list a link to the current draft BIP for ChillDKG, which describes a distributed key generation protocol compatible with FROST scriptless threshold signatures for Bitcoin</li>
            </ul>
          </li>
          <li>Changing consensus:
            <ul>
              <li>CTV enhancement opcodes</li>
              <li>Adjusting difficulty beyond 256 bits</li>
              <li>Transitory soft forks for cleanup soft forks</li>
              <li>Quantum computer upgrade path</li>
              <li>Consensus cleanup timewarp grace period</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li><a href="https://www.xellox.io/clavis/">Clavis</a>: A new hardware wallet by <a href="https://x.com/xelloxwallet">Xellox Wallet</a>
    <ul>
      <li>Clavis is designed for online and offline bitcoin storage. It features a capacitive fingerprint sensor, passcode protection, and is IP68 rated.</li>
    </ul>
  </li>
  <li>Judge dismisses man’s bid to recover 8,000 bitcoin from landfill [<a href="https://arstechnica.com/tech-policy/2025/01/judge-ends-mans-11-year-quest-to-dig-up-landfill-and-recover-765m-in-bitcoin/">Ars Technica</a>]
    <ul>
      <li>James Howells’ 11-year effort to retrieve a hard drive containing the private keys valued at approximately $765 million, ends as High Court Judge Keyser KC rules against him.</li>
      <li>The judge cites environmental concerns and legal ownership, stating that excavating the landfill could release harmful substances.</li>
    </ul>
  </li>
</ul>

<h4 id="lightning">Lightning</h4>
<ul>
  <li>Zeus increases its LSP maximum channel lease duration from 6 to 12 months [<a href="https://x.com/ZeusLN/status/1881197435172835699">Announcement</a>]</li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Block Inc fined $80 million for inadequate anti-money laundering controls in Cash App [<a href="https://www.reuters.com/technology/state-regulators-fine-block-inc-80-million-anti-money-laundering-violations-2025-01-15/">Reuters</a>]</li>
  <li>BitMEX is fined an additional $100 million for Bank Secrecy Act violations between 2015 and 2020 [<a href="https://www.justice.gov/usao-sdny/pr/global-cryptocurrency-exchange-bitmex-fined-100-million-violating-bank-secrecy-act">DOJ Press release</a>]
    <ul>
      <li>Prosecutors sought a $417 million fine, arguing BitMEX hadn’t fully accepted responsibility, noting the company earned approximately $1.3 billion while ignoring U.S. regulations over five years.</li>
    </ul>
  </li>
  <li>Coinbase launches <a href="https://docs.cdp.coinbase.com/reputation/docs/welcome">Onchain Reputation API</a> and <a href="https://x.com/coinbase/status/1879902780564951530">Bitcoin-backed loans</a>
    <ul>
      <li>Coinbase introduces a public beta of the Onchain Reputation API, offering a reputation score for wallet addresses, ENS, and Basename IDs, ranging from -100 to +1000.</li>
      <li>The company also announced Bitcoin-backed loans using its Base protocol, clarifying that the loans aren’t backed by Bitcoin nor based on its blockchain.</li>
    </ul>
  </li>
  <li>Unchained now supports passkey support for enhanced account security [<a href="https://updates.unchained.com/en/add-passkeys-to-your-account-for-enhanced-security">Blog post</a>]</li>
  <li>River introduces ForceField, an extra layer of protection to secure Bitcoin against theft and scams [<a href="https://blog.river.com/forcefield/">Announcement</a>]
    <ul>
      <li>It features a 5-day delay on withdrawals, offering users time to respond to unauthorized access attempts.</li>
    </ul>
  </li>
  <li>Tether has filed a lawsuit against Swan Bitcoin in the High Court of England and Wales, alleging major violations of their commercial agreements related to their 2022 Bitcoin mining joint venture, 2040 Energy [<a href="https://archive.ph/UtjUj">Blockspace</a>]
    <ul>
      <li>In September 2024, Swan sued former employees, accusing them of stealing proprietary information to establish Proton Management, which now oversees Bitcoin mining assets with Tether.</li>
    </ul>
  </li>
  <li>Bitcoin miner MARA deploys 16% of its BTC holdings (7,377 BTC, worth about $730 million) in short-term loans to third parties, aiming to generate a “modest single-digit yield” from these loans [<a href="https://theminermag.com/news/2025-01-05/mara-lend-bitcoin-btc/">The Miner Mag</a>]
    <ul>
      <li>MARA surpassed its December hash rate target of 50 EH/s and increased its total BTC holdings to 44,893 BTC, including the loans.</li>
    </ul>
  </li>
  <li>Canaan launches Avalon Mini 3 (37.5 TH/s) and Nano 3S (6 TH/s) Bitcoin miners, respectively $899 and $249 [<a href="https://www.canaan.io/news/canaan-introduces-revolutionary-bitcoin-mining-heaters-for-home-and-personal-use-in-ces-2025-1722">Blog post</a>]
    <ul>
      <li>The Avalon Mini 3 doubles as a home heater, offering a sustainable, multi-purpose solution for home mining.</li>
    </ul>
  </li>
</ul>

<h4 id="tradfi">Tradfi</h4>
<ul>
  <li>BlackRock introduces the iShares Bitcoin ETF in Canada, trading under the ticker IBIT [<a href="https://www.businesswire.com/news/home/20250113540226/en/BlackRock-Launches-New-Bitcoin-ETF-on-Cboe-Canada">Business Wire</a>]</li>
</ul>

<h4 id="education">Education</h4>
<ul>
  <li>Applications for the Sovereign Engineering Cohort 4 (SEC-04) are now open [<a href="https://sovereignengineering.io/madeira.html">Registration</a>]
    <ul>
      <li>SEC-04, titled ‘Building it Right’, will take place from March 3 to April 11, 2025.</li>
    </ul>
  </li>
  <li>The <a href="https://www.bitcoinstudentsnetwork.org/">Bitcoin Students Network</a> launches its Layer Zero program to empower students worldwide in building Bitcoin’s social layer and community [<a href="https://www.forbes.com/sites/digital-assets/2025/01/09/the-bitcoin-students-network-launch-layer-zero-to-empower-global-youth/">Forbes</a>]
    <ul>
      <li>The program offers hands-on experience by connecting students with Bitcoin entrepreneurs.</li>
    </ul>
  </li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>OpenSats <a href="https://opensats.org/blog/more-for-core">grants</a> additional funding to three dedicated Bitcoin Core contributors: <a href="https://github.com/l0rinc">@L0rinc</a>, <a href="https://github.com/kevkevinpal">@kevkevinpal</a>, and <a href="http://github.com/danielabrozzoni">@danielabrozzoni</a></li>
  <li>BDK <a href="https://njump.me/nevent1qqsgd274h8c4gvygrvyyem367xl8t96uanczpxqkl5tn9stvnh84e5gpzdmhxue69uhhwmm59e6hg7r09ehkuef0qgsgkmgkmv63djkxmwvdlyaxx0xtsytvkyyg5fwzmp48pwd30f3jtxsrqsqqqqqpgc5t6m">announces</a> the pseudonymous John Galt as its newest grantee:
    <ul>
      <li>John will lead the efforts in partnerships, membership program and onboarding new members.</li>
    </ul>
  </li>
  <li>Vinteum <a href="https://medium.com/vinteum-org/announcing-our-fourth-grant-plebhash-and-stratum-v2-fec0abbb1840">awards</a> its fourth grant to plebhash for contributions to Stratum V2 and decentralized Bitcoin mining</li>
  <li>Finney Freedom Prize honors (blocks 210,000-420,000) Bitcoin pioneers Pieter Wuille and Gregory Maxwell for their contributions to Bitcoin usability, scalability, and privacy. [<a href="https://hrf.org/program/financial-freedom/finney-prize/">Announcement</a>]</li>
  <li>The BTC Pay Server Foundation receives a $25,000 grant in bitcoin from Unbank, a cash focused Bitcoin exchange [<a href="https://bitcoinmagazine.com/business/btcpay-server-foundation-receives-25000-grant-in-bitcoin-from-unbank">Bitcoin Magazine</a>]</li>
  <li>Alpen Labs <a href="https://www.alpenlabs.io/blog/strategic-round">announces</a> raising $8.5M in a strategic round to support the development of Strata, a Bitcoin ZK rollup aimed at improving the Bitcoin ecosystem with self-custody, privacy, and interoperability.</li>
  <li>Fold Inc. secures $30 million convertible note financing with ATW Partners backed by its bitcoin assets [<a href="https://ffnews.com/newsarticle/funding/fold-inc-announces-up-to-30-million-convertible-note-financing-backed-by-bitcoin/">FFNews</a>]</li>
  <li>JAN3 raises $5 million in a seed funding round for AQUA Wallet development [<a href="https://jan3.com/blog/jan3-raises-5-million-seed-round/">Blog post</a>]</li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li>Fifteen transactions involving OFAC-sanctioned addresses were missing from blocks, prompting investigation into mining pool behavior [<a href="https://b10c.me/observations/13-missing-sanctioned-transactions-2024-12/">b10c Blog post</a>]
    <ul>
      <li>F2Pool may be filtering sanctioned transactions, though other factors like transaction propagation or job publication may be responsible for some exclusions.</li>
    </ul>
  </li>
  <li>Hashrate Index publishes a list ranking the top bitcoin mining countries of 2025 [<a href="https://hashrateindex.com/blog/top-10-bitcoin-mining-countries-of-2025/">Blog post</a>]</li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>Telegram provided U.S. authorities with data on 2,253 users in 2024, a significant increase in requests fulfilled  [<a href="https://archive.ph/3vfuQ">404 Media</a>]
    <ul>
      <li>Between January and September, Telegram fulfilled 14 requests involving 108 users; the number surged in the final quarter.</li>
      <li>Following Telegram CEO Pavel Durov’s arrest, the company updated its privacy policy to share user data with law enforcement when legally required.</li>
    </ul>
  </li>
  <li>GeoSpy, developed by Graylark Technologies, can pinpoint photo locations based on visual clues like soil, vegetation, and spatial relationships. [<a href="https://archive.ph/Z2t2y">404 Media</a>]
    <ul>
      <li>Initially available to the public, GeoSpy has now restricted access, offering its tool to law enforcement and government agencies.</li>
      <li>Experts warn that the widespread use of GeoSpy could pose privacy risks, as it enables mass geolocation without traditional metadata.</li>
    </ul>
  </li>
  <li>The UN General Assembly adopts the United Nations Convention against Cybercrime, aimed at strengthening global cooperation to combat cybercrime and protect societies [<a href="https://news.un.org/en/story/2024/12/1158521">UN News</a>]
    <ul>
      <li>Critics, including human rights activists and tech companies, raised concerns over potential misuse by authoritarian governments</li>
    </ul>
  </li>
  <li>Apple agrees to a $95 million settlement following allegations that Siri recorded users without consent [<a href="https://cyberinsider.com/apple-to-pay-95-million-settlement-over-siri-privacy-breach/">CyberInsider</a>]
    <ul>
      <li>Despite denying wrongdoing, Apple commits to deleting certain pre-October 2019 audio recordings and clarifying data collection practices</li>
    </ul>
  </li>
</ul>

<h4 id="cybercrime">Cybercrime</h4>
<ul>
  <li>Gang exploited Bitcoin glitch for £20m fraud, authorities recover full compensation [<a href="https://uk.news.yahoo.com/gang-handed-5-000-people-204629148.html">UK News</a>]
    <ul>
      <li>An international crime gang exploited a flaw in an Australian cryptocurrency exchange in 2017, stealing over £20m.</li>
      <li>The victim was compensated in full due to the rise in Bitcoin’s value, with excess funds distributed to authorities.</li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #28121: Include verbose “reject-details” field in testmempoolaccept response [<a href="https://github.com/bitcoin/bitcoin/pull/28121">Merged</a>]</li>
  <li>BDK #1592: Introduce Architectural Decision Records (ADRs) to document major changes by detailing the problem, decision drivers, considered alternatives, advantages and disadvantages, and the final decision. [<a href="https://github.com/bitcoindevkit/bdk/pull/1592">Merged</a>]</li>
  <li>BDK #1670: Introduce O(n) canonicalization algorithm: This PR introduces an <code class="language-plaintext highlighter-rouge">O(n)</code> algorithm to determine the canonical set of transactions in <code class="language-plaintext highlighter-rouge">TxGraph</code> [<a href="https://github.com/bitcoindevkit/bdk/pull/1670">Merged</a>]</li>
  <li>LDK #3435: Authenticate blinded payment paths: introduces an authentication field to the blinded path payment context message, allowing the payer to include a Hash-based Message Authentication Code (HMAC) and a nonce [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3435">Merged</a>]</li>
  <li>LDK #3340: Batch on-chain claims more aggressively per channel: introduces batching of on-chain claim transactions with pinnable outputs, reducing block space usage and fees in force-closure scenarios [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3340">Merged</a>]</li>
  <li>Eclair #2936: Delay considering a channel closed when seeing an on-chain spend: introduces a 12 block delay [<a href="https://github.com/ACINQ/eclair/pull/2936">Merged</a>]</li>
  <li>Rust Bitcoin #3792: Add BIP324 V2 p2p network message support [<a href="https://github.com/rust-bitcoin/rust-bitcoin/pull/3792">Merged</a>]</li>
  <li>NIP #1695: NIP-60: clarify privkey is optional [<a href="https://github.com/nostr-protocol/nips/pull/1695">Open</a>]</li>
  <li>NIP #1706: Introduce support for signing and encryption/decryption on hardware based Nostr Signing Devices over BLE [<a href="https://github.com/nostr-protocol/nips/pull/1706">Open</a>]</li>
  <li>NIP #1696: nostr over reticulum: allows nostr clients/relays to communicate over Reticulum networks [<a href="https://github.com/nostr-protocol/nips/pull/1696">Draft</a>]</li>
  <li>NIP #1674: Adds Open Graph “iMeta” tags: for clients to preview URLs without having to ping them [<a href="https://github.com/nostr-protocol/nips/pull/1674">Open</a>]</li>
  <li>NIP #1681: NIP-88: DLC oracle announcement/attestation event kinds [<a href="https://github.com/nostr-protocol/nips/pull/1681">Open</a>]</li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>At the World Economic Forum (WEF) Annual Meeting 2025, Spanish Prime Minister Pedro Sánchez calls for “an end to anonymity on social media” and for forcing “all these platforms to link every user account to an European Digital Identity Wallet.” [<a href="https://x.com/ReclaimTheNetHQ/status/1882134824808538415">Reclaim The Net
</a>]</li>
  <li>U.S. court overturns sanctions on Tornado Cash mixer [<a href="https://www.theblock.co/post/336319/us-court-rules-against-tornado-cash-sanctions-torn-cryptocurrency-surges-140">The Block</a>]
    <ul>
      <li>A U.S. District Court in the Western District of Texas orders the Office of Foreign Assets Control (OFAC) to remove Tornado Cash-related addresses from its Specially Designated Nationals and Blocked Persons (SDN) list.</li>
      <li>The court <a href="https://storage.courtlistener.com/recap/gov.uscourts.txwd.1211705/gov.uscourts.txwd.1211705.99.0.pdf">rules</a> that Tornado Cash’s immutable smart contracts are not “property” under the International Emergency Economic Powers Act (IEEPA), as they cannot be owned or controlled.</li>
      <li>Despite the sanctions reversal, the U.S. Department of Justice states that this decision does not affect ongoing criminal proceedings against Tornado Cash developers, including Roman Storm.</li>
    </ul>
  </li>
  <li>Operators of Blender and Sinbad custodial bitcoin mixers arrested and charged with money laundering, facing over 25 years in prison if convicted [<a href="https://www.justice.gov/opa/pr/operators-cryptocurrency-mixers-charged-money-laundering">DOJ Press release</a>]
    <ul>
      <li>The U.S. Department of Justice indicts three Russian nationals for operating unlicensed crypto mixers Blender.io and Sinbad.io</li>
      <li>Blender.io operated from approximately 2018 to 2022, advertising a “No Logs Policy” and requiring no user registration.</li>
    </ul>
  </li>
  <li>Donald and Melania Trump launch the $TRUMP and $MELANIA meme coins ahead of inauguration [<a href="https://cointelegraph.com/explained/what-is-trump-donald-trumps-billion-dollar-memecoin">Coin Telegraph</a>]
    <ul>
      <li>Both tokens are built on the Solana blockchain. For $TRUMP coin, an initial supply of 200 million coins is set, with plans to expand to 1 billion over three years.</li>
      <li>The token’s website states that $TRUMP is “not intended to be, or the subject of” an investment opportunity or any type of security, and is “not political and has nothing to do with” Trump’s campaign, office, or government agency.</li>
    </ul>
  </li>
  <li>Trump-backed World Liberty Financial token extends sale [<a href="https://cointelegraph.com/news/trump-world-liberty-financial-token-sale-extended-sold-out-presale">Coin Telegraph</a>]
    <ul>
      <li>World Liberty Financial extended its token sale after raising $300 million, selling 20% of 100 billion WLFI tokens at 1.5 cents each. The extension added 5 billion tokens at 5 cents, aimed at raising an additional $250 million.</li>
      <li>A <a href="https://x.com/worldlibertyfi/status/1881457386671464804">tweet</a> from WLFI announced significant strategic purchases “to commemorate the inauguration of Donald J. Trump as the 47th President of the United States,” including $47 million in ETH and wBTC, alongside smaller investments in cryptocurrencies.</li>
    </ul>
  </li>
  <li>The U.S. Department of Justice received court approval to liquidate 69,370 bitcoin following a four-year legal battle [<a href="https://decrypt.co/300133/us-court-greenlights-sale-of-6-5b-in-seized-silk-road-bitcoin">Decrypt</a>]</li>
  <li>U.S. government recommends returning the 94,000 stolen bitcoin from 2016 Bitfinex hack to exchange as in-kind restitution [<a href="https://www.theblock.co/post/334791/us-government-says-stolen-bitcoin-from-2016-bitfinex-hack-should-be-returned-to-the-exchange-in-kind">The Block</a>]
    <ul>
      <li>This recommendation aligns with prior court filings where both defendants and Bitfinex’s parent company, iFinex, acknowledged the exchange as the sole victim of the 2016 hack.</li>
    </ul>
  </li>
  <li>U.S Internal Revenue Service (IRS) postpones bitcoin cost-basis reporting rules to 2026 [<a href="https://www.theblock.co/post/332781/irs-delays-implementing-crypto-cost-basis-reporting-rules">The Block</a>]
    <ul>
      <li>The IRS delays new bitcoin tax reporting rules until January 1, 2026, granting brokers additional time to adapt to cost-basis regulations for centralized platforms.</li>
    </ul>
  </li>
  <li>Coin Center Fellow Michael Lewellen is suing the DOJ for criminalizing the creation of non-custodial software, like his Pharos protocol [<a href="https://www.coincenter.org/coin-center-fellow-michael-lewellen-is-suing-the-doj-over-their-criminalization-of-software-development/">Coin Center Blog post</a>]
    <ul>
      <li>The DOJ argues that developers who enable money movement, like those behind Tornado Cash, must register as money transmitters, a position Lewellen contests as unconstitutional and anti-innovation.</li>
    </ul>
  </li>
  <li>Texas court <a href="https://www.courtlistener.com/docket/69425855/50/united-states-v-ahlgren/">orders</a> Coinbase user to surrender access to his $124 million bitcoin holdings [<a href="https://archive.ph/CX56g">Bloomberg</a>]
    <ul>
      <li>Frank Ahlgren, was sentenced to two years for underreporting profits from $3.7 million in bitcoin sales.</li>
      <li>Ahlgren must surrender access to his bitcoin holdings including private keys and passphrases, to settle a $1 million restitution, and disclose the location of 1,287 bitcoins moved via a mixing service in 2020.</li>
    </ul>
  </li>
  <li>A U.S federal appeals court overturned the FCC’s net neutrality rules, limiting its authority to regulate wireless and broadband services, citing the Loper Bright case. [<a href="https://www.reuters.com/legal/us-appeals-court-blocks-biden-administration-net-neutrality-rules-2025-01-02/">Reuters</a>]
    <ul>
      <li>The ruling prevents ISPs from throttling or blocking content, but allows state-level neutrality rules to remain in effect.</li>
    </ul>
  </li>
  <li>Burma’s military junta is tightening control over online spaces through a new cybersecurity law targeting digital platform providers [<a href="https://apnews.com/article/internet-online-censorship-law-repression-8128ba7a2c02555217c6a64ab641eaf6">AP News</a>]
    <ul>
      <li>The law mandates providers to store user data for three years and share it with the state on request, penalizing non-compliance.</li>
      <li>VPN use is criminalized, with violators facing up to six months in prison and fines.</li>
    </ul>
  </li>
  <li>Iran’s central bank abruptly blocks payment gateways to cryptocurrency exchanges amid currency crisis [<a href="https://x.com/sina_21st/status/1873097867625140230">Twitter post</a>]
    <ul>
      <li>This action follows previous measures, including freezing bank accounts of cryptocurrency exchanges and suspending payment processing services in November, due to concerns over speculation in the Tether market and money laundering risks.</li>
    </ul>
  </li>
  <li>Thai police seize 996 bitcoin mining devices [<a href="https://www.bangkokpost.com/thailand/general/2936275/996-bitcoin-mining-devices-seized-in-chon-buri">Bangkok Post</a>]
    <ul>
      <li>Authorities raided JIT Co in Chon Buri, seizing 996 bitcoin miners, which were being run using modified power meters, stealing electricity.</li>
    </ul>
  </li>
  <li>Kazakhstan shut down 36 unauthorized crypto exchanges in 2024, seizing assets worth $112 million [<a href="https://cointelegraph.com/news/kazakhstan-crypto-crackdown-2024">Coin Telegraph</a>]
    <ul>
      <li>Authorities are working on a digital currency, the digital tenge, and are collaborating with Visa and Mastercard to integrate it into global payment systems.</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://x.com/MyfirstBitcoin_/status/1876282680838349004">Bitcoin Educators Unconference</a>: Mi Primer Bitcoin fourth conference for educators, meetup organizers and community leaders
    <ul>
      <li>April 10, 2025 in Nashville, U.S</li>
    </ul>
  </li>
  <li><a href="https://bitcoinisforeveryone.com/">Bitcoin Is For Everyone</a>: An immersive full-day Bitcoin Experience in Portland, OR
    <ul>
      <li>August 1st, 2025 in Portland, U.S</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>Privacy matters because it empowers us all, by Carissa Véliz [<a href="https://aeon.co/essays/privacy-matters-because-it-empowers-us-all">Essay</a>]</li>
      <li>A Spark of Defiance: A guide to Solo mining with a Bitaxe to a RasPi full node &amp; a self-hosted Public Pool stratum server, by econoalchemist [<a href="https://256foundation.org/newsletters/256Foundation-Newsletter-2501_v1.pdf">The 256 Foundation</a>]</li>
      <li>How to run an economic node, by Scoresby [<a href="https://stacker.news/items/842044">Guide</a>]</li>
      <li>Quantum Leap? Disentangling fact from fiction in bitcoin and quantum computing, by John [<a href="https://www.ten31timestamp.com/p/quantum-leap">Ten31 Blog post</a>]</li>
      <li>Nostr is the world’s biggest bitcoin circular economy, by Frank Corva [<a href="https://bitcoinmagazine.com/takes/nostr-is-the-worlds-biggest-bitcoin-circular-economy-join-us">Bitcoin Magazine</a>]</li>
      <li>A Day in the Life of a Prolific Voice Phishing Crew, by Krebs On Security [<a href="https://krebsonsecurity.com/2025/01/a-day-in-the-life-of-a-prolific-voice-phishing-crew/">Blog post</a>]</li>
      <li>Buckets of blind signatures, by Cashu [<a href="https://blog.cashu.space/buckets-of-blind-signatures/">Blog post</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, CRAIG RAW, ROB HAMILTON</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Craig Raw and Rob Hamilton to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR090 - COLDCARD, BullBitcoin, Bitcoin Safe, miningpool-observer, Electrs, Zero Fee/P2PK Playground, Tangem Private Keys Exposed, Proton Wallet Vuln, Google Security Phishing Scams, Signatures Explained, “Not Enough UTXOs!”, Casa Deepfake-resistant Verification + MORE ft. Rob</title><link href="https://bitcoin.review/podcast/episode-90/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR090 - COLDCARD, BullBitcoin, Bitcoin Safe, miningpool-observer, Electrs, Zero Fee/P2PK Playground, Tangem Private Keys Exposed, Proton Wallet Vuln, Google Security Phishing Scams, Signatures Explained, “Not Enough UTXOs!”, Casa Deepfake-resistant Verification + MORE ft. Rob" /><published>2025-01-03T16:30:00+00:00</published><updated>2025-01-03T16:30:00+00:00</updated><id>https://bitcoin.review/podcast/episode-90</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-90/"><![CDATA[<p>I’m joined by guest <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>00:01:37 Verify-address over NFC using a Coldcard Q and BDK iOS example wallet [<a href="https://njump.me/nevent1qqs8qjzkcdtzp93tkckekezeevvlnh6rjugc5a6wk4urdncn4080sjcpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3qreezn2ctrrg736uqj7mva9lsuwv0kr5asj4vvkwxnrwlhvxf98tscetek9">Demo by Matthew Ramsden</a>]</li>
</ul>

<h3 id="urgent-vulnerability-disclosures">Urgent Vulnerability Disclosures</h3>
<ul>
  <li>00:18:57 New fake Ledger data breach emails try to steal crypto wallets [<a href="https://www.bleepingcomputer.com/news/security/new-fake-ledger-data-breach-emails-try-to-steal-crypto-wallets/">Bleeping Computer</a>]
    <ul>
      <li>These emails falsely claim that a data breach has occurred, urging recipients to verify their recovery phrases through a provided link.</li>
    </ul>
  </li>
  <li>00:20:51 Cryptocurrency hardware wallet Tangem ‘fixes’ app bug that saved user seed phrases in application logs, exposing private keys during support interactions [<a href="https://cointelegraph.com/news/tangem-security-vulnerability-fixed-private-key-leak">Coin Telegraph</a>]
    <ul>
      <li>“What was the issue? When creating a wallet with a seed phrase, the private key was mistakenly logged in the application’s logs. These logs could later be accessed during interactions with our support team.” [<a href="https://www.reddit.com/r/Tangem/comments/1hougo1/comment/m4jygh9/">Tangem’s Reddit comment</a>]</li>
      <li>Redditor, u/areklanga points out in a <a href="https://www.reddit.com/r/Tangem/comments/1hougo1/comment/m4jygh9/?context=3">Reddit discussion</a> on Tangem’s operations “So, user private keys remain in both user email history, Tangem email history, and perhaps in some Tangem ticket tracking system and are available for Tangen employees. Which makes all Tangem users compromized.”</li>
    </ul>
  </li>
  <li>00:26:03 Irrevocable fees—stealing from LN using revoked commitment transactions [<a href="https://delvingbitcoin.org/t/disclosure-irrevocable-fees-stealing-from-ln-using-revoked-commitment-transactions/1314">David Harding’s disclosure</a>]
    <ul>
      <li>A critical vulnerability in all major Lightning Network implementations could allow miners to steal up to 98% of channel funds under certain conditions. Honest users performing normal operations also risk smaller fund losses due to similar flaws.</li>
      <li>Eclair, LDK, and LND with default settings were vulnerable to an immediately exploitable version of the attack. Core Lightning users face risks with non-default configurations, especially when the <code class="language-plaintext highlighter-rouge">--ignore-fee-limits</code> setting is enabled.</li>
      <li>Mitigations for the most critical flaws are implemented through updates: Eclair v0.10.0 (Feb 2024), LDK v0.0.123 (May 2024), and LND v0.18.3-beta (Sept 2024). Future protocol changes are required to eliminate all variations of the vulnerability.</li>
    </ul>
  </li>
  <li>00:27:13 Security research company Zellic identified a <a href="https://www.zellic.io/blog/proton-dart-flutter-csprng-prng/#2--proton-wallet-encryption-vulnerability">vulnerability in Proton Wallet’s early preview version</a>, affecting wallet and backup mnemonic security.
    <ul>
      <li>The issue stemmed from the use of Dart’s Random() class, which is not cryptographically secure. This weakness made it feasible for attackers to predict generated passwords, compromising user data.</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:28:29 Coldcard Edge <a href="https://blog.coinkite.com/edge-634/">v6.3.4</a>
    <ul>
      <li>Shared Improvements - Both Mk4 and Q
        <ul>
          <li>Enhancement: Hide Secure Notes &amp; Passwords in Deltamode. Wipe seed if notes menu accessed</li>
          <li>Enhancement: Hide Seed Vault in Deltamode. Wipe seed if Seed Vault menu accessed</li>
          <li>Bugfix: Do not allow to enable/disable Seed Vault feature when in temporary seed mode</li>
          <li>Bugfix: Bless Firmware causes hanging progress bar</li>
          <li>Bugfix: Prevent yikes in ownership search</li>
          <li>Change: Do not allow to purge settings of current active tmp seed when deleting it from Seed Vault</li>
        </ul>
      </li>
      <li>Mk4 Specific Changes
        <ul>
          <li>All updates from 5.4.0</li>
          <li>Enhancement: Export single sig descriptor with simple QR</li>
        </ul>
      </li>
      <li>Q Specific Changes
        <ul>
          <li>All updates from version 1.3.0Q</li>
          <li>Bugfix: Properly re-draw status bar after Restore Master on COLDCARD without master seed</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:33:00 BLOCKCLOCK <a href="https://blockclockmini.com/firmware/ChangeLog.html">v1.2.3</a>
    <ul>
      <li>MINI only:
        <ul>
          <li>Add some “mime fun” on display page. Mr. Yellow makes an appearance.</li>
          <li>Press either of the two middle buttons (not top/bottom) and the next value in your list will be shown immediately. MICRO already had this feature with bottom right button.</li>
        </ul>
      </li>
      <li>External IP address reported into the log file to aid network debug.</li>
      <li>MAC address (wifi) is now shown on network page. Might be used for DHCP management on your LAN.</li>
      <li>Carat symbol (^) added to the font.</li>
      <li>Some values will be able to show OVER/UNDER without the bar between.</li>
      <li>Improve local API display of numeric values, when using /api/show/number endpoint.</li>
    </ul>
  </li>
  <li>00:33:36 BDK <a href="https://github.com/bitcoindevkit/bdk/releases/tag/wallet-1.0.0">v1.0.0</a>
    <ul>
      <li><code class="language-plaintext highlighter-rouge">Wallet::transactions</code> should only return relevant transactions</li>
      <li>Minor updates to fix new rustc 1.83.0 clippy warnings</li>
    </ul>
  </li>
  <li>00:33:50 Nunchuk
    <ul>
      <li>Android
        <ul>
          <li><a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.9.57">v1.9.57</a>
            <ul>
              <li>Taproot multisig wallets: Nunchuk introduces Taproot multisig, reducing transaction fees and simplifying complex scripts, improving user experience and network performance.</li>
            </ul>
          </li>
          <li><a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.9.56">v1.9.56</a>
            <ul>
              <li>Add dark mode</li>
              <li>Add biometric login support</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Desktop <a href="https://github.com/nunchuk-io/nunchuk-desktop/releases/tag/1.9.42">v1.9.42</a>
        <ul>
          <li>Implement advanced coin control</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:34:19 BullBitcoin Mobile <a href="https://github.com/SatoshiPortal/bullbitcoin-mobile/releases/tag/v0.4.0">v0.4.0</a> - Payjo+n
    <ul>
      <li>Basic Payjoin Implementation:
        <ul>
          <li>Bull Bitcoin integrates Payjoin V2 into its mobile wallet, enabling serverless, asynchronous Bitcoin transactions. [<a href="https://www.bullbitcoin.com/blog/bull-bitcoin-wallet-payjoin">Announcement</a>]</li>
          <li>Payjoin transactions no longer require constant internet connectivity or a full node. The receiver’s device can stay offline, resuming the session when reconnected.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:36:59 Bitcoin Keeper
    <ul>
      <li>Mobile <a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/vv1.3.1">v1.3.1</a>
        <ul>
          <li>New Collaborative Wallet flow to make it easier to create a wallet with friends and family</li>
          <li>Update the signing devices UI with a focus on easier collaboration and use</li>
        </ul>
      </li>
      <li>How to set up Bitcoin Keeper wallet with Tapsigners to create a mobile inheritance plan [<a href="https://youtu.be/tCld_-n2d30">Tutorial by BTC Sessions</a>]</li>
    </ul>
  </li>
  <li>00:37:21 Electrs <a href="https://github.com/romanz/electrs/blob/master/RELEASE-NOTES.md#0108-dec-30-2024">v0.10.8</a>
    <ul>
      <li>Separate blocks reading &amp; index writing into scoped threads</li>
      <li>Set HTTP <code class="language-plaintext highlighter-rouge">Content-Type</code> header for Prometheus response</li>
      <li>Use <code class="language-plaintext highlighter-rouge">ctrlc</code> in place of <code class="language-plaintext highlighter-rouge">signal-hook</code> on Windows</li>
      <li>Don’t deserialize transactions if not needed</li>
      <li>Run CI only on <code class="language-plaintext highlighter-rouge">master</code> branch and PRs</li>
      <li>Update dependencies (<code class="language-plaintext highlighter-rouge">bitcoin</code>, <code class="language-plaintext highlighter-rouge">bitcoin_slices</code>, <code class="language-plaintext highlighter-rouge">crossbeam-channel</code>, <code class="language-plaintext highlighter-rouge">tempfile</code>)</li>
    </ul>
  </li>
  <li>00:39:20 BTCPayServer <a href="https://github.com/btcpayserver/btcpayserver/releases/tag/v2.0.5">v2.0.5</a>
    <ul>
      <li>Checkout: Add support link to footer</li>
      <li>Pull Payment: Add “Copy Link” button to the action column</li>
      <li>Greenfield: Remove authorization requirement for PoS data</li>
      <li>Greenfield: Resolve store user’s image URL</li>
    </ul>
  </li>
  <li>00:39:36 rust-payjoin <a href="https://github.com/payjoin/rust-payjoin/releases/tag/payjoin-0.22.0">v0.22.0</a>
    <ul>
      <li>Payjoin V2 Sender now serializes reply_key so that it may resume after being persisted
        <ul>
          <li>Propagate uri Fragment parameter errors to their caller</li>
          <li>Have Sender persist reply key so resumption listens where a previous send session left off</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:39:45 Krux installer <a href="https://github.com/selfcustody/krux-installer/releases/tag/v0.0.20">v0.0.20</a>
    <ul>
      <li>First stable version of the entire code refactoring. Exisiting features:
        <ul>
          <li>Automatic check of latest official firmware</li>
          <li>Optional selection of older firmware versions</li>
          <li>Supported devices: M5stickV, Sipeed Amigo, Sipeed Bit, Sipeed Dock, Sipeed Cube, Yahboom, WonderMV</li>
          <li>Flash official firmware with automatic integrity/authenticity verification</li>
          <li>Flash beta firmware devices</li>
          <li>Air-gap update devices with SDcard</li>
          <li>Wipe devices</li>
          <li>Support for Windows, MacOS Arm, MacOS Intel, Debian-like OS and Fedora</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:39:55 Frostsnap <a href="https://github.com/frostsnap/frostsnap/releases/tag/v0.0.0-alpha.1">v0.0.0-alpha.1</a>
    <ul>
      <li>Basic wallet recovery:
        <ul>
          <li>Allows you to delete keys from the key list</li>
          <li>Allows you to recover them by plugging in devices</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:40:42 Bitcoin Safe <a href="https://github.com/andreasgriffin/bitcoin-safe/releases/tag/1.0.0rc1">1.0.0rc1</a>
    <ul>
      <li>New Features:
        <ul>
          <li>Full support for all major hardware signers Coldcard, Q, Bitbox02, Blockstream Jade, Trezor, Foundation Passport, Keystone, Ledger, Specter DIY
            <ul>
              <li>Full support for BBQr and UR</li>
            </ul>
          </li>
          <li>Balance Statement PDF Export</li>
        </ul>
      </li>
      <li>Improved Features:
        <ul>
          <li>Sync &amp; Chat: Label Synchronization backup and Multi-party Multisig Collaboration can now be enabled in the last wallet setup wizard step</li>
          <li>Transaction diagram navigation by clicking on inputs and outputs</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:42:03 Blockstream Satellite <a href="https://github.com/Blockstream/satellite/releases/tag/v2.5.0">v2.5.0</a>
    <ul>
      <li>Add graphical user interface (GUI) application (<code class="language-plaintext highlighter-rouge">blocksat-gui</code>)</li>
      <li>Add option to disable Linux media build backport on TBS driver installation</li>
      <li>Update Telstar 11N Africa and Europe downlink frequencies</li>
    </ul>
  </li>
  <li>00:42:28 Raspiblitz <a href="https://github.com/raspiblitz/raspiblitz/releases/tag/v1.11.4">v1.11.4</a>
    <ul>
      <li>AlbyHub feature release</li>
      <li>Add AlbyHub to RaspiBlitz SSH menus</li>
      <li>Improve mempool install script</li>
    </ul>
  </li>
  <li>00:42:39 Ashigaru <a href="http://ashicodepbnpvslzsl2bz7l2pwrjvajgumgac423pp3y2deprbnzz7id.onion/Ashigaru/Ashigaru-Mobile/releases/tag/v1.1.0">v1.1.0</a>
    <ul>
      <li>Overhaul of Settings menu user interface</li>
      <li>Add wallet accounts recovery information</li>
      <li>Ability to automatically update over Tor the app’s functionality URLs (with PGP verification) to ensure continuous PayNym directory and Soroban network availability.</li>
      <li>Display Tor direct download .onion URLs. URLs automatically updated over Tor (with PGP verification).</li>
      <li>Display Ashigaru Tor website URL. URL automatically updated over Tor (with PGP verification).</li>
      <li>Ability to hide balance by tapping on available balance</li>
      <li>Consolidation and Wallet Sweep transaction alerts</li>
    </ul>
  </li>
  <li>00:45:02 BoltzExchange
    <ul>
      <li>boltz-web-app <a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.6.0">v1.6.0</a>
        <ul>
          <li>Add WalletConnect</li>
          <li>Show error when QR scanning is not supported in browser</li>
          <li>Help server claim Chain Swaps that receive on EVM</li>
        </ul>
      </li>
      <li>boltz-backend <a href="https://github.com/BoltzExchange/boltz-backend/releases/tag/v3.9.0">v3.9.0</a> - Swarm of Swaps
        <ul>
          <li>Add batch claim support for Chain Swaps</li>
          <li>Add batch claiming on EVM based chains</li>
        </ul>
      </li>
      <li>BoltzExchange launched <a href="https://pro.boltz.exchange/">Boltz Pro</a>, a non-custodial way to earn sats with swaps on Boltz [<a href="https://x.com/Boltzhq/status/1873778290210566233">Announcement</a>]
        <ul>
          <li>Boltz Pro offers dynamic fees that let users earn sats for swapping funds in specific directions when wallet imbalances arise.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:45:04 Mempal <a href="https://github.com/aeonBTC/Mempal/releases/tag/v1.4.0">v1.4.0</a>
    <ul>
      <li>New app icon</li>
      <li>Tap to refresh any individual dashboard card</li>
      <li>Save multiple custom mempool servers in settings</li>
      <li>New settings option to change notification intervals from minutes to seconds</li>
      <li>Fee distribution data will now fallback to mempool.space when using a custom mempool server</li>
      <li>Widget data now defaults to mempool.space when using Tor</li>
    </ul>
  </li>
  <li>00:45:11 Zaprite <a href="https://help.zaprite.com/en/articles/10315897-zaprite-release-notes-2024-12-23">v2024-12-23</a>
    <ul>
      <li>Orqestra: add new Orqestra.io integration to enable automated USD-to-BTC conversions</li>
      <li>Merchant X: update Merchant X Checkouts to use an inline credit card form instead of a modal</li>
      <li>Public API: update documentation to explain that Orders are not visible until paid</li>
      <li>LNURL: enhance LNURL error reporting</li>
    </ul>
  </li>
  <li>00:45:13 ESP-Miner <a href="https://github.com/skot/ESP-Miner/releases/tag/v2.4.2">v2.4.2</a>
    <ul>
      <li>Add uptime to home screen</li>
      <li>Change naming of stratum url to host</li>
      <li>Change Stratum Fallback URL as well</li>
      <li>Adds solohash getQuickLink()</li>
      <li>Change Mining URL to Stratum Host on screen</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>00:45:18 Satoshi: A new wallet for Bitcoin, Lightning, and Liquid payments, that can be both custodial or self custodial [<a href="https://x.com/satoshimoneybtc/status/1868721579305124231">Announcement</a>]
    <ul>
      <li>Satoshi Version 1.0 is now live in the App Store in 40 countries. 🎉</li>
    </ul>
  </li>
  <li>00:45:28 Joinstr: An experimental rust implementation of <a href="https://joinstr.xyz/">joinstr</a> [<a href="https://github.com/pythcoiner/joinstr">Github</a>]
    <ul>
      <li>A dedicated <a href="https://miningpool.observer/template-and-block/sanctioned-feed.xml">RSS feed</a> is available.</li>
    </ul>
  </li>
  <li>00:45:33 <a href="https://miningpool.observer/">miningpool-observer</a>: The project compares block templates produced by a Bitcoin Core node to blocks produced by mining pools to provide insights [<a href="https://github.com/0xb10c/miningpool-observer">Github</a>]</li>
  <li>00:46:51 <a href="https://dojobay.pw/">Dojo Bay</a>: A directory of available Dojo nodes, allowing users to select nodes based on reputation and location, both for Mainnet and Testnet.</li>
  <li>00:46:56 Nightly Bitcoin Core Tests: A tool to test and review development versions of Bitcoin Core [<a href="https://github.com/hebasto/bitcoin-core-nightly">Github</a>]</li>
  <li>00:47:04 <a href="https://nigiri.vulpem.com/">Nigiri</a>: A delicious docker box for special Bitcoin cookings [<a href="https://github.com/vulpemventures/nigiri">Github</a>]
    <ul>
      <li>Nigiri offers a command-line interface that utilizes preconfigured Docker Compose setups to create a ready-to-use Bitcoin regtest environment.</li>
      <li>The preconfigured package includes a Bitcoin Core node running in regtest mode, a backend and frontend explorer (Electrum) and Chopsticks a JSON HTTP proxy. You can extend the setup with: Ark, Elements/Liquid sidechain, and Lightning Network nodes.</li>
    </ul>
  </li>
  <li>00:47:15 Run Litd: Notes and helper scripts for setting up and running a Litd node. [<a href="https://github.com/HannahMR/run-litd">Github</a>]</li>
  <li>00:47:28 bllsh: A bullish shell for a bitcoin lisp language [<a href="https://github.com/ajtowns/bllsh">Github</a>]
    <ul>
      <li>“Basic Bitcoin Lisp language (bll) is a proposed scripting language that could be added to Bitcoin in a soft fork. Formerly called BTC Lisp and conceptually based on Chia Lisp, it’s part of a set of tools that includes symbll (a miniscript-like compiler of higher-level Lisp to lower-level bll) and bllsh (a REPL for trying and debugging symbll and bll).” [<a href="https://bitcoinops.org/en/topics/basic-bitcoin-lisp-language/">Bitcoin Optech definition</a>]</li>
      <li>AJ Towns recently presented his work on Basic Bitcoin Lisp Language to Brink engineers [<a href="https://brink.dev/blog/2024/12/19/eng-call-aj-towns-bll/">Presentation</a>]</li>
    </ul>
  </li>
  <li>00:48:05 <a href="https://btceed.live/">Btceed</a>: Bird’s-eye view of your bitcoin HD wallet [<a href="https://github.com/pycanis/btceed">Github</a>]
    <ul>
      <li>Btceed is a web application that provides a graphical overview of Bitcoin HD wallets using seed phrases.</li>
    </ul>
  </li>
  <li>00:48:12 <a href="https://supertestnet.github.io/zero_fee_playground/">Zero Fee Playground</a>: A site for trying out zero fee bitcoin transactions
    <ul>
      <li>The Zero Fee Playground provides a step-by-step demonstration for creating and testing paired transactions using Bitcoin version 28’s updated rules.</li>
    </ul>
  </li>
  <li>00:49:17 <a href="https://supertestnet.github.io/p2pk_playground/">P2PK Playground</a>: A site for creating P2PK outputs in bitcoin i.e. paying someone’s raw public key
    <ul>
      <li>The guide includes step-by-step instructions for creating and spending P2PK outputs, highlighting tools for broadcasting transactions</li>
    </ul>
  </li>
  <li>00:50:51 <a href="https://testnet4.info/">Bitcoin Testnet4 Faucet</a>: A faucet for Bitcoin testnet4 coins, written in C# using ASP.Net Razor Pages and NBitcoin. [<a href="https://github.com/remcoros/bitcoin-testnet4-faucet">Github</a>]
    <ul>
      <li>The faucet uses OAuth to authenticate users and does not store any personal information.</li>
    </ul>
  </li>
  <li>00:50:58 <a href="https://hashteroids.btcdir.org/">Hashteroids</a>: browser-based game combining elements of the classic Asteroid arcade gameplay with Bitcoin mining concepts</li>
  <li>00:51:07 My First Bitcoin launches <a href="https://network.myfirstbitcoin.io/">Community Hub</a> to support independent bitcoin educators with resources and tools [<a href="https://myfirstbitcoin.io/my-first-bitcoin-launches-community-hub-a-platform-for-independent-bitcoin-educators/">Announcement</a>]
    <ul>
      <li>The platform features Wikis, forums, and a structured system for new educators, helping them connect and share resources globally.</li>
    </ul>
  </li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>00:51:39 Oasis Security’s research team discovers a critical flaw in Microsoft’s Multi-Factor Authentication system, enabling attackers to bypass it and access user accounts, including Outlook, OneDrive, Teams, and Azure Cloud. [<a href="https://www.oasis.security/resources/blog/oasis-security-research-team-discovers-microsoft-azure-mfa-bypass">Public disclosure</a>]
    <ul>
      <li>The vulnerability involves a lack of rate limiting for failed MFA attempts, permitting rapid session creation and code enumeration.</li>
      <li>Attackers can exhaust all 1 million possible six-digit codes within approximately an hour, without user interaction or alerts.</li>
    </ul>
  </li>
  <li>00:51:53 Five dollar wrench attacks: Fake uber driver steals over $223,000 in cryptocurrency from customers’ centralized exchange accounts [<a href="https://www.fox10phoenix.com/news/fake-uber-driver-allegedly-stole-thousands-crypto-from-customers">Fox10</a>]
    <ul>
      <li>The driver allegedly deceived victims into handing over their phones by claiming his own device was malfunctioning or offering to assist with the Uber app.</li>
      <li>Once in possession of the phones, he reportedly transferred funds from their Coinbase accounts.</li>
    </ul>
  </li>
  <li>00:52:40 Two men fall victim to phishing scams, in May 2024, involving fraudulent Google security prompts [<a href="https://krebsonsecurity.com/2024/12/how-to-lose-a-fortune-with-just-one-bad-click/">Krebs On Security</a>]
    <ul>
      <li>An individual fell victim to a phishing scam, losing nearly $500,000 in cryptocurrency. Scammers tricked him into clicking a fraudulent Google account recovery prompt, providing them access to his Google account. They then retrieved his secret seed phrase stored in Google Photos.</li>
      <li>Another individual lost 45 bitcoin after receiving a fake Google security alert and a call from someone claiming his account was compromised. The victim clicked “yes” on the fraudulent prompt and later provided his seed phrase on a phishing site, leading to the instant drainage of his wallet.</li>
    </ul>
  </li>
  <li>00:55:28 Apache MINA’s CVE-2024-52046 flaw, rated CVSS 10.0, enables remote code execution through unsafe Java deserialization. [<a href="https://thehackernews.com/2024/12/apache-mina-cve-2024-52046-cvss-100.html">The Hacker News</a>]
    <ul>
      <li>The vulnerability affects versions 2.0.X, 2.1.X, and 2.2.X, triggered by specific classes and unsafe data processing.</li>
    </ul>
  </li>
  <li>00:55:37 WPA3 vulnerability: risks of downgrade attacks and social engineering [<a href="https://cybernews.com/security/wifi-hackers-can-bypass-wpa3-security/">CyberNews</a>]
    <ul>
      <li>Researchers reveal WPA3 vulnerabilities through a rogue access point and a downgrade attack to WPA2. This allows hackers to capture partial handshake data and potentially recover WiFi passwords.</li>
    </ul>
  </li>
  <li>00:56:07 Hackers compromise 16 Chrome extensions, affecting over 600,000 users, by injecting malicious code to steal cookies and access tokens. [<a href="https://thehackernews.com/2024/12/16-chrome-extensions-hacked-exposing.html">The Hacker News</a>]
    <ul>
      <li>The attack begins with a breach of Cyberhaven’s extension on December 24, 2024, through a web-browser-based supply chain attack, exploiting an employee’s credentials to publish a malicious update. [<a href="https://www.cyberhaven.com/blog/cyberhavens-chrome-extension-security-incident-and-what-were-doing-about-it">Press release</a>]</li>
    </ul>
  </li>
  <li>00:56:54 Symlink exploit: A vulnerability in Apple’s FileProvider component, identified as CVE-2024-44131, allows unauthorized access to sensitive data by bypassing the Transparency, Consent, and Control (TCC) framework. [<a href="https://thehackernews.com/2024/12/researchers-uncover-symlink-exploit.html">The Hacker News</a>]
    <ul>
      <li>Exploiting this flaw, a malicious app can intercept user file operations in the Files app, redirecting them to attacker-controlled locations without user awareness.</li>
    </ul>
  </li>
</ul>

<h3 id="audience-questions">Audience Questions</h3>
<ul>
  <li>00:57:22 Thanks to everyone who sent in questions. Remember to send yours to questions@bitcoin.review.
    <ul>
      <li>00:57:32 Can you explain (like I own ETH), how signatures work for spending Bitcoin? Perhaps you can give a useful analogy for how signing can be done offline using your private key, but which doesn’t releal your private key to the network. In other words how do you PROVE to the network you can legitmately spend that bitcoin without revealing your private key? - anonymous</li>
      <li>01:01:04 When people say “there’s not enough UTXOs for everyone to have one”. How do you quantify that? What’s the number of UTXOs and what factors affect that number? (Such as blocksize?) - anon</li>
      <li>01:06:20 “I have a legacy address that starts with 1 wirh some BTC Should I be worried about CC?” -@Johnylabb</li>
      <li>01:07:16 “Don’t get it….why should anyone, except maybe millionaires, self custody?  Even if u have a lot of BTC, if it’s from many small utxo then it’s worthless” -@Richard-ki4nkgm</li>
      <li>01:10:20 “If BTC must be essentially be held in custody, then why use BTC over gold?  Distrust among large banks might encourage BTC over gold?” -@Richard-ki4nkgm</li>
    </ul>
  </li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Reticulum MeshChat
    <ul>
      <li><a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.18.0">v1.18.0</a>
        <ul>
          <li>Add interface importing and exporting</li>
          <li>Add dropdown menu on interfaces</li>
          <li>Add button to export a single interface</li>
        </ul>
      </li>
      <li><a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.17.0">v1.17.0</a>
        <ul>
          <li>Add docker image</li>
          <li>Add the ability to select a custom profile icon similar to Sideband’s Icon Appearance</li>
          <li>Add the ability to select different levels of image compression when adding an image to a message</li>
        </ul>
      </li>
      <li><a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.16.0">v1.16.0</a>
        <ul>
          <li>Add new Ping tool under <code class="language-plaintext highlighter-rouge">Tools</code> -&gt; <code class="language-plaintext highlighter-rouge">Ping</code></li>
        </ul>
      </li>
      <li><a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.15.0">v1.15.0</a>
        <ul>
          <li>Add RNode web flasher to new tools section</li>
          <li>Add SNR and hops away to LXMF announces list</li>
          <li>Add new drop down menu to conversation viewer</li>
          <li>Add the ability to ping destination from conversation viewer dropdown</li>
          <li>Add LXMF user icons to the announce list and conversation viewer</li>
          <li>Add signal metrics to conversation viewer</li>
        </ul>
      </li>
      <li><a href="https://github.com/liamcottle/reticulum-meshchat/releases/tag/v1.14.0">v1.14.0</a>
        <ul>
          <li>Add dark mode</li>
          <li>Add full micron format and field support thanks</li>
          <li>Add setting to select Light Theme or Dark Theme</li>
          <li>Add support for showing Sideband/LXMF user appearance icons in conversations list</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>SimpleX
    <ul>
      <li><a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.3.0-beta.0">v6.3.0-beta.0</a>
        <ul>
          <li>Chat lists: organize and filter your chats</li>
        </ul>
      </li>
      <li><a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.2.2">v6.2.2</a>
        <ul>
          <li>Open files in default app (Android)</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li><a href="https://superbacked.com/">Superbacked</a>: A secret management platform used to back up and pass on sensitive data from one generation to the next, is now free and source-available [<a href="https://superbacked.com/faq/you-are-not-the-product">Announcement</a>]
    <ul>
      <li>“Superbacked distributed backups are encrypted using Shamir Secret Sharing … before being encrypted (again) using Blockcrypt.” [<a href="https://github.com/superbacked/superbacked">Github</a>]</li>
    </ul>
  </li>
  <li><a href="https://www.ludlowinstitute.org/">The Ludlow Institute</a>: an independent research and media organization dedicated to defending privacy, freedom, and individual autonomy in the digital age. [<a href="https://www.ludlowinstitute.org/articles/introducing-the-ludlow-institute">Announcement</a>]
    <ul>
      <li>The institute aims to advance privacy and surveillance research, support privacy tools through advocacy and grants, and provide educational resources such as workshops and meetups.</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>Self-custodial wallet <a href="https://klever.io/">Klever Wallet</a> integrates the Lightning Network using the Breez SDK. [<a href="https://klever.io/blog/klever-wallet-and-breeze-lightning/">Blog post</a>]
    <ul>
      <li>Klever targets underserved areas like Nigeria, Brazil, India, and the Philippines with this integration.</li>
    </ul>
  </li>
  <li>Doppler: A tool for building out and managing bitcoind/lightning clusters for regtest or signet environments [<a href="https://github.com/tee8z/doppler">Github</a>]</li>
  <li>LN OPR: A fast, scalable protocol for resolving Lightning payments [<a href="https://github.com/JohnLaw2/ln-opr">Github</a>]
    <ul>
      <li>The Off-chain Payment Resolution (OPR) protocol enables Lightning payments to be resolved off-chain, even in worst-case situations.</li>
      <li>It ensures faster resolution, typically within seconds, and improves scalability by avoiding additional blockchain data. [<a href="https://github.com/JohnLaw2/ln-opr/blob/main/opr_v1.1.pdf">Research paper</a>]</li>
    </ul>
  </li>
  <li>Magma AI: Intelligent channel management for Lightning Network [<a href="https://amboss.tech/blog/magma-ai">Announcement</a>]
    <ul>
      <li>“By analyzing network data to recommend optimal channel configurations, Magma AI helps node operators improve routing performance and manage liquidity more efficiently.”</li>
    </ul>
  </li>
  <li>Lightstack (Full Phoenixd Stack): Automagic selfcustodial cloud Lightning stack [<a href="https://github.com/massmux/lightstack">Github</a>]
    <ul>
      <li>A self-custodial Lightning node that can be run on a VPS using this stack, accessed via your domain name. It includes an LNBits instance on your node and a phoenixd endpoint secured with SSL.</li>
      <li>A multistack feature now allows multiple stacks to operate on the same VPS, served concurrently.</li>
    </ul>
  </li>
  <li><a href="https://zapplanner.albylabs.com/">ZapPlanner</a>: Schedule automatic recurring lightning payments
    <ul>
      <li>ZapPlanner is a tool enabling automated transfers within customizable intervals, using Nostr Wallet Connect.</li>
    </ul>
  </li>
  <li>CLN Backup: A CLN plugin that uploads the latest SCB to remote locations. [<a href="https://github.com/BoltzExchange/cln-backup">Github</a>]</li>
  <li>Hashpool: An accountless mining pool that represents mining shares as ecash tokens [<a href="https://github.com/vnprc/hashpool">Github</a>]
    <ul>
      <li>“This project is a fork of the Stratum V2 Reference Implementation (SRI) that replaces traditional share accounting with an ecash mint.”</li>
    </ul>
  </li>
  <li>nutjar-ui: A project that helps integrate Lightning tips on websites using nostr and Cashu [<a href="https://github.com/Egge21M/nutjar-ui">Github</a>]
    <ul>
      <li>It provides a web component that simplifies the process of adding donation functionality, allowing users to configure attributes like donation receiver details and minting options.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Core Lightning <a href="https://github.com/ElementsProject/lightning/releases/tag/v24.11.1">v24.11.1</a> - The lightning-dev Mailing List II
    <ul>
      <li><code class="language-plaintext highlighter-rouge">xpay</code> compatibility improved significantly for <code class="language-plaintext highlighter-rouge">xpay-handle-pay:</code> the JSON return should be identical, and it handles maxfeepercent and exemptfee parameters.</li>
      <li><code class="language-plaintext highlighter-rouge">xpay</code> results in <code class="language-plaintext highlighter-rouge">listpays</code> will include <code class="language-plaintext highlighter-rouge">destination</code> and <code class="language-plaintext highlighter-rouge">amount_msat</code> fields.</li>
      <li><code class="language-plaintext highlighter-rouge">xpay</code> doesn’t spam the logs at INFO level any more</li>
      <li><code class="language-plaintext highlighter-rouge">xpay</code> now works through unannounced channels</li>
    </ul>
  </li>
  <li>Zeus <a href="https://github.com/ZeusLN/zeus/releases/tag/v0.9.4-rc1">v0.9.4-rc1</a>
    <ul>
      <li>Embedded Node: LND v0.18.4-beta</li>
      <li>Speed up transaction UX improvements</li>
      <li>CLNRest: fix display of destination addresses on TXs</li>
      <li>Display keysend messages in Activity and Payment views</li>
      <li>Open Channel view: UI tabs for Connect Peer</li>
      <li>LND: optimize payment path calls after payments</li>
      <li>CLNRest: add ability to paste connection strings</li>
      <li>Channels: restore sort by Close Height</li>
      <li>Networking improvements</li>
    </ul>
  </li>
  <li>Ark <a href="https://github.com/ark-network/ark/releases/tag/v0.4.1">v0.4.1</a> - Support absolute locktime (CLTV)
    <ul>
      <li>Patch release that adds supports for absolute locktimes encoded in the VTXO script with CLTV</li>
    </ul>
  </li>
  <li>Fedimint <a href="https://github.com/fedimint/fedimint/releases/tag/v0.5.0">v0.5.0</a> - Christmas Edition
    <ul>
      <li>Highlights:
        <ul>
          <li>Add Tor support for client-federation connections</li>
          <li>Stabilize v2 lightning module</li>
          <li>Upgrade rust-bitcoin (and related ecosystem-crates) from 0.30 to 0.32</li>
          <li>Improve CI to increase our agility while maintaining compatibility guarantees</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Fedi App <a href="https://x.com/fedibtc/status/1867689651743731719">Update</a>
    <ul>
      <li>Cashu Melting: Spend eCash between CashuBTC and Fedimint</li>
      <li>Portable Nostr Keys: Fedi generates an nPub for you and you can take this nPub with you</li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>Alby-go <a href="https://github.com/getAlby/go/releases/tag/v1.8.1">v1.8.1</a>
        <ul>
          <li>Enhanced UI with popicons and new transaction icons</li>
          <li>Verified ownership of Lightning addresses to avoid confusion</li>
          <li>Support for nostr+walletconnect:// connection URLs</li>
          <li>Show wallet name in payment confirmations and home screen</li>
          <li>Simplified wallet renaming process</li>
        </ul>
      </li>
      <li>Alby-hub
        <ul>
          <li><a href="https://github.com/getAlby/hub/releases/tag/v1.12.0">v1.12.0</a> - Michael Froomkin
            <ul>
              <li>Pay 0-amount invoices</li>
              <li>Migrate to VSS</li>
              <li>Fire channel open and closure events in lnd</li>
              <li>Improve Alby Account connection card</li>
              <li>Add environment variable to customize LDK listening addresses</li>
            </ul>
          </li>
          <li><a href="https://github.com/getAlby/hub/releases/tag/v1.11.2">v1.11.2</a> - Suelette Dreyfus
            <ul>
              <li>Implement a large number of improvements to the privacy of app connections:
                <ul>
                  <li>Relay connectivity</li>
                  <li>Backups</li>
                  <li>Open channel flows</li>
                  <li>Receive page</li>
                  <li>Isolated app connections</li>
                  <li>Transaction lists</li>
                </ul>
              </li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>BitBanana <a href="https://github.com/michaelWuensch/BitBanana/releases/tag/v0.8.8">v0.8.8</a>
    <ul>
      <li>Proper Android 14 support</li>
      <li>Add Auto-Lock Timeout setting</li>
      <li>Increase disconnect timeout after app moved to background to 5 min</li>
      <li>Unlocking the app does no longer restart the connection</li>
      <li>Migration Backup now includes app settings</li>
      <li>Increase displayed lightning fee precision</li>
      <li>Add explanation popup when enabling stealth mode</li>
      <li>Add Tamil language</li>
    </ul>
  </li>
  <li>Loop <a href="https://github.com/lightninglabs/loop/releases/tag/v0.29.0-beta">v0.29.0-beta</a>
    <ul>
      <li>Add support for persisting address loop in mode</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li><a href="https://pzp.wiki/">PZP</a>, a peer-to-peer protocol focused on enabling decentralized app development with lightweight storage requirements [<a href="https://codeberg.org/pzp">Code repository</a>]
    <ul>
      <li>Key features include public-key addressing, content deletion, multi-device identity support, and easy CRDT data structures like sets and dicts.</li>
      <li>PZP differs from Nostr by using device-specific keys, sig-chains to track missing content, and being invite-only.</li>
    </ul>
  </li>
  <li>Narr: A self-hosted Nostr and RSS reader [<a href="https://github.com/fiatjaf/narr">Github</a>]
    <ul>
      <li>“narr (not another rss reader) is a web-based RSS and Nostr long-form feed aggregator which can be used both as a desktop application and a personal self-hosted server.”</li>
    </ul>
  </li>
  <li><a href="https://noflux.nostr.technology/">Noflux</a>: A minimalist and opinionated feed reader based on Miniflux. [<a href="https://github.com/fiatjaf/noflux">Github</a>]
    <ul>
      <li>Noflux is a free and open-source Nostr and RSS feed reader optimized for readability, featuring fast navigation, no advertising or user tracking, and simple installation, while supporting Nostr NIP-23 feeds.</li>
    </ul>
  </li>
  <li>Keycast: Secure remote signing and permissions for teams using Nostr. [<a href="https://github.com/erskingardner/keycast">Github</a>]
    <ul>
      <li>Keycast is an open-source platform designed for secure remote signing and key management for teams using Nostr. It enables collaborative management of keys, setting policies, and managing permissions.</li>
    </ul>
  </li>
  <li>Aegis Relay: A premium relay and blossom service that allows relay operators to earn income by providing relay services to the network. [<a href="https://github.com/bitvora/aegis">Github</a>]</li>
  <li>Nostr Safebox: Your own private portable safebox on nostr [<a href="https://github.com/trbouma/safebox">Github</a>]
    <ul>
      <li>Nostr Safebox acts as a personal, portable safebox for securely storing private information like wallets and records while using the Nostr network.</li>
      <li>It uses NIP-44 encrypted events to store its index and contents securely. Access is granted via a unique nsec key, which can be user-generated or provided by a custodial service.</li>
    </ul>
  </li>
  <li>nostr-nsec-seedphrase: A focused TypeScript library for Nostr key management and seedphrase functionality, with seamless integration with nostr-crypto-utils [<a href="https://github.com/HumanjavaEnterprises/nostr-nsec-seedphrase">Github</a>]
    <ul>
      <li>This package is designed to convert between nsec keys and seed phrases, manage delegations, and support multiple key formats.</li>
    </ul>
  </li>
  <li>Noscrypt: A nostr specific cryptography library written in C [<a href="https://github.com/VnUgE/noscrypt">Github</a>]
    <ul>
      <li>“A high-level C utility library built specifically for nostr cryptography operations such as those defined in NIP-01 and the new NIP-44 (NIP-04 coming soon).</li>
      <li>Noscrypt simplifies key generation, note signing &amp; verification, NIP-44 data encryption, NIP-44 private message encryption, and much more.”</li>
    </ul>
  </li>
  <li><a href="https://immortal.dezh.tech/">Immortal</a>: A nostr relay designed for scale [<a href="https://github.com/dezh-tech/immortal">Github</a>]
    <ul>
      <li>Immortal is a Nostr relay implementation written in Go, and designed for scalability and high performance. It is particularly suitable for large community or paid relays, rather than personal use.</li>
    </ul>
  </li>
  <li><a href="https://lumilumi.app/">LumiLumi</a>: A lightweight web client for Nostr [<a href="https://github.com/TsukemonoGit/lumilumi">Github</a>]
    <ul>
      <li>LumiLumi is a web-based client for the Nostr protocol. It supports image and URL sharing, custom emojis, and various muting features.</li>
      <li>To accommodate users with limited data, LumiLumi offers settings to disable images, icons, and Open Graph Protocol (OGP) data, reducing communication costs. It also includes features like NIP-05 verification, relay configuration, and reaction settings.</li>
    </ul>
  </li>
  <li><a href="https://lokuyow.github.io/nostr-zap-view/">nostr-zap-view</a>: View any nostr zaps from anywhere, supporting npub, nprofile, note, and nevent identifiers. [<a href="https://github.com/Lokuyow/nostr-zap-view">Github</a>]</li>
  <li>Spring boot starter: Write Nostr applications with the Spring boot kit [<a href="https://github.com/theborakompanioni/nostr-spring-boot-starter">Github</a>]
    <ul>
      <li>The project helps developers build Nostr applications, supports both custom relay software and client creation, and integrates with nostr-proto for core Nostr concepts.</li>
    </ul>
  </li>
  <li><a href="https://bouquet.slidestr.net/">Bouquet</a>: A web tool to sync blobs between blossom servers. [<a href="https://git.v0l.io/florian/bouquet">Code repository</a>]</li>
  <li><a href="https://csv-importer.coracle.social/">CVS Importer</a>: A Nostr Uploader. Publish events in bulk via CSV</li>
  <li>Servus: A minimalist social media server [<a href="https://github.com/servus-social/servus">Github</a>]
    <ul>
      <li>Servus is fully self-contained within one executable file: CMS, Personal Nostr relay, and Personal file server (Blossom &amp; NIP-96).</li>
    </ul>
  </li>
  <li>Mostr: An immutable nested collaborative task manager, powered by nostr [<a href="https://github.com/xeruf/mostr">Github</a>]</li>
  <li><a href="https://novia-web.vercel.app/">Novia</a> (NOstr VIdeo Archive): Manage video downloads on NOSTR [<a href="https://github.com/teamnovia/novia">Github</a>]
    <ul>
      <li>A service that connects video archive tools to NOSTR. It supports video downloading, metadata management, and publishing video events on NOSTR relays while enabling decentralized video management and sharing.</li>
    </ul>
  </li>
  <li><a href="https://memeamigo.lol/">Meme Amigo</a>: A companion app for <a href="https://gifbuddy.lol/">Gifbuddy.lol</a>, designed as a PWA for creating memes on the go. It allows users to easily add memes to notes on Nostr.
    <ul>
      <li>Meme templates stored on relays under NIP94, generate @nostr.build URLs for easy sharing, add emojis, paste images, and meme GIFs on the same page.</li>
    </ul>
  </li>
  <li>Awesome Nostr Bots: List of collected Bots on nostr [<a href="https://github.com/besoeasy/awesome-nostr-bots">Github</a>]
    <ul>
      <li>A curated list of bots on Nostr with their descriptions and functionalities. These bots bring automation, insights, and updates to the Nostr network.</li>
    </ul>
  </li>
  <li><a href="https://kehiy.github.io/persian-nostr-book/">Persian Nostr Book</a>: A nostr book written in Persian [<a href="https://github.com/kehiy/persian-nostr-book">Github</a>]</li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Rust Nostr <a href="https://github.com/rust-nostr/nostr/blob/master/CHANGELOG.md#v0380---20241231">v0.38.0</a>
    <ul>
      <li>Add full NIP42 support for SDK and relay builder</li>
      <li>Add negentropy support</li>
      <li>Add read/write policy plugins for relay builder</li>
      <li>Add NIP35 support</li>
      <li>Improve logs, docs, and performance</li>
    </ul>
  </li>
  <li>Primal Android
    <ul>
      <li><a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.0.34">v2.0.34</a>
        <ul>
          <li>Highlights in Reads</li>
          <li>USD currency support in Wallet</li>
          <li>Biometric prompt when accessing private key</li>
          <li>Blossom support when rendering images in feeds</li>
          <li>Rendering quoted articles, highlights and notes in note editor</li>
        </ul>
      </li>
      <li><a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.0.28">v2.0.28</a>
        <ul>
          <li>Implemented:
            <ul>
              <li>Profile avatar and cover image viewer in profile details screen</li>
              <li>Rendering highlights and generic events in feeds</li>
              <li>Tap QR code to copy addresses on profile QR code viewer</li>
              <li>Follow/unfollow approvals if contact list is not found</li>
              <li>Onboarding follows customisation and zaps introductions</li>
              <li>Premium badge on profile details screen</li>
              <li>Support for primal legend avatars across the app</li>
              <li>Primal premium check into profile editor</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Damus Testflight <a href="https://njump.me/nevent1qqspztcwj2g7agygr964ey8s8x2fu2r6udtsh2cp3rphr44upz7zsdspp4mhxue69uhkummn9ekx7mqzyql0mt4mrkyj867enj084n3mgx22k3239c4708qm045djfp7p5ngzc2pscz">v1.12</a>
    <ul>
      <li>Render Gif and video files while composing posts</li>
      <li>Add profile info text in stretchable banner with follow button</li>
      <li>Paste Gif image similar to jpeg and png files</li>
      <li>Improve UX around the label for searching words</li>
      <li>Improve accessibility support on some elements</li>
    </ul>
  </li>
  <li>YakiHonne web <a href="https://njump.me/nevent1qqsptst7se8wn9cv9vv7a7syqswxdjyaarhlls4hgyztgf2d4my2qsqpp4mhxue69uhkummn9ekx7mqpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgqg5waehxw309aex2mrp0yhxgctdw4eju6t0qgszpxr0hql8whvk6xyv5hya7yxwd4snur4hu4mg5rctz2ehekkzrvcdxl2ty">Update</a>
    <ul>
      <li>Resolve issues causing the article editor to appear malformed</li>
      <li>Add support for both LTR and RTL languages in the article editor</li>
      <li>Enhance the messaging box to support long text writing</li>
      <li>Secure DMs (Nip44) can now be enabled globally via the messages and settings pages</li>
    </ul>
  </li>
  <li>Flotilla <a href="https://github.com/coracle-social/flotilla/releases/tag/0.2.0">v0.2.0</a>
    <ul>
      <li>Add NIP 29 compatibility</li>
    </ul>
  </li>
  <li>CDK <a href="https://github.com/cashubtc/cdk/releases/tag/v0.6.0">v0.6.0</a>
    <ul>
      <li>Changed:
        <ul>
          <li>cdk: Enforce quote_id to uuid type in mint</li>
          <li>cdk: Refactor wallet mint connector</li>
        </ul>
      </li>
      <li>Added:
        <ul>
          <li>cdk: NUT19 Settings in NUT06 info</li>
          <li>cdk: NUT17 Websocket support for wallet</li>
          <li>cdk-axum: Redis cache backend</li>
          <li>cdk-mints: Get mint settings from env vars</li>
          <li>cdk-axum: HTTP compression support</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Knox <a href="https://gitlab.com/soapbox-pub/knox/-/commit/dbdffb32fe8a9555b80f16ca9bbf4f15813a9c65">Update</a>
    <ul>
      <li>Switch to NIP-44 encryption</li>
    </ul>
  </li>
  <li>Gossip <a href="https://github.com/mikedilger/gossip/releases/tag/v0.13.0">v0.13.0</a>
    <ul>
      <li>File Metadata support (NIP-92 / NIP-94)</li>
      <li>Blossom support (BUD-01, BUD-02)</li>
      <li>NIP-89 Support - Recommended Application Handlers</li>
      <li>Search on relays (NIP-50): choose your search relays first</li>
      <li>Followers and Followed: see who someone follows, and who follows them</li>
      <li>Undo Send - for 10 seconds (or whatever you configure) you can undo sending</li>
      <li>Thread replies now sorted by date, except author replies come first</li>
      <li>Feeds no longer inject new events and scroll while you are trying to read.</li>
      <li>Relays can now be tested to see whether they are fit for purpose</li>
      <li>NIP-46 replies with NIP-44 encryption if the client used it</li>
      <li>NIP-44 encryption now used for private contacts and private lists</li>
    </ul>
  </li>
  <li>Nostrudel <a href="https://github.com/hzrd149/nostrudel/releases/tag/v0.42.0">v0.42.0</a>
    <ul>
      <li>Add support for olas media posts and NIP-22 comments</li>
      <li>Add tools menu under thread post</li>
      <li>Add favorite DVM feeds</li>
      <li>Add templates to event publisher</li>
      <li>Update timelines to use applesauce</li>
      <li>Add open and share button to stream view</li>
      <li>Add “Proactively authenticate to relays” option to privacy settings, defaults to off</li>
      <li>Support searching local relay</li>
      <li>Add support for cashu v4 tokens</li>
    </ul>
  </li>
  <li>0xChat App Desktop <a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.0.0-desktop-beta">v1.0.0</a>
    <ul>
      <li>The first desktop beta version supports macOS, Linux, and Windows</li>
      <li>Future plans:
        <ul>
          <li>Support NIP-46 login</li>
          <li>Optimize the UI &amp; UX for the desktop version</li>
          <li>Improve the performance of the desktop version</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>nos.social <a href="https://github.com/planetary-social/nos/releases/tag/vstaging-1.0.4-564">v1.0.4</a>
    <ul>
      <li>Add feed picker view (UI only)</li>
      <li>Add feed source customizer drop-down view</li>
      <li>Add empty state for lists/relays drop-down</li>
      <li>Add support for decrypting private tags in kind 30000 lists</li>
      <li>Add remembering which feed source is selected</li>
    </ul>
  </li>
  <li>Citrine <a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.6.0">v0.6.0</a>
    <ul>
      <li>Show notifications when importing, exporting, downloading events</li>
      <li>Change database functions to be suspending functions</li>
      <li>Update dependencies</li>
    </ul>
  </li>
  <li>Honeypot <a href="https://github.com/pablof7z/nutsack/releases/tag/0.1.0">v0.1.0</a>
    <ul>
      <li>Improve onboarding flow</li>
    </ul>
  </li>
  <li>Nowser <a href="https://github.com/haorendashu/nowser/releases/tag/0.0.3">v0.0.3</a>
    <ul>
      <li>Add build-in relay for remote signer</li>
      <li>Bookmarks support add to app index</li>
      <li>Bookmarks support quick action for mobile</li>
      <li>Bookmarks support add to desktop for android</li>
      <li>Reject private zap decrypt request from amethyst</li>
    </ul>
  </li>
  <li>Haven <a href="https://github.com/bitvora/haven/releases/tag/v1.0.3">v1.0.3</a>
    <ul>
      <li>Add support for count events</li>
      <li>Remove dynamic relay handler</li>
      <li>Feature/blossom http range requests</li>
    </ul>
  </li>
  <li>Pokey <a href="https://github.com/KoalaSat/pokey/releases/tag/v0.1.3-alpha">v0.1.3</a>
    <ul>
      <li>Add notifications center</li>
      <li>Views rearrangement</li>
    </ul>
  </li>
  <li>Amber <a href="https://github.com/greenart7c3/Amber/releases/tag/v3.0.3">v3.0.3</a>
    <ul>
      <li>Better pin entry screen</li>
      <li>Add a close application config in the ui</li>
      <li>Separate the service notification in a group</li>
      <li>Always return a hex key for the get_public_key method</li>
    </ul>
  </li>
  <li>Openvibe <a href="https://njump.me/nevent1qqsvxx27vff8xxqkurlter7wjest3ydw3tvdzlc5gvauulfp3selp2sppamhxue69uhkummnw3ezumt0d5pzqrlqkx95m0cwp2jqln28yzdj5jdngv0ug5a5vrhu73w2p0gkh44vheqdf2">v1.5.0</a>
    <ul>
      <li>Multiple profiles: add multiple accounts from the same network (e.g., Mastodon or Bluesky) and organize them into sets like personal or work.</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>01:13:47 Thanks to everyone who streamed sats, and shoutout to our top boosters:</li>
  <li>[🏆 TOP BOOSTER] @Ape Mithrandir (17,777 sats) “(Craig Raw)’s feature request for Broadcast Pool is much needed and we should get more eyes on it. [<a href="https://github.com/bitcoin/bitcoin/issues/30471">Feature request</a>]”</li>
  <li>@Ape Mithrandir (7,777 sats) “Epic rant at the end. Craig Raw always worth listening to.”</li>
  <li>@shadowysuperbadger (1,000 sats) “Cool episode. Thanks for putting it together.”
    <ul>
      <li>@user40113771 (1,000 sats) “🙏”</li>
      <li>@user40113771 (500 sats) “🔥🔥🙏🔥🔥”</li>
      <li>@btconboard (300 sats) “SO MUCH WINNING 🫡🫡”</li>
      <li>@Leurico8 (100 sats) “Fucking epic episode”</li>
      <li>@Juan “May need to find a new sleep therapy solution as I made it thru this whole episode, on a night-flight. great rip guys, learned a lot. happy thanksgiving ;)”</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2024/12/20/">334</a>
        <ul>
          <li>2024 Year-in-Review Special: The seventh annual Bitcoin Optech Year-in-Review special summarizes notable developments in Bitcoin during all of 2024</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2024/12/13/">333</a>
        <ul>
          <li>Vulnerability allowing theft from LN channels with miner assistance: David Harding <a href="https://delvingbitcoin.org/t/disclosure-irrevocable-fees-stealing-from-ln-using-revoked-commitment-transactions/1314">announced</a> to Delving Bitcoin a vulnerability he had responsibly disclosed earlier in the year.</li>
          <li>Deanonymization vulnerability affecting Wasabi and related software: a developer of GingerWallet <a href="https://github.com/GingerPrivacy/GingerWallet/discussions/116">disclosed</a> a method a coinjoin coordinator could use to prevent users from gaining any privacy during a coinjoin.</li>
          <li>Insights into channel depletion: René Pickhardt <a href="https://delvingbitcoin.org/t/channel-depletion-ln-topology-cycles-and-rational-behavior-of-nodes/1259/6">posted</a> to Delving Bitcoin and participated, along with Christian Decker, in an Optech Deep Dive about his research into the mathematical foundations of payment channel networks (namely LN).</li>
          <li>Poll of opinions about covenant proposals: /dev/fd0 <a href="https://gnusha.org/pi/bitcoindev/028c0197-5c45-4929-83a9-cfe7c87d17f4n@googlegroups.com/">posted</a> to the Bitcoin-Dev mailing list a link to a public poll of developer opinions about selected covenant proposals.</li>
          <li>Incentive-based pseudo-covenants: Jeremy Rubin <a href="https://gnusha.org/pi/bitcoindev/30440182-3d70-48c5-a01d-fad3c1e8048en@googlegroups.com/">posted</a> to the Bitcoin-Dev mailing list a link to a <a href="https://rubin.io/public/pdfs/unfedcovenants.pdf">paper</a> he authored about oracle-assisted covenants.</li>
          <li>Bitcoin Core developer meeting summaries: many Bitcoin Core developers met in person in October, and several notes from the meeting have now been <a href="https://btctranscripts.com/bitcoin-core-dev-tech/2024-10">published</a>.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li>pqcBitcoin: A Post-Quantum Cryptography (PQC)-enhanced fork of Bitcoin [<a href="https://github.com/QBlockQ/pqc-bitcoin">Github</a>]
    <ul>
      <li>pqcBitcoin is a fork of Bitcoin Core that integrates post-quantum cryptography (PQC) algorithms, such as Kyber, FrodoKEM, and NTRU, to address potential future threats from quantum computing. The developers have proposed this feature to the Bitcoin community for review and consensus.</li>
    </ul>
  </li>
  <li><a href="https://timechainindex.com/">Timechainindex</a> is shutting down on January 10, 2025 after one year of operation. [<a href="https://x.com/SaniExp/status/1871935742194147418">Announcement</a>]
    <ul>
      <li>Timechainindex is a platform that tracks Bitcoin holdings across exchanges, funds, ETFs, and companies, offering real-time data and insights into Bitcoin’s market distribution.</li>
    </ul>
  </li>
</ul>

<h4 id="lightning--l2-1">Lightning + L2+</h4>
<ul>
  <li><a href="https://diamondhands.technology/">Diamond Hands</a>, Japan-based Bitcoin community and organization, announces the closure of the DH Node, a Lightning node which has been operational since June 2021, citing challenges in maintaining large-scale routing operations [<a href="https://diamondhandsen.substack.com/p/closure-of-the-dh-node-routing-node">Announcement</a>]</li>
</ul>

<h4 id="nostr-1">Nostr</h4>
<ul>
  <li>Orange Pill App integrates nostr login [<a href="https://x.com/orangepillapp/status/1870235577557127614">Announcement</a>]</li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li><a href="https://seedhammer.com/">SeedHammer</a> announces SeedHammer II: A smaller, lighter and more secure machine than the original off-the-shelf product, with an integrated controller. [<a href="https://njump.me/nevent1qqsq5dlje82pascfefn7gmrfntk75c3htzrs6meeh69g9553qm337lqpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgqgdwaehxw309ahx7uewd3hkcq3qz072s0nvldeva7a6qek3kj358f0h5gm640kkllkk52h0qrjtnw8q6nflx2">Announcement</a>]</li>
  <li>Canadian broker Bull Bitcoin officially launches in Europe with a brand-new platform [<a href="https://www.bullbitcoin.com/blog/the-bull-returns-to-europe">Announcement</a>]</li>
  <li>Casa implements deepfake-resistant verification codes to enhance security for Premium, Enterprise, and Private clients [<a href="https://blog.casa.io/deepfake-resistant-verification-codes/">Blog post</a>]
    <ul>
      <li>The system uses shared cryptographic keys to generate matching codes, protecting against impersonation during live support interactions.</li>
    </ul>
  </li>
  <li>Unchained improves its Connections feature, allowing collaborate on key security without revealing vault details, maintaining control over shared information. [<a href="https://updates.unchained.com/en/unchained-connections-is-now-more-flexible-and-private-p1GwKupF">Announcement</a>]</li>
  <li>Strike now enables USDT deposits and withdrawals for customers in 17+ countries. [<a href="https://x.com/Strike/status/1869453111095660812">Announcement</a>]</li>
  <li>Strike adopts Travel Rule regulation [<a href="https://strike.me/faq/what-is-the-travel-rule-regulation/">Explainer</a>]
    <ul>
      <li>The Travel Rule, established by the Financial Action Task Force (FATF), requires financial institutions to collect and share information about the originators and beneficiaries of financial transfers. In the EU, this is implemented through the Transfer of Funds Regulation (TFR).</li>
      <li>For users in the EU or UK, sending or receiving Bitcoin via crypto-asset service providers will require sharing personal information such as name, address, and identification details.</li>
    </ul>
  </li>
  <li>Digital Currency Group divides Foundry’s mining business into two separate entities. Fortitude Mining will oversee Foundry’s former self-mining operations and physical infrastructure, while Foundry will retain its pool operations and other Bitcoin mining services [<a href="https://blockspace.media/insight/dcg-creates-new-company-fortitude-from-foundrys-self-mining-business/">Blockspace</a>]</li>
</ul>

<h4 id="encryption">Encryption</h4>
<ul>
  <li>01:16:45 NIST proposes to standardize wider variant of AES [<a href="https://csrc.nist.gov/News/2024/nist-proposes-to-standardize-wider-variant-of-aes">Proposal</a>]
    <ul>
      <li>NIST is considering a new version of Rijndael with 256-bit blocks, driven by the need for larger block sizes due to increased data processing demands.</li>
    </ul>
  </li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>01:17:40 OpenSats <a href="https://opensats.org/blog/9th-wave-of-nostr-grants">announces</a> its Ninth Wave of Nostr Grants, supporting five innovative projects that advance and strengthen the nostr ecosystem:
    <ul>
      <li>AlgoRelay</li>
      <li>Pokey</li>
      <li>Nostr Safebox</li>
      <li>Persian NIPs</li>
      <li>LumiLumi</li>
    </ul>
  </li>
  <li>01:17:47 Spiral renews its grant to BTCPayServer [<a href="https://x.com/spiralbtc/status/1869816695273205844">Announcement</a>]</li>
  <li>01:17:49 The Human Rights Foundation donates 7 bitcoin to fund Bitcoin development and projects: [<a href="https://bitcoinmagazine.com/business/human-rights-foundation-donates-700000000-satoshis-to-fund-bitcoin-development-and-projects">Bitcoin Magazine</a>]
    <ul>
      <li>Stratum V2 Reference Implementation (SRI), Public Pool, Naiyoma, Daniela Brozzoni, Michael Haase, No Bullshit Bitcoin, Tando, YakiHonne, SeedSigner Multi-language Support, Vexl, Tomatech, Krux, Iris, African UX Bitcoin Bootcamp, Bitcoin History, Cashu-ts, Unify, The Financial Freedom Policy Coalition, Jon Atack and Brink.</li>
    </ul>
  </li>
  <li>01:17:53 Btrust <a href="https://blog.btrust.tech/announcing-the-q4-2024-btrust-grant-recipients/">announces</a> its Q4 2024 Btrust grant recipients: Abdullahi Yunus Ahmed, Enigbe Ochekliye, and Tobechi Chukwuleta</li>
  <li>Chaincode Labs awards its inaugural Bitcoin Scholarship to 17-year-old Ishaana Misra, the youngest Bitcoin Core contributor. The scholarship covers one year of academic expenses and is renewable for her undergraduate education. [<a href="https://bitcoinmagazine.com/press-releases/youngest-ever-bitcoin-core-contributor-gets-bitcoin-scholarship">Bitcoin Magazine</a>]</li>
  <li>Relai secures $12 million in a Series A funding round led by Ego Death Capital, bringing its valuation to $72 million. [<a href="https://www.theblock.co/post/330146/bitcoin-investment-app-relai-funding-valuation">The Block</a>]</li>
  <li>Lava raises $10 million in a Series A funding round led by Khosla Ventures and Founders Fund. The Bitcoin lending platform plans to expand its offerings, including Bitcoin purchasing and payment services. [<a href="https://fortune.com/2024/12/09/bitcoin-lending-lava-khosla-keith-rabois-founders-fund-venture/">Forbes</a>]</li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li>01:18:12 GreenpeaceUSA’s ‘Change the Code’ campaign, aiming to modify Bitcoin’s energy-intensive proof-of-work system, likely shut down [<a href="https://www.batcoinz.com/p/anti-bitcoinchange-the-code-campaign">Batcoinz’ blog post</a>]
    <ul>
      <li>The campaign has been inactive since January 2024 and its former campaign director has since departed GreenpeaceUSA to join another organization.</li>
    </ul>
  </li>
  <li>Cango Inc., a Chinese automotive services firm listed on the NYSE, purchases 32 EH/s of Antminer ASICs from Bitmain for $256 million, securing approximately 4% of Bitcoin’s network hashrate. [<a href="https://blockspace.media/insight/chinese-car-company-cango-emerges-as-third-largest-public-miner/">Blockspace</a>]
    <ul>
      <li>An additional 18 EH/s acquisition is under contract with Golden TechGen Limited, owned by former Bitmain CFO Max Hua, elevating Cango’s total hashrate to 50 EH/s, comparable to leading miners like Marathon Digital Holdings.</li>
    </ul>
  </li>
  <li>Foundry USA refunds overpaid Bitcoin transaction fee [<a href="https://x.com/FoundryServices/status/1872629580487426221">Twitter post</a>]
    <ul>
      <li>Foundry USA Pool mined block 875475 on December 19, which included a transaction with an 8.18 BTC overpaid fee, which was 91,127 times higher than necessary.</li>
    </ul>
  </li>
  <li>MicroBT introduces WhatsMiner M6XS++ series with a hashrate of 218 TH/s and 15.5 J/TH efficiency, including air-cooled, hydro-cooled, and immersion-cooled models [<a href="https://theminermag.com/news/2024-12-09/bitcoin-whatsminer-15-efficiency/">The Miner Mag</a>]</li>
  <li>Russia enacts six-year bitcoin mining ban to both individual and pool mining activities, across multiple regions [<a href="https://www.coindesk.com/policy/2024/12/24/russia-imposes-6-year-ban-on-crypto-mining-in-10-regions-citing-energy-use-tass">CoinDesk</a>]
    <ul>
      <li>Partial restrictions will also affect three Siberian regions from November to March each year, aligning with high energy demands.</li>
    </ul>
  </li>
  <li><a href="https://e4pool.com/">e4pool</a>, an open source mining pool, is closing due to new mining regulations in Russia. [<a href="https://x.com/e4pool_com/status/1868264596743827827">Announcement</a>]
    <ul>
      <li>Reasons cited are that mining pools now must register in a special list of mining operators, and provide user data to the tax office.</li>
    </ul>
  </li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>Byte Federal, a U.S.-based Bitcoin ATM operator, reports a data breach compromising personal information of approximately 58,000 customers [<a href="https://techcrunch.com/2024/12/12/bitcoin-atm-giant-byte-federal-says-58000-users-personal-data-compromised-in-breach/">TechCrunch</a>]
    <ul>
      <li>The breach, discovered on November 18, resulted from a vulnerability in third-party software, specifically a bug in the GitLab developer platform.</li>
      <li>Exposed data includes names, birthdates, addresses, phone numbers, email addresses, government-issued IDs, social security numbers, transaction activity, and user photographs. [<a href="https://www.bytefederal.com/files/Consumer%20Breach%20Notification%20Letter.pdf">Notice of data breach</a>]</li>
    </ul>
  </li>
  <li>Privacy and security focused open-source mobile operating system, DivestOS, announces the end of its mobile updates in December after 10 years. [<a href="https://divestos.org/pages/news#end">Announcement</a>]</li>
  <li>NSO Group found liable for spyware attacks on WhatsApp users [<a href="https://www.infosecurity-magazine.com/news/spyware-maker-nso-group-whatsapp/">Infosecurity Magazine</a>]
    <ul>
      <li>A U.S. court ruled NSO Group liable for using zero-day exploits to deploy its Pegasus spyware on at least 1400 WhatsApp devices. The attack targeted journalists, activists, and government officials, violating both state and federal laws.</li>
    </ul>
  </li>
  <li>NoviSpy: Serbian authorities deploy NoviSpy spyware and Cellebrite forensic tools to surveil journalists and activists [<a href="https://securitylab.amnesty.org/latest/2024/12/serbia-a-digital-prison-spyware-and-cellebrite-used-on-journalists-and-activists/">Security Lab’s report</a>]
    <ul>
      <li>NoviSpy captures personal data and can remotely activate microphones or cameras on targeted devices</li>
      <li>Cellebrite is used to unlock phones, facilitating the installation of NoviSpy during police interviews</li>
    </ul>
  </li>
  <li>01:18:29 Samourai Wallet pretrial hearing postponed to March 12, 2025, due to additional discovery batches, with the trial now set for November 3, 2025. [<a href="https://www.therage.co/samourai-wallet-trial-set-for-november-3-2025/">The Rage</a>]
    <ul>
      <li>The U.S. government is reviewing data from 45 devices seized from developers, with over half of the total 17 TB of data already shared.</li>
    </ul>
  </li>
  <li>01:19:59 Russian government directs ISPs to identify users accessing blocked content via VPNs [<a href="https://cyberinsider.com/russian-government-orders-isps-to-hand-over-names-of-vpn-users/">CyberInsider</a>]
    <ul>
      <li>ISPs must implement Technical Means of Countering Threats (TSPU) to monitor user traffic and report in real-time.</li>
    </ul>
  </li>
</ul>

<h4 id="security">Security</h4>
<ul>
  <li>Cryptocurrency thefts rise in 2024, according to a <a href="https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2025/">Chainalysis’ report</a>
    <ul>
      <li>In 2024, digital currency platform theft reached $2.2 billion, a ~21% increase from 2023. These attacks increased in both frequency and size, signaling a growing threat.</li>
      <li>A shift in targets was observed in 2024, with centralized services becoming more vulnerable, particularly to private key exploits.</li>
    </ul>
  </li>
  <li>FBI, DC3, and Japan’s NPA alert the public to TraderTraitor, a North Korean cyber group responsible for a $308M cryptocurrency theft in May 2024. The group targeted Japan-based Bitcoin.DMM.com using sophisticated social engineering tactics. [<a href="https://www.fbi.gov/news/press-releases/fbi-dc3-and-npa-identification-of-north-korean-cyber-actors-tracked-as-tradertraitor-responsible-for-theft-of-308-million-from-bitcoindmmcom">FBI’s Press release</a>]</li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #31096: Package validation: accept packages of size 1. This change relaxes the RPC checks as enables the AcceptPackage flow to accept packages of a single transaction. [<a href="https://github.com/bitcoin/bitcoin/pull/31096">Merged</a>]</li>
  <li>Bitcoin Core #31112: Improve parallel script validation error debug logging [<a href="https://github.com/bitcoin/bitcoin/pull/31112">Merged</a>]</li>
  <li>Bitcoin Core #31175: rpc: Remove submitblock pre-checks [<a href="https://github.com/bitcoin/bitcoin/pull/31175">Merged</a>]</li>
  <li>BIPS #1535: BIP 348: OP_CHECKSIGFROMSTACK [<a href="https://github.com/bitcoin/bips/pull/1535">Merged</a>]</li>
  <li>BTCPayServer #5743: Multisig/watchonly wallet transaction creation flow proof of concept [<a href="https://github.com/btcpayserver/btcpayserver/pull/5743">Merged</a>]</li>
  <li>LDK #3446: Support Trampoline flag in BOLT12 invoices [<a href="https://github.com/lightningdevkit/rust-lightning/pull/3446">Merged</a>]</li>
  <li>BOLTs #1180: Include BIP 353 name info in <code class="language-plaintext highlighter-rouge">invoice_requests</code>. Update BOLT12 to allow optional inclusion of BIP353 human-readable Bitcoin payment instructions in invoice requests. [<a href="https://github.com/lightning/bolts/pull/1180">Merged</a>]</li>
  <li>NUT-20 – Signature on Mint Quote: an optional specification that locks a mint quote to a user-defined public key and requires a valid signature for minting. [<a href="https://x.com/CashuBTC/status/1872019631646601300">Merged</a>]</li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>01:20:14 Craig Wright is handed a one-year suspended sentence in the UK for contempt of court after violating an earlier ruling. The judge confirmed Wright continued his legal action against Bitcoin developers, despite a ban on such claims. [<a href="https://www.reuters.com/markets/currencies/self-proclaimed-bitcoin-inventor-contempt-court-over-12-trillion-uk-lawsuit-2024-12-19/">Reuters</a>]
    <ul>
      <li>The court also ordered Wright to drop his $1.15 trillion lawsuit against Square and Bitcoin developers.</li>
    </ul>
  </li>
  <li>El Salvador agrees to scale back Bitcoin policies to secure $1.4 billion IMF loan [<a href="https://www.bloomberg.com/news/articles/2024-12-18/imf-reaches-agreement-with-el-salvador-for-1-4-billion-loan">Bloomberg</a>] [<a href="https://www.imf.org/en/News/Articles/2024/12/18/pr-24485-el-salvador-imf-reaches-staff-level-agreement-on-an-eff-arrangement">IMF Press release</a>]
    <ul>
      <li>The government will make Bitcoin acceptance voluntary for the private sector and limit public sector involvement in Bitcoin-related activities.</li>
      <li>The Chivo wallet will be gradually phased out, and taxes will be payable exclusively in U.S. dollars.</li>
    </ul>
  </li>
  <li>Russian companies embrace bitcoin in international payments to bypass sanctions, following legislative changes aimed at countering Western sanctions. [<a href="https://www.reuters.com/markets/currencies/russia-is-using-bitcoin-foreign-trade-finance-minister-says-2024-12-25/">Reuters</a>]
    <ul>
      <li>Finance Minister Anton Siluanov confirmed that cryptocurrencies, including bitcoin, are being used in foreign trade and are expected to expand in 2025.</li>
    </ul>
  </li>
  <li>EU-regulated exchange updates on digital currencies deposits and withdrawals exceeding €1,000 in value. [<a href="https://stacker.news/items/827547">Stacker News post</a>]
    <ul>
      <li>Starting December 30, 2024, deposits and withdrawals in select European countries will require additional verification, users must now verify their private wallets.</li>
    </ul>
  </li>
  <li>The European Securities and Markets Authority (ESMA) releases the final set of regulatory technical standards and guidelines, facilitating the full implementation of the Markets in Crypto Assets Regulation (MiCA). [<a href="https://www.esma.europa.eu/press-news/esma-news/esma-releases-last-policy-documents-get-ready-mica">Press release</a>]
    <ul>
      <li>The regulation requires crypto service providers to obtain licenses, adhere to organizational standards, and implement robust governance measures to ensure consumer protection and market integrity.</li>
    </ul>
  </li>
  <li>Financial Accounting Standards Board (FASB) approves new standard requiring Bitcoin to be valued at fair value for fiscal years starting after December 15, 2024. [<a href="https://archive.ph/0q2VG">FASB Media Advisory</a>]
    <ul>
      <li>This change aims to simplify accounting processes, reduce complexity, and provide more relevant information to investors about digital asset holdings, including Bitcoin. It mandates disclosures about significant holdings and changes during reporting periods.</li>
    </ul>
  </li>
  <li>The IRS finalizes two regulations affecting digital asset users and developers: a KYC dealer-broker rule for DeFi front-ends and IRS Safe Harbor Transitional Relief. [<a href="https://www.therage.co/the-biden-irss-two-pronged-2/">The Rage</a>]
    <ul>
      <li>The KYC dealer-broker rule, effective by 2027, may require noncustodial services to implement KYC/AML measures.</li>
      <li><a href="https://theblockchainassociation.org/industry-groups-sue-over-finalized-irs-broker-rulemaking/">Update</a>: Industry groups, including the Blockchain Association and DeFi Education Fund, are suing the IRS over new KYC requirements for “DeFi front-end services”.</li>
    </ul>
  </li>
  <li>Early bitcoin investor receives a two-year prison sentence for underreporting capital gains on $3.7 million in bitcoin sales [<a href="https://bitcoinmagazine.com/legal/early-bitcoin-investor-sentenced-to-prison-for-tax-evasion-on-3-7-million-btc-sale">Bitcoin Magazine</a>]
    <ul>
      <li>He reportedly misled his accountant about purchase prices and concealed additional profits using mixers and cash exchanges. This case is noted as the first criminal tax evasion prosecution centered exclusively on cryptocurrency.</li>
    </ul>
  </li>
  <li>The Bank of Italy identifies platforms facilitating Bitcoin transactions without user identification as “crime-as-a-service,” citing the website kycnot.me, which lists P2P platforms operating without KYC checks. [<a href="https://atlas21.com/bank-of-italy-p2p-services-are-criminal/">Atlas21</a>]
    <ul>
      <li>The institution highlights that money launderers exploit pseudonymity in cryptocurrency transactions to conceal illicit funds, using methods like mixers, tumblers, chain-hopping, and anonymous wallets to evade detection.</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://denver.space/heatpunk_summit">Undermine Heatpunk Summit</a>: The first Bitcoin Heat Reuse conference
    <ul>
      <li>February 21-22, 2025 in Denver, United States</li>
    </ul>
  </li>
  <li><a href="https://btcpp.dev/conf/floripa">bitcoin++ Florianopolis</a>: bitcoin++ is hacking at the beach
    <ul>
      <li>February 19-22, 2025 in Florianopolis, Brasil</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>Choosing a hash function for 2030 and beyond: SHA2 vs SHA3 vs BLAKE3, by Sylvain Kerkour [<a href="https://kerkour.com/fast-secure-hash-function-sha256-sha512-sha3-blake3">Blog post</a>]</li>
      <li>OpenSats’ 2024 Year in Review [<a href="https://opensats.org/blog/2024-year-in-review">Blog post</a>]</li>
      <li>Stone Ridge 2024 Investor Letter, by Ross Stevens [<a href="https://www.nydig.com/research/stone-ridge-2024-investor-letter">NYDIG</a>]</li>
      <li>The DOJ’s Dangerous New Legal Theory: Implications for Samourai Wallet and Bitcoin Self-Custody, by Bitcoin Policy Institute [<a href="https://www.btcpolicy.org/articles/the-dojs-dangerous-new-legal-theory-implications-for-samourai-wallet-and-bitcoin-self-custody">Policy brief</a>]</li>
      <li>Can Nostr fix app distribution? by @franzap [<a href="https://zapstore.dev/blog/nostr-app-distribution/">Blog post</a>]</li>
      <li>P2QRH/QuBit chain growth rate calculations: An evaluation of the number of P2QRH transactions that can fit in a block under various attestation discount scenarios. [<a href="https://x.com/cryptoquick/status/1866986505434264047">Analysis</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, ROB HAMILTON</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guest Rob Hamilton to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR089 - Lark, Security Tradeoffs Masterclass, Bitcoin Quantum Risks, WabiSabi Deanonymization, Core Txn Broadcast, Better Wallet Migration, Scaling Bitcoin, Bullish Sentiments + MORE ft. Craig &amp;amp; Rob</title><link href="https://bitcoin.review/podcast/episode-89/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR089 - Lark, Security Tradeoffs Masterclass, Bitcoin Quantum Risks, WabiSabi Deanonymization, Core Txn Broadcast, Better Wallet Migration, Scaling Bitcoin, Bullish Sentiments + MORE ft. Craig &amp;amp; Rob" /><published>2024-12-13T15:00:00+00:00</published><updated>2024-12-13T15:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-89</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-89/"><![CDATA[<p>I’m joined by guests <a href="https://twitter.com/craigraw">Craig Raw</a> and <a href="https://twitter.com/Rob1Ham">Rob Hamilton</a> to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="urgent-vulnerability-disclosures">Urgent Vulnerability Disclosures</h3>
<ul>
  <li>00:01:18 Full Disclosure: Transaction-Relay Throughput Overflow Attacks against Off-Chain Protocols [<a href="https://groups.google.com/g/bitcoindev/c/GuS36ldye7s/m/4zHfQGj9AQAJ">Antoine Riard’s post</a>]
    <ul>
      <li>A new transaction-relay jamming attack targets off-chain protocols, exploiting throughput limits in full-node algorithms.</li>
      <li>The “high-overflow” variant exploits the sender-side fee-rate sorting algorithm. The “low-overflow” variant targets receiver-side processing limits but remains untested.</li>
    </ul>
  </li>
  <li>00:01:53 Vulnerability in WabiSabi coinjoin protocol exposes users to deanonymization risks [<a href="https://www.therage.co/vulnerability-wabisabi-coinjoin/">The Rage</a>]
    <ul>
      <li>A flaw in the WabiSabi coinjoin protocol allows malicious coordinators to deanonymize users by correlating inputs and outputs.</li>
      <li>The issue stems from malicious coordinators assigning unique maximum amount parameters, enabling tagging attacks to cluster wallets.</li>
      <li>The vulnerability impacts Wasabi Wallet 2.2.1.0 and below, Ginger Wallet 2.0.13 and below, and BTCPay Server coinjoin plugin 1.0.101.0 and below. [<a href="https://github.com/GingerPrivacy/GingerWallet/discussions/116">GingerWallet’s Vulnerability Report</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:19:59 Rust Payjoin <a href="https://github.com/payjoin/rust-payjoin/releases/tag/payjoin-0.21.0">v0.21.0</a>
    <ul>
      <li>This release enables transaction cut-through by allowing the receiver to add an arbitrary number of inputs and outputs, and allowing mixed input script types in Payjoin V2.</li>
      <li>Allow receiver to contribute multiple inputs and outputs</li>
      <li>Make <code class="language-plaintext highlighter-rouge">InputPair</code> public to facilitate working with inputs in coin selection and input contributions</li>
      <li>Enable receiver fee contributions in <code class="language-plaintext highlighter-rouge">apply_fee</code>, which now requires a max_feerate parameter</li>
      <li>Allow mixed input scripts in Payjoin V2</li>
      <li>Implement client end-to-end encryption using HPKE using bitcoin-hpke</li>
    </ul>
  </li>
  <li>00:32:48 Lark: Command line application for the Lark USB Hardware Wallet library [<a href="https://github.com/sparrowwallet/larkapp">Github</a>]
    <ul>
      <li>“The Lark application is a command line app for interacting with USB hardware wallets in Bitcoin related functions. It uses the <a href="https://github.com/sparrowwallet/lark">Lark Java library</a>, which in turn is a port of the Python library <a href="https://github.com/bitcoin-core/HWI">HWI</a>.”</li>
      <li>“The Lark command line application is designed to be a drop-in replacement for HWI, with a subset of commands implemented.”</li>
      <li>Lark initial release <a href="https://github.com/sparrowwallet/larkapp/releases/tag/1.0.0">v1.0.0</a>
        <ul>
          <li>The following hardware wallets (for all models) are supported: Coldcard, Trezor, Ledger (current and legacy Bitcoin apps), BitBox02, Jade, and Keepkey.</li>
          <li>Across the following platforms: Linux x86_64 and aarch64, macOS x86_64 and aarch64, and Windows x86_64.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:12:40 Bitcoin Keeper
    <ul>
      <li>Mobile <a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v1.3.0">v1.3.0</a>
        <ul>
          <li>Subscriptions: More features, reduced prices for all tiers.</li>
          <li>Inheritance Planning: Inheritance Key now secured on the Bitcoin network using Miniscript. Convert any key into an Inheritance Key.</li>
          <li>Attorney letters now include the Recovery Key and all added</li>
          <li>Key Sharing: Share and sign keys remotely with any</li>
          <li>Transactions: New history screen and support for sending unconfirmed</li>
        </ul>
      </li>
      <li>Desktop <a href="https://github.com/bithyve/keeper-desktop/releases/tag/keeper-desktop-v0.1.4">v0.1.4</a>
        <ul>
          <li>Allow getting specific BIP44 accounts from a device</li>
          <li>Add Taproot Key when getting device xPubs</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:13:23 Blue Wallet <a href="https://github.com/BlueWallet/BlueWallet/releases/tag/v7.0.5">v7.0.5</a>
    <ul>
      <li>Add Offline import</li>
      <li>Add CoinControl sorting</li>
      <li>Add AMD Fiat</li>
      <li>Add RSD Fiat</li>
      <li>Add Market Price intent</li>
      <li>Add Reset currency alert</li>
      <li>Add Notification shortcuts</li>
      <li>Add Remove all recipients</li>
      <li>Add Clear clipboard on import</li>
      <li>Add Dark/Tinted iOS icons</li>
    </ul>
  </li>
  <li>01:13:33 Floresta <a href="https://github.com/vinteumorg/Floresta/releases/tag/0.7.0">v0.7.0</a>
    <ul>
      <li>Async-std To Tokio: ends a major milestone of replacing <code class="language-plaintext highlighter-rouge">async-std</code> with <code class="language-plaintext highlighter-rouge">tokio</code> as the async runtime</li>
      <li>florestad: expose assumeutreexo in lib mode</li>
      <li>Feature: daemonize: On NIX environments, run <code class="language-plaintext highlighter-rouge">florestad</code> in the background as a daemon</li>
      <li>Wire: handle block filters out-of-order</li>
      <li>ssl init: Adds support for SSL to our Electrum Server</li>
      <li>Adds fuzz to <code class="language-plaintext highlighter-rouge">floresta</code> using <code class="language-plaintext highlighter-rouge">cargo fuzz</code> with a few targets</li>
      <li>Improve connection</li>
      <li>Update getutxo: Now the <code class="language-plaintext highlighter-rouge">gettxout</code> rpc only returns UTXOS that are cached by the wallet</li>
      <li>Improve CI caching</li>
      <li>Add criterion benches and restructure testdata</li>
      <li>Add test-features recipe to justfile</li>
      <li>Add floresta-cli to Docker image</li>
    </ul>
  </li>
  <li>01:13:44 Labelbase <a href="https://github.com/Labelbase/Labelbase/releases/tag/2.2.3">v2.2.3</a>
    <ul>
      <li>UI: New, card based, label list view for small screens (mobile devices)</li>
      <li>UI/UX: New, improved status and error messages</li>
      <li>Rework Electrum background operations (UTXO lookup)</li>
      <li>Add “Address Derivation” support for Testnet (tpub, upub, vpub)</li>
      <li>Add Samourai Backup Import, allows you to import your samourai.txt</li>
      <li>Add Donation page</li>
    </ul>
  </li>
  <li>01:14:17 BDK <a href="https://github.com/bitcoindevkit/bdk/releases/tag/v1.0.0-beta.6">v1.0.0-beta.6</a>
    <ul>
      <li>Final “beta” test release before a final bdk_wallet 1.0.0 version.</li>
      <li>Changes include small bug fixes and API improvements plus an improved algorithm for determining which transactions are in the current best “canonical” block chain.</li>
      <li>The new canonicalization algorithm processes the transaction graph in linear time versus the prior quadratic time algorithm.</li>
    </ul>
  </li>
  <li>01:14:26 FullyNoded <a href="https://github.com/Fonta1n3/FullyNoded-Server/releases/tag/0.0.0.6-alpha">v0.0.0.6</a>
    <ul>
      <li>Quick Connect QR code url’s no longer contain real RPC credentials</li>
      <li>Tweaks to JM config default fee settings to help increase chance of successful coinjoins (users can always add their own)</li>
      <li>Obwatcher button added to Join Market so users can easily launch the order book to help trouble shoot failed coinjoins</li>
      <li>Add auto refresh to Core Lightning</li>
    </ul>
  </li>
  <li>01:14:43 BTCPay Server <a href="https://github.com/btcpayserver/btcpayserver/releases/tag/v2.0.4">v2.0.4</a>
    <ul>
      <li>Add QR Code with link to invitation email</li>
      <li>Add rate providers for Norwegian exchanges</li>
      <li>Greenfield: Improve store users API</li>
    </ul>
  </li>
  <li>01:14:52 Zaprite
    <ul>
      <li><a href="https://help.zaprite.com/en/articles/10258495-zaprite-release-notes-2024-12-09">v2024.12.09</a>
        <ul>
          <li>Add new View Contact page that displays Contact information and recent Invoices and Transactions</li>
          <li>Add new View Recurring Invoice page that displays the Recurring Invoice Schedule summary and a list of Recent Invoices</li>
          <li>Add new User Account Profile page, enabling Users to add avatars and display names</li>
          <li>Add Coinos LNURL integration</li>
          <li>Add LifPay LNURL integration</li>
        </ul>
      </li>
      <li><a href="https://help.zaprite.com/en/articles/10200019-zaprite-release-notes-2024-11-25">v2024.11.25</a>
        <ul>
          <li>Add new View Invoice page which shows recent transactions and activity history</li>
          <li>Add a ‘Discover’ carousel to the Home dashboard</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:14:54 Peach <a href="https://github.com/Peach2Peach/peach-app/releases/tag/v0.5.2">v0.5.2</a>
    <ul>
      <li>Dark Mode Build</li>
      <li>Match paymentdata fix</li>
      <li>Always share device id hash when using contact form</li>
    </ul>
  </li>
  <li>01:14:55 Boltz boltz-web-app
    <ul>
      <li><a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.5.4">v1.5.4</a>
        <ul>
          <li>Switch to Blockstream Liquid explorer</li>
        </ul>
      </li>
      <li><a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.5.3">v1.5.3</a>
        <ul>
          <li>Improve HWW derivation path selection</li>
        </ul>
      </li>
      <li><a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.5.2">v1.5.2</a>
        <ul>
          <li>Submarine Swap preimage copy button</li>
          <li>Add Chatwoot</li>
          <li>Show when no browser wallet found</li>
          <li>0-amount chain swaps</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>01:14:56 ESP-Miner <a href="https://github.com/skot/ESP-Miner/releases/tag/v2.4.1">v2.4.1</a>
    <ul>
      <li>Add support for eusolo stats for ckpool</li>
      <li>Add Noderunners pool to quick links</li>
      <li>Add 205 config and remove self test flag</li>
      <li>api: add stratum difficulty</li>
      <li>Don’t abandon the first mining.notify</li>
      <li>Swarm styles, refresh on load, more combined stats, more info in table</li>
    </ul>
  </li>
  <li>01:14:58 Clams remote <a href="https://x.com/clamstech/status/1857695270793793973">Update</a>
    <ul>
      <li>Add support for BIP-353 usernames</li>
    </ul>
  </li>
  <li>01:14:59 Mempal <a href="https://github.com/aeonBTC/Mempal/releases/tag/v1.3.0">v1.3.0</a>
    <ul>
      <li>Elapsed time since latest block displayed on dashboard and widgets</li>
      <li>Number of blocks to clear mempool displayed on dashboard and widgets</li>
      <li>Tor connection indicator now displays on dashboard when connected over Tor</li>
      <li>Set specific block height alerts for notifications</li>
      <li>Widget update frequency option in settings</li>
      <li>Add tap to refresh widget feature and double tap to open Mempal app</li>
    </ul>
  </li>
  <li>01:15:07 Kyoto <a href="https://github.com/rustaceanrob/kyoto/releases/tag/v0.6.0">v0.6.0</a>
    <ul>
      <li>Pass FeeFilter to client</li>
      <li>Add Signet and Bitcoin checkpoints</li>
    </ul>
  </li>
  <li>01:15:20 LifPay
    <ul>
      <li>Introduces Reusable Payment QR Codes with fixed amounts, allowing users to create a QR code with a fixed amount that can be scanned and reused multiple times. [<a href="https://stacker.news/items/783298">Stacker News</a>]</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>01:16:09 Specter Shield Lite: Low Cost Secure Element Backed Security for DIY Bitcoin Hardware Wallet [<a href="https://x.com/YTCryptoGuide/status/1862139967792660560">Announcement</a>] [<a href="https://github.com/3rdIteration/specter-diy/">Github fork</a>]</li>
  <li>01:16:17 <a href="https://en.bitcoin.it/wiki/Covenants_support">Covenants support</a>: A dedicated covenants support page on the Bitcoin Wiki, listing developers’ current support positions.</li>
  <li>01:18:08 <a href="https://kibo.money/">Kibo</a>: An open source Bitcoin Core data extractor and visualizer [<a href="https://github.com/kibo-money/kibo">Github</a>]</li>
  <li>01:18:20 <a href="https://savingsatoshi.com/">Saving Satoshi</a>: The world’s first interactive, practice-focused game to teach you bitcoin development.
    <ul>
      <li>“Saving Satoshi is a light-hearted, first point of contact for developers of all ages that want to learn how bitcoin works.” [<a href="https://github.com/saving-satoshi/saving-satoshi">Github</a>]</li>
    </ul>
  </li>
  <li>01:18:28 Fully Noded Server: A one click Bitcoin Core, Core Lightning and Join Market server to connect to Fully Noded apps. [<a href="https://github.com/Fonta1n3/FullyNoded-Server">Github</a>]</li>
  <li>01:18:30 <a href="https://www.timestampfinancial.com/">Timestamp</a>: A platform that enables both accredited and non-accredited investors to invest in Bitcoin and open-source companies with low minimum investments.</li>
  <li>01:18:49 <a href="https://satosh.ee/">Satoshee</a>: Winners’ club. Carefully curated gift cards, discounts, loyalty program.
    <ul>
      <li>Satoshee is platform offering gift cards, exclusive discounts, and Loyalty Programs, which support the creation and distribution of open-source media.</li>
    </ul>
  </li>
  <li>01:19:06 <a href="https://github.com/Schnitzel/hass-miner">hass-miner</a>: Control and monitor your Bitcoin Miners from Home Assistant.
    <ul>
      <li>Great for Heat Reusage, Solar Mining or any usecase where you don’t need your miners running 24/7 or with a specific wattage.</li>
      <li>Works great in coordination with ESPHome for Sensors (like temperature) and Grafana for Dashboards.</li>
      <li>Support for: Antminers, Whatsminers, Avalonminers, Innosilicons, Goldshells, Auradine, BitAxe, IceRiver, Hammer, Braiins Firmware, Vnish Firmware, ePIC Firmware, HiveOS Firmware, LuxOS Firmware, Mara Firmware</li>
    </ul>
  </li>
  <li>01:19:12 <a href="https://entropy.page/pow.html">Entropy</a>: A collection of open-source bitcoin workshops, projects, hackathons, and software, by D++.</li>
  <li>01:19:20 PlebDevs launches [<a href="https://plebdevs.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">PlebDev Starter Course</a>], a free starter course aimed at complete beginners to learn basic coding or webdev skills, covering code editors, Git/Github, HTML, CSS, and JavaScript.</li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>01:19:29 Droidbot targets banking and crypto apps across Europe [<a href="https://www.cleafy.com/cleafy-labs/droidbot-insights-from-a-new-turkish-maas-fraud-operation">Cleafy’s disclosure</a>]
    <ul>
      <li>The malware impersonates apps like Google Chrome to steal credentials for 77 banking and cryptocurrency platforms across Europe, and uses Accessibility Services to log keystrokes, overlay fake login pages, and intercept SMS OTPs.</li>
      <li>DroidBot employs MQTT, typically used in IoT, for stealthy data exfiltration. It encrypts and compresses data before transmission, complicating detection.</li>
    </ul>
  </li>
  <li>01:19:36 DaMAgeCard: SD Express Card vulnerability exposes memory access risks in laptops and consoles [<a href="https://cyberinsider.com/sd-express-card-flaw-exposes-laptops-and-consoles-to-memory-attacks/">CyberInsider</a>]
    <ul>
      <li>Positive Technologies researchers identified a vulnerability in SD Express cards, leveraging the Direct Memory Access (DMA) feature to bypass system protections. Modified cards can exploit gaps in securing the transition between SDIO and PCIe modes.</li>
    </ul>
  </li>
  <li>01:19:47 Web3: Malicious versions of Solana’s web3.js npm library expose private keys [<a href="https://thehackernews.com/2024/12/researchers-uncover-backdoor-in-solanas.html?m=1">The Hacker News</a>]
    <ul>
      <li>Researchers uncovered two malicious versions (1.95.6 and 1.95.7) of the popular @solana/web3.js npm library, which harvested private keys to drain crypto wallets.</li>
      <li>The attack is believed to have stemmed from a phishing incident targeting the npm package maintainer, allowing the hacker to publish compromised versions.</li>
    </ul>
  </li>
  <li>Encrypted communications service ‘Matrix’, dismantled by international police operation [<a href="https://www.europol.europa.eu/media-press/newsroom/news/international-operation-takes-down-another-encrypted-messaging-service-used-criminals">Europol</a>]
    <ul>
      <li>A large-scale investigation, lead by French and Dutch authorities involved in a joint investigation, lead to the interception of 2.3 million messages in 33 languages over a monitoring period of three months, dismantling more than 40 servers.</li>
    </ul>
  </li>
  <li>Uganda confirms central bank hack, downplays extent of the loss of 62 billion shillings ($16.8 million) [<a href="https://www.reuters.com/world/africa/hackers-steal-17-mln-uganda-central-bank-state-paper-2024-11-28/">Reuters</a>]
    <ul>
      <li>The hacking group, ‘Waste’, based in Southeast Asia, transferred funds abroad, including to Japan. The central bank has recovered over half of the stolen amount.</li>
    </ul>
  </li>
</ul>

<h3 id="audience-questions">Audience Questions</h3>
<ul>
  <li>01:24:05 How do NVK and the guests feel about <a href="https://x.com/intengineering/status/1866491976134099210">Google’s Willow quantum chip</a>? Is Bitcoin at risk?</li>
  <li>01:30:01 Can NVK and the guests comment on <a href="https://x.com/jamesob/status/1866625791829709020">James OB’s recent Tweet</a>? “Very simple scenario for you: Tomorrow gov announces that by EOW, all exchanges must move held bitcoins over to a one-way hardfork that adds “monetary policy tools” and OFAC compliance Can bitcoin support an exit for everyone who wants out? This is why scaling matters.” What are your general thoughts, and also how would a “one-way hardfork” work?</li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>The Tor Project replaces its legacy BridgeDB system with Rdsys, a modular and adaptable bridge distribution system. [<a href="https://blog.torproject.org/making-connections-from-bridgedb-to-rdsys/">Blog post</a>]
    <ul>
      <li>Rdsys supports flexible distribution channels, such as Telegram, enhancing user accessibility and bypassing restrictions without relying on outdated captchas.</li>
      <li>Tor Browser <a href="https://blog.torproject.org/new-release-tor-browser-1403/">v14.03</a>
        <ul>
          <li>This version includes important <a href="https://www.mozilla.org/en-US/security/advisories/">security updates</a> to Firefox.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>NomadNet <a href="https://github.com/markqvist/NomadNet/releases/tag/0.5.5">v0.5.5</a>
    <ul>
      <li>Add Checkbox and Radio Group fields to Micron</li>
      <li>Fix invalid LXMF link handling in browser</li>
    </ul>
  </li>
  <li>Sideband
    <ul>
      <li><a href="https://github.com/markqvist/Sideband/releases/tag/1.2.0">v1.2.0</a>
        <ul>
          <li>Sideband now includes Liam Cottle’s RNode flasher in the internal repository</li>
          <li>Updated message color scheme for better readability and theme consistency</li>
          <li>Updated theme and user interface defaults for new installations</li>
          <li>Added signal stats to the announce stream (if available from interface)</li>
          <li>Added ability to render rich markup in messages</li>
          <li>Added per-object live-tracking mode for telemetry-enabled peers</li>
          <li>Added ability to add any number of interfaces via the Advanced RNS Configuration option</li>
          <li>Added Utilities section</li>
          <li>Added support for the repository server on desktop operating systems</li>
        </ul>
      </li>
      <li><a href="https://github.com/markqvist/Sideband/releases/tag/1.1.4">v1.1.4</a>
        <ul>
          <li>Add ability to add message attachments from sharing intent on Android</li>
          <li>Add ability to add message attachments with drag-and-drop on desktop</li>
          <li>Add user interface scaling option</li>
          <li>Update RNS and LXMF to latest versions</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Tails <a href="https://tails.net/news/version_6.10/">v6.10</a>
    <ul>
      <li>Fix support for Trezor hardware wallets in Electrum</li>
      <li>Disable saving telemetry data in Thunderbird</li>
      <li>Update Tor Browser to 14.0.3. and Thunderbird from 115.16.0 to 128.4.3</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li>PeerSwap: enables Lightning Network nodes to balance their channels by facilitating atomic swaps with direct peers [<a href="https://github.com/ElementsProject/peerswap">Github</a>]
    <ul>
      <li>PeerSwap enhances decentralization of the Lightning Network by enabling all nodes to be their own swap provider. No centralized coordinator, no 3rd party rent collector, and lowest cost channel balancing means small nodes can better compete with large nodes.</li>
    </ul>
  </li>
  <li><a href="https://t.me/voltztip_bot">Voltz Tip Bot</a>: An easy-to-use Lightning Network Telegram Bot designed to facilitate tipping sats right within your Telegram groups [<a href="https://stacker.news/items/800859">Announcement</a>]</li>
  <li><a href="https://liquid.horse/">Liquid Horse</a>: Liquid Sidechain Statistics. Provides statistics and analytics for the Liquid Network.
    <ul>
      <li>It tracks data such as block production, sidechain transactions, functionary uptime, and federation wallet balances. It also highlights the operational status of block signers and other technical metrics related to network performance</li>
    </ul>
  </li>
  <li><a href="https://liquidnetwork.wiki/">awesome-liquid-network</a>: A curated list of Liquid Network resources, libraries, tools and applications</li>
  <li><a href="https://macadamia.cash/">Macadamia</a>: A native iOS client for cashu [<a href="https://github.com/zeugmaster/macadamia">Github</a>]
    <ul>
      <li>Macadamia supports standard Cashu operations such as: Minting of tokens, sending and receiving, melting tokens, restoring your wallet balance using a 12 word mnemonic seed phrase backup.
        <ul>
          <li><a href="https://github.com/zeugmaster/macadamia/releases/tag/v0.2.0">v0.2.0</a>: This version is a complete rewrite, segregating cashu logic to its own library and implementing a database model in SwiftData.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Strata Bridge: Alpen Labs is developing a bitcoin bridge to its Strata platform, enabling 1 BTC on Strata to match 1 BTC on bitcoin with minimal trust assumptions. [<a href="https://www.alpenlabs.io/blog/introducing-the-strata-bridge">Announcement</a>]
    <ul>
      <li>The Strata bridge is based on the BitVM2 paper by Robin Linus, incorporating optimizations and advanced research to improve efficiency and robustness.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Core Lightning <a href="https://github.com/ElementsProject/lightning/releases/tag/v24.11">v24.11</a> - The lightning-dev Mailing List
    <ul>
      <li>Highlights for Users:
        <ul>
          <li><code class="language-plaintext highlighter-rouge">xpay</code> is a new, experimental plugin for payments. It’s rewritten from the ground up, on top of another plugin called <code class="language-plaintext highlighter-rouge">askrene</code>, which provides advanced routing advice for payments</li>
          <li>Paying and receiving offers (bolt12 send and receive) are enabled by default</li>
          <li><code class="language-plaintext highlighter-rouge">hsmtool</code> <code class="language-plaintext highlighter-rouge">generatehsm</code> can now accept all the parameters on the command line</li>
        </ul>
      </li>
      <li>Highlights for Developers:
        <ul>
          <li><code class="language-plaintext highlighter-rouge">cln-grpc</code> (our rust plugin to provide a GRPC interface) is enabled by default</li>
          <li>There’s a new dev-splice command which lets you provide a splice script for describing complex moves</li>
          <li>Improve tracing infrastructure</li>
        </ul>
      </li>
      <li>Highlights for the Network:
        <ul>
          <li>We gossip harder: we try to stay connected to 10 nodes</li>
          <li>Connectd will connect faster on startup, maintaining up to 10 outgoing connection attempts in parallel</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>LND <a href="https://github.com/lightningnetwork/lnd/releases/tag/v0.18.4-beta.rc1">v0.18.4-beta.rc1</a>
    <ul>
      <li>Minor release which ships the features required for building custom channels, alongside the usual bug fixes and stability improvements.</li>
      <li>Features: The main channel state machine and database now allow for processing and storing custom Taproot script leaves, allowing the implementation of custom channel types in a series of changes.</li>
      <li>Functional Enhancements:
        <ul>
          <li>A new <code class="language-plaintext highlighter-rouge">protocol.simple-taproot-overlay-chans</code> configuration item/CLI flag was added to turn on custom channel functionality.</li>
          <li>Compatibility with bitcoind  v28.0 was ensured by updating the version the CI pipeline is running against.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Eclair <a href="https://github.com/ACINQ/eclair/releases/tag/v0.11.0">v0.11.0</a>
    <ul>
      <li>This release adds official support for Bolt 12 offers and makes progress on liquidity management features (splicing, liquidity ads, on-the-fly funding). We also stop accepting channels that don’t support anchor outputs and update our dependency on Bitcoin Core.</li>
      <li>Implement full support for Bolt 12 payments</li>
      <li>Improve implementation of splicing, by relying on the now official quiescence feature and adding RBF support</li>
      <li>Include an early prototype for liquidity ads</li>
      <li>Update minimal version of Bitcoin Core (v27.2)</li>
      <li>Incoming obsolete channels will be rejected</li>
      <li>HTLC endorsement for channel jamming</li>
      <li>On-the-fly funding: introduces implementation of proposed protocol to negotiate an on-the-fly liquidity purchase</li>
    </ul>
  </li>
  <li>Zeus <a href="https://github.com/ZeusLN/zeus/releases/tag/v0.9.3">v0.9.3</a>
    <ul>
      <li>Improved channels UI: including reserves</li>
      <li>Invoice Settings: Display requested amount on invoice</li>
      <li>Embedded LND: Troubleshooting menu</li>
      <li>Bitcoin denominated amounts: display with spaces</li>
      <li>ZEUS Pay: UX improvements</li>
    </ul>
  </li>
  <li>Ark <a href="https://github.com/ark-network/ark/releases/tag/v0.4.0">v0.4.0</a> - New address encoding, Notes and Market Hours
    <ul>
      <li>New Address Encoding: Instead of encoding user and server public keys, we now encode the VTXO output script (Taproot key) and server public key</li>
      <li>Ark Notes: a feature designed for users who may not be online frequently
        <ul>
          <li>Clients can share a Nostr public key (profile) for each of their VTXOs</li>
          <li>When users go offline, the Server will print notes worth their unspent swept VTXOs</li>
          <li>Users can restore their off-chain balances when they come back online in the future</li>
        </ul>
      </li>
      <li>Market Hours:
        <ul>
          <li>Introduce specific periods during which the server will offer lower service fees for users joining rounds</li>
          <li>Allow users to schedule their settlements at predetermined times in the future, potentially saving on fees</li>
        </ul>
      </li>
      <li>Server Improvements:
        <ul>
          <li>Connection of the internal Bitcoin wallet to bitcoind with ZMQ</li>
          <li>Support for restoration of the internal Bitcoin wallet</li>
          <li>Auto-unlock feature for the internal wallet</li>
          <li>Increase testing surface for improved reliability</li>
          <li>Consolidation of APIs</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Alby
    <ul>
      <li>lightning-browser-extension <a href="https://github.com/getAlby/lightning-browser-extension/releases/tag/v3.10.0">v3.10.0</a> - Ice Clouds over a Red Planet
        <ul>
          <li>Version v3.10.0 introduces the Alby Hub Connector and a notification banner for upgrading shared wallets to Alby Hub. It also replaces “Citadel” with “Nirvati” and includes multiple translation updates.</li>
        </ul>
      </li>
      <li>Alby-go <a href="https://github.com/getAlby/go/releases/tag/v1.7.2">v1.7.2</a>
        <ul>
          <li>LNURL-withdraw support</li>
          <li>Improve currency selection</li>
          <li>Boostagram info in transaction details</li>
          <li>Delete contacts in address book</li>
          <li>Enhance QR code readability</li>
        </ul>
      </li>
      <li>bitcoin-connect <a href="https://github.com/getAlby/bitcoin-connect/releases/tag/v3.6.3">v3.6.3</a>
        <ul>
          <li>Add currency selector UI</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Breez SDK <a href="https://github.com/breez/breez-sdk-greenlight/releases/tag/0.6.5">v0.6.5</a>
    <ul>
      <li>Increase reliability for trampoline payments</li>
    </ul>
  </li>
  <li>Lightning Terminal <a href="https://github.com/lightninglabs/lightning-terminal/releases/tag/v0.14.0-alpha.rc1">v0.14.0-alpha.rc1</a>
    <ul>
      <li>This first Release Candidate of Lightning Terminal (LiT) ships the first non-experimental version of Taproot Asset Channels</li>
    </ul>
  </li>
  <li>Taproot-assets <a href="https://github.com/lightninglabs/taproot-assets/releases/tag/v0.5.0-rc1">v0.5.0-rc1</a>
    <ul>
      <li>Database Migrations: <code class="language-plaintext highlighter-rouge">tapd</code> v0.5.0 contains non-revertible database migrations. After running <code class="language-plaintext highlighter-rouge">tapd</code> v0.5.0, these database migrations prevent downgrading <code class="language-plaintext highlighter-rouge">tapd</code> to a previous release. Create backups of <code class="language-plaintext highlighter-rouge">tapd</code> database state, before upgrading to <code class="language-plaintext highlighter-rouge">tapd</code> v0.5.0.</li>
      <li>Breaking changes:
        <ul>
          <li>Downstream Projects - <code class="language-plaintext highlighter-rouge">litd</code>: <code class="language-plaintext highlighter-rouge">litd</code> v0.14.0-alpha enhancements require both channel peers to upgrade to a <code class="language-plaintext highlighter-rouge">litd</code> version &gt;= v0.14.0-alpha to continue Lightning Channel functionality.</li>
        </ul>
      </li>
      <li><code class="language-plaintext highlighter-rouge">tapd</code> v0.5.0 changes:
        <ul>
          <li>Oracle RPC: The RPC protobuf definitions for the Price Oracle have changed. Asset exchange rates are now expressed as <code class="language-plaintext highlighter-rouge">FixedPoint</code> to achieve better precision.</li>
          <li>Configuration changes: The configuration value (<code class="language-plaintext highlighter-rouge">universe.public-access</code>) and command line flag (<code class="language-plaintext highlighter-rouge">--universe.public-access</code>) now needs a value and is no longer a boolean</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Torq <a href="https://github.com/lncapital/torq/releases/tag/v2.1.0">v2.1.0</a>
    <ul>
      <li>Bitcoind wallet as a node type (Torq now has on-chain wallet support for CLN, LND and bitcoind)</li>
      <li>Bitcoind existing on-chain address listing</li>
      <li>Management of UTXO locking</li>
      <li>Improve transaction output visualizations (and backend)</li>
      <li>Improve transaction output linking to channels (funding/closing transactions)</li>
      <li>LND: sweep transaction output linking to channels
   -Torq gRPC (BETA feature):
        <ul>
          <li>New call SubscribeBlockHeight</li>
          <li>New call PayOnChain</li>
          <li>New call DecodeInvoice</li>
          <li>New call GetInvoiceStatus</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Polar <a href="https://github.com/jamaljsr/polar/releases/tag/v3.1.0">v3.1.0</a>
    <ul>
      <li>This minor release is needed to support the latest released versions of litd v0.14.0-alpha.rc1 and tapd v0.5.0-alpha.rc1.</li>
      <li>Features:
        <ul>
          <li>Add Description field when creating a new network</li>
          <li>Add full support for decimal display for TAP assets</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>CLBOSS <a href="https://github.com/ZmnSCPxj/clboss/releases/tag/v0.14.1">v0.14.1</a> - Hand at the Grindstone
    <ul>
      <li>Contrib Script Enhancements:
        <ul>
          <li>Add <code class="language-plaintext highlighter-rouge">--lightning-dir</code> option to the contrib scripts</li>
          <li>Add Nix Support</li>
        </ul>
      </li>
      <li>Stack Unwinding Support:
        <ul>
          <li>Implement <code class="language-plaintext highlighter-rouge">libunwind</code> for stack unwinding</li>
          <li>Replace the use of <code class="language-plaintext highlighter-rouge">program_invocation_name</code> with a custom global variable to store the program name, improving portability to systems like FreeBSD and other Unix-like systems.</li>
        </ul>
      </li>
      <li>Configurable Exception Backtrace Support:
        <ul>
          <li>Add the <code class="language-plaintext highlighter-rouge">--disable-exception-backtrace</code> option to <code class="language-plaintext highlighter-rouge">configure</code></li>
          <li>The <code class="language-plaintext highlighter-rouge">Util::BacktraceException</code> class now provides a no-op wrapper when exception backtraces are disabled via <code class="language-plaintext highlighter-rouge">--disable-exception-backtrace</code></li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Minibits Wallet <a href="https://github.com/minibits-cash/minibits_wallet/releases/tag/v0.1.10-beta.2">v0.1.10</a>
    <ul>
      <li>This native update brings sole but important architectural change: all Nostr wallet (NWC) commands are now processed using Android’s foreground service.</li>
    </ul>
  </li>
  <li>Cashu-ts <a href="https://github.com/cashubtc/cashu-ts/releases/tag/v2.0.0">v2.0.0</a>
    <ul>
      <li>NUT-05: description for invoice, integration test without bolt11 decode</li>
      <li>DX: Enforce explicit type annotations on function parameters</li>
      <li>NUT-18: Payment requests</li>
      <li>Add pipeline to build RC from staging branch</li>
      <li>Add fees and coin selection</li>
      <li>Streamline blinding</li>
      <li>Wallet: Remove bip39 dependency</li>
      <li>Support for NUT-12</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>Myriad: A simple personal <a href="https://github.com/hzrd149/blossom">blossom</a> server for your own files [<a href="https://git.fiatjaf.com/myriad">Code repository</a>]</li>
  <li><a href="https://npub19sstws4x9t7nua2sh6cxkeez25y6lvvnq6fqpmyzwnthsjap5tqqkdsghg.nsite.lol/">Cherry Tree</a>: Chunked files stored on blossom servers [<a href="https://github.com/hzrd149/cherry-tree">Github</a>]
    <ul>
      <li>“An experiment to see if its possible to re-create torrents on top of blossom servers and nostr” [<a href="https://github.com/hzrd149/blossom/pull/51">Explanation</a>]</li>
    </ul>
  </li>
  <li>Condenser: A nostr bot built using the mistral api which summarizes all notes from the news.utxo.one relay [<a href="https://github.com/coracle-social/condenser">Github</a>]
    <ul>
      <li>“A script that fetches the last 6 hours of events from news.utxo.one and summarizes them using the Mistral API.”</li>
    </ul>
  </li>
  <li>Mostr: An immutable nested collaborative task manager, powered by nostr [<a href="https://github.com/xeruf/mostr">Github</a>]</li>
  <li>Robosats Nostr Sync: Scrappers to publish to nostr orders from other platforms [<a href="https://github.com/RoboSats/robosats-nostr-sync">Github</a>]
    <ul>
      <li>The tool can display non-kyc exchange HodlHodl offers on Robosats’ client [<a href="https://njump.me/nevent1qqszpnezp7v8njlsad2sm5t30sjduzhkld8u02mh0m8qz6mptzk7mmqpp4mhxue69uhkummn9ekx7mqzypj9dqde6pnmrgmzcjlw3h0lnp7jgek5nyzuym9clmz7d7mn4awgghkwnfm">Note</a>]</li>
    </ul>
  </li>
  <li><a href="https://nokakoi.com/">nokakoi</a>: Grid style live nostr client for Windows. [<a href="https://github.com/betonetojp/kakoi">Github</a>]</li>
  <li><a href="https://bullishbulletin.vercel.app/">The Bullish Bulletin</a>: An app powered by Nostr Wallet Connect to post all sorts of messages like job ads or announcements
    <ul>
      <li>Users can choose a note type, enter their message and pay via Bitcoin Connect to publish their post.</li>
    </ul>
  </li>
  <li><a href="https://vpnstr.com/">Vpnstr</a>: A new VPN service with 53 locations and unlimited bandwidth, can be paid with Bitcoin on the Lightning Network</li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Rust Nostr <a href="https://github.com/rust-nostr/nostr/releases/tag/v0.37.0">v0.37.0</a>
    <ul>
      <li>Add support to NIP17 relay list in SDK (when <code class="language-plaintext highlighter-rouge">gossip</code> option is enabled)</li>
      <li>Add NIP22 and NIP73 support</li>
      <li>Fix Swift Package</li>
      <li>From this release all the rust features are be disabled by default (except <code class="language-plaintext highlighter-rouge">std</code> feature in <code class="language-plaintext highlighter-rouge">nostr</code> crate).</li>
    </ul>
  </li>
  <li>Primal
    <ul>
      <li>iOS <a href="https://njump.me/nevent1qqsxqyn2ym3rplv9ykaj49rqf9a0aqly38rn4nzqc5ekvl49gy5gllqpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3qzga04e73s7ard4kaektaha9vckdwll3y8auztyhl3uj764ua7vrq6utlw4">v2.0.134</a>
        <ul>
          <li>Improve onboarding</li>
          <li>Profile screen improvements</li>
          <li>Feed rendering improvements</li>
          <li>App shell cosmetic improvements</li>
        </ul>
      </li>
      <li>Android <a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.0.28">v2.0.28</a>
        <ul>
          <li>Implement:
            <ul>
              <li>Profile avatar and cover image viewer in profile details screen</li>
              <li>Rendering highlights and generic events in feeds</li>
              <li>Tap QR code to copy addresses on profile QR code viewer</li>
              <li>Follow/unfollow approvals if contact list is not found</li>
              <li>Onboarding follows customisation and zaps introductions</li>
              <li>Premium badge on profile details screen</li>
              <li>New avatars designs</li>
              <li>Support for primal legend avatars across the app</li>
              <li>Primal premium check into profile editor</li>
            </ul>
          </li>
        </ul>
      </li>
      <li>Web <a href="https://njump.me/nevent1qqsxqyn2ym3rplv9ykaj49rqf9a0aqly38rn4nzqc5ekvl49gy5gllqpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3qzga04e73s7ard4kaektaha9vckdwll3y8auztyhl3uj764ua7vrq6utlw4">v2.0.11</a>
        <ul>
          <li>Profile screen improvements</li>
          <li>Feed rendering improvements</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Damus Notedeck Alpha is now available for Purple subscribers [<a href="https://njump.me/nevent1qqsrlz8fh77slt8puzc7s32auc0n87l2zcwnwt5wuu5cxxzsc4epj2cpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3q8m76awca3y37hkvuneavuw6pjj4525fw90necxmadrvjg0sdy6qsvuxexh">Announcement</a>]
    <ul>
      <li>Lightning fast: Built from the ground up with an ultra-fast database made exclusively for nostr, leveraging several state-of-the-art performance techniques not available on web clients</li>
      <li>Custom feeds: Add timeline, hashtag, and notification columns of any nostr public key. Which means you can see the nostr landscape through other peoples’ eyes</li>
      <li>Add account switching</li>
    </ul>
  </li>
  <li>Notedeck <a href="https://njump.me/naddr1qvzqqqr4gupzqnyk6a37ktlqryg00eezpd78and7rfcq2le5fw0hns527zqv8m3sqy88wumn8ghj7mn0wvhxcmmv9uqqyt3wauhhvk">Update</a>
    <ul>
      <li>Update user relay-list via polling</li>
      <li>Add user mute list sync via polling</li>
      <li>Skip muted content</li>
      <li>debug: add crate features which enable egui DebugOptions</li>
    </ul>
  </li>
  <li>Amethyst
    <ul>
      <li><a href="https://github.com/vitorpamplona/amethyst/releases/tag/v0.93.1">v0.93.1</a>
        <ul>
          <li>Move to NIP-22 to reply to Interactive Stories</li>
          <li>Add amount and personalization labels to the DVM feed</li>
          <li>Improve performance of the Hex encoder</li>
          <li>Improve the layout of the discovery feed items</li>
          <li>Update Jackson, secp256k1, and AGP</li>
        </ul>
      </li>
      <li><a href="https://github.com/vitorpamplona/amethyst/releases/tag/v0.93.0">v0.93.0</a> - Blossom, Olas, Around Me feeds and Interactive Stories
        <ul>
          <li>Add support for displaying NIP-63 Interactive Stories</li>
          <li>Add support for Blossom media servers</li>
          <li>Add support for Olas’ Image feeds</li>
          <li>Add support for Around Me feed with posts that only show up in that location</li>
          <li>And many more new features</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Chronicle <a href="https://github.com/dtonon/chronicle/releases/tag/v0.3">v0.3</a>
    <ul>
      <li>Add workaround to stop saving duplicate events</li>
    </ul>
  </li>
  <li>Olas
    <ul>
      <li>iOS <a href="https://njump.me/nevent1qqsg0fff9kv69g3l6fv36xlalsj69mhzgwn8xvxmmc573p4zaw653hqppamhxue69uhkummnw3ezumt0d5pzp75cf0tahv5z7plpdeaws7ex52nmnwgtwfr2g3m37r844evqrr6jgc279e">v0.1.5</a>
        <ul>
          <li>Reposts</li>
          <li>Zaps (via Nostr Wallet Connect for now)</li>
          <li>Swipe-to-zap</li>
          <li>Performance improvements</li>
        </ul>
      </li>
      <li>Android <a href="https://njump.me/nevent1qqsrcqjseghrvfpcsfc87a59dvffnmeagshmxazu4aruwtjrduwc66gpp4mhxue69uhkummn9ekx7mqzyrafsj7hmweg9ur7zmn6apajdg48hxuskujx53rhrux0ttjcqx84ykzjpej">v0.1.5</a>
        <ul>
          <li>NWC zaps</li>
          <li>LN and Nutzaps via swipe-to-zap</li>
          <li>Reposts</li>
          <li>Performance optimizations</li>
        </ul>
      </li>
      <li><a href="https://github.com/pablof7z/olas/releases/tag/0.1.4-1">v0.1.4-1</a>
        <ul>
          <li>Add reposts</li>
          <li>Performance improvements</li>
        </ul>
      </li>
      <li><a href="https://github.com/pablof7z/olas/releases/tag/0.1.4">v0.1.4</a>
        <ul>
          <li>Add bookmarks</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Snort <a href="https://git.v0l.io/Kieran/snort/releases/tag/v0.3.0">v0.3.0</a>
    <ul>
      <li>Drop NIP-04 support for DM’s</li>
      <li>Profile link QR selector (npub/nprofile)</li>
      <li>Relay up time reporting (via nostr.watch NIP)</li>
      <li>New note designer media attachment UI</li>
      <li>Media browser via NIP-96 server list</li>
      <li>NIP-89 support (App handlers for unknown events)</li>
      <li>WoT filter for replies</li>
      <li>Drop NIP-04 support for NIP-46 bunkers (NIP-44 only)</li>
      <li>NIP-55 Amber signer support</li>
    </ul>
  </li>
  <li>YakiHonne <a href="https://njump.me/nevent1qqsyrn277057f7p9mfhrcrkgkfnn09tzpmr2ksg5r24jwg7tmdplmdgppamhxue69uhkummnw3ezumt0d5pzqgycd7urua6ajmgc3jjunhcseekkz0swkljhdzs0pvftxlx6cgdnh4wuq7">Update</a>
    <ul>
      <li>Mobile:
        <ul>
          <li>All-in-One Content Hub: Create notes, articles, videos, curations, and smart widgets all in one place</li>
          <li>New Media Servers: Added support for NostrMedia.com (npub18jn…59kc), Nostr check, and more</li>
          <li>Thread Timeline Enhancements: Smoother and clearer thread viewing</li>
          <li>Nip 44 Gift Messages: Now enabled by default</li>
          <li>App-Wide Improvements: Faster, smoother, better</li>
        </ul>
      </li>
      <li>Web:
        <ul>
          <li>Upgraded Note Editor: GIFs, emojis, and real-time previews to enhance your creativity</li>
          <li>Enhanced Long-Form Content: A fresh design to make writing a joy</li>
          <li>Custom Media Uploaders: Support for more media options and servers</li>
          <li>Expanded Search: Find more notes, media, and users with ease</li>
          <li>Browsing Suggestions: Discover new notes, media, users, and more</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nostrmo <a href="https://github.com/haorendashu/nostrmo/releases/tag/2.9.4">v2.9.4</a>
    <ul>
      <li>Remove metadata cache when start and change wot reload method</li>
      <li>Add support to sync user’s local events to relays</li>
      <li>Add support to send long form</li>
      <li>Add a json viewer to event json copy</li>
      <li>Trace router query add tempRelays support</li>
    </ul>
  </li>
  <li>Keychat <a href="https://github.com/keychat-io/keychat-app/releases/tag/1.22.2%2B6277">v1.22.2</a>
    <ul>
      <li>Support Large Group Chat with OpenMLS Integration</li>
      <li>New Bot Identity: Support Ecash Payments for ChatGPT-4o and ChatGPT-4o-mini Interaction, pay per message</li>
      <li>Breaking change: Adopting nip17 to send signal hello message and use new signature scheme</li>
    </ul>
  </li>
  <li>0xChat App
    <ul>
      <li><a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.4-release">v1.4.4</a>
        <ul>
          <li>Optimize the data storage performance of the Cashu wallet</li>
          <li>Enable opening external images with 0xChat</li>
          <li>Add support for customizing the Moment feature</li>
          <li>Add support for the Persian language</li>
        </ul>
      </li>
      <li><a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.2-release">v1.4.2</a>
        <ul>
          <li>Add a text size adjustment setting</li>
          <li>Add inbox/outbox relays setting</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Voyage
    <ul>
      <li><a href="https://github.com/dluvian/voyage/releases/tag/v0.17.1">v0.17.1</a>
        <ul>
          <li>Don’t allow saving empty lists</li>
          <li>Treat empty list pairs as deleted</li>
        </ul>
      </li>
      <li><a href="https://github.com/dluvian/voyage/releases/tag/v0.17.0">v0.17.0</a>
        <ul>
          <li>Features:
            <ul>
              <li>Create polls</li>
              <li>Filter HomeFeed by roots, cross and polls</li>
              <li>Show poll end time in post details</li>
            </ul>
          </li>
          <li>Improvements:
            <ul>
              <li>Force nip22 usage when replying with 5 or less characters</li>
              <li>Set t tags when nip22-replying hashtags</li>
              <li>Adjust scroll behaviour</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Nos.social
    <ul>
      <li><a href="https://github.com/planetary-social/nos/releases/tag/v1.0.3-294">v1.0.3</a>
        <ul>
          <li>Add support for user setting and displaying pronouns</li>
          <li>Add display of website URLs for user profiles</li>
          <li>Update note header UI to make it more readable</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Citrine
    <ul>
      <li><a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.5.8">v0.5.8</a>
        <ul>
          <li>Move database view to a new screen</li>
          <li>Don’t send received events to the same connection that sent them</li>
          <li>Performance improvements when deleting events</li>
          <li>Check if there’s a newer version of the event before saving the event to the database</li>
        </ul>
      </li>
      <li><a href="https://github.com/greenart7c3/Citrine/releases/tag/v0.5.6">v0.5.6</a>
        <ul>
          <li>Add a option to fetch your events from relays</li>
          <li>Add a delete all button</li>
          <li>Feed by kind</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Pokey
    <ul>
      <li><a href="https://github.com/KoalaSat/pokey/releases/tag/v0.1.2-alpha">v0.1.2</a>
        <ul>
          <li>Implement Multi-account</li>
        </ul>
      </li>
      <li><a href="https://github.com/KoalaSat/pokey/releases/tag/v0.1.1-alpha">v0.1.1</a>
        <ul>
          <li>Notifications now display NIP05 pictures if available</li>
          <li>Prepare the code for multi-account</li>
          <li>New APKs available per Arch</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Amber <a href="https://github.com/greenart7c3/Amber/releases/tag/v3.0.0">v3.0.0</a>
    <ul>
      <li>New design (still a work in progress)</li>
      <li>Open the permissions page with the correct account</li>
      <li>Option to setup a custom pin for the app</li>
      <li>Button to copy your public key</li>
      <li>Better check for valid relays</li>
      <li>Support for secret when using nostrconnect</li>
    </ul>
  </li>
  <li>Zapstore <a href="https://github.com/zapstore/zapstore/releases/tag/0.1.7">v0.1.7</a>
    <ul>
      <li>Performance: Faster, background downloads</li>
      <li>Feature: Full screen app images</li>
      <li>Feature: Remember trusted signers</li>
      <li>Feature: Show certificate mismatch before installing</li>
    </ul>
  </li>
  <li>SatShoot <a href="https://njump.me/nevent1qqsxd04rw5uv5hygyxmuyu694sjjqgfx2sulk92dssw7xtr84sfefncpp4mhxue69uhkummn9ekx7mqpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3q6p8v7varqwjes5hak6q7mz6pygqm4pwc6gve4mrned3xs8tz42gq9wasxp">v0.2.0</a> [<a href="https://github.com/Pleb5/satshoot">Github</a>]
    <ul>
      <li>Cashu nip60 wallet and payment with nip61 nutzaps: multimint payments, mint exploration, manual and automatic backup and resync mechanisms</li>
      <li>Rendering of nostr URI-s</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @forest (3,500 sats) “👊”</li>
      <li>@tac_btc (1,000 sats) “Thank you”</li>
      <li>@Hugh Janus (200 sats) “https://media.tenor.com/OdfwhhIoccAAAAAC/i-see-south-park.gif”</li>
      <li>@edblock “Great Episode joined by guests Stephan Livera, Rijndael &amp; Ben Carman about apps for Bitcoiners.”</li>
    </ul>
  </li>
</ul>

<h3 id="tech-tip-of-the-day">Tech Tip of the Day</h3>
<ul>
  <li><a href="https://ssd.eff.org/#index">Surveillance Self-Defense</a>: Tips, Tools and How-tos for Safer Online Communications, a project from the Electronic Frontier Foundation
    <ul>
      <li>A guide providing practical guides, tips and strategies to help individuals and organizations protect their privacy and security online.</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2024/12/06/">332</a>
        <ul>
          <li>Transaction censorship vulnerability: Antoine Riard <a href="https://groups.google.com/g/bitcoindev/c/GuS36ldye7s">posted</a> to the Bitcoin-Dev mailing list about a method for preventing a node from broadcasting a transaction belonging to a connected wallet.</li>
          <li>Continued discussion about consensus cleanup soft fork proposal: Antoine Poinsot <a href="https://delvingbitcoin.org/t/great-consensus-cleanup-revival/710/53">posted</a> to the existing Delving Bitcoin thread about the consensus cleanup soft fork proposal</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2024/11/29/">331</a>
        <ul>
          <li>Lisp dialect for Bitcoin scripting: Anthony Towns made several posts about a continuation of his <a href="https://bitcoinops.org/en/topics/basic-bitcoin-lisp-language/">work</a> on creating a Lisp dialect for Bitcoin that could be added to Bitcoin in a soft fork.
            <ul>
              <li>bll, symbll, bllsh</li>
              <li>Implementing quantum-safe signatures in symbll versus GSR</li>
              <li>Flexible coin earmarks</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="lightning--l2-1">Lightning + L2+</h4>
<ul>
  <li>ZEUS Pay cuts lightning address fees and lowers minimum limit [<a href="https://blog.zeusln.com/zeus-pay-lightning-address-fees-slashed-to-zero/">Blog post</a>]
    <ul>
      <li>ZEUS Pay announces zero fees for receivers, previously charged 2.5-10% depending on the payment amount. The minimum amount receivable has been reduced to 1 satoshi, previously set at 10 satoshis.</li>
    </ul>
  </li>
  <li>Non-Custodial Ecash: A Trust-Minimized Payment System by Luke Childs [<a href="https://gist.github.com/lukechilds/307341239beac72c9d8cfe3198f9bfff">Proposal</a>]
    <ul>
      <li>The proposal details a protocol leveraging Spillman payment channels, allowing users to hold self-custodial credits redeemable for ecash tokens during transactions. Custodial risk would only exist during payment processing.</li>
    </ul>
  </li>
  <li>You can now buy a <a href="https://vpnstr.com/">Vpnstr</a> VPN with Cashu, making it the first VPN to accept ecash.</li>
</ul>

<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Casa announces <a href="https://casa.io/government">Praetorian by Casa</a>, an offering for governements willing to secure their national bitcoin reserves with self-custody protocols, removing reliance on third-party custodians [<a href="https://x.com/Nneuman/status/1866133180778217554">Announcement</a>]</li>
  <li>Strike introduces Bill Pay for U.S. customers, allowing them to automate bill payments using either bitcoin or cash directly from their Strike accounts. [<a href="https://strike.me/blog/announcing-strike-bill-pay/">Blog post</a>]</li>
  <li>BitGo launches BitGo Retail, a retail platform offering trading, custody, staking, and wallets with institutional-grade security and regulatory compliance. [<a href="https://www.businesswire.com/news/home/20241201410604/en/BitGo-Launches-Comprehensive-Retail-Platform">Business Wire</a>]</li>
  <li>Fold now allows primary account holders to add up to three authorized users, each with their own Fold card. [<a href="https://blog.foldapp.com/add-authorized-users/">Blog post</a>]
    <ul>
      <li>This feature enables families to collectively earn bitcoin rewards on eligible purchases under one account.</li>
    </ul>
  </li>
  <li>Rumble’s Board of Directors approves allocating up to $20 million of excess cash reserves to Bitcoin, supporting its expansion into cryptocurrency. [<a href="https://corp.rumble.com/blog/rumble-announces-bitcoin-treasury-strategy/">Press release</a>]
    <ul>
      <li>The company will determine Bitcoin purchases based on market conditions and business needs, with the strategy subject to change at any time.</li>
    </ul>
  </li>
  <li>Swan customers are being charged up to $125 for a Fortress ‘Admin Fee’, after the company moved all Fortress Trust accounts to new services providers. [<a href="https://x.com/SwanBitcoin/status/1861566511011221754">Announcement</a>]
    <ul>
      <li>The company will cover up to $250 of purchase fees for impacted users in the first half of 2025.</li>
    </ul>
  </li>
  <li>DMM Bitcoin, a Japanese exchange, announces its closure following a 4503 BTC ($300 million) hack earlier this year. [<a href="https://bitcoin.dmm.com/news/20241202_01">Announcement</a>]
    <ul>
      <li>The company agrees to transfer customer accounts and custodial assets to SBI by March 2025.</li>
    </ul>
  </li>
  <li>MARA acquires a 240 MW interconnection wind farm in Hansford County, Texas, featuring 114 MW operational wind capacity. The project plans to leverage sustainable resources for near-zero energy cost and enable broader renewable energy deployment [<a href="https://ir.mara.com/news-events/press-releases/detail/1383/mara-acquires-wind-farm">Press release</a>]</li>
</ul>

<h4 id="quantum">Quantum</h4>
<ul>
  <li>Google introduces Willow, a quantum chip with breakthroughs in reducing errors exponentially as more qubits are added. [<a href="https://blog.google/technology/research/google-willow-quantum-chip/">Press release</a>]
    <ul>
      <li>In benchmark tests, Willow solves computations in minutes that would take leading supercomputers over 10^25 years.</li>
    </ul>
  </li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>OpenSats <a href="https://opensats.org/blog/renewing-our-commitment-to-bitcoin">renews grant</a> to 9 projects advancing the ecosystem on various fronts: BTCPay Server, Stratum V2, Raspiblitz, LNbits, Vexl, Blixt, Krux, Bitaxe, and Labelbase.</li>
  <li>Spiral announces two new grants to <a href="https://x.com/spiralbtc/status/1861804173932839174">Bob McElrath</a>, for his work on Braidpool, and <a href="https://x.com/spiralbtc/status/1864706606262255704">Rachel Rybarczyk</a>, core developer at Stratum v2 project.</li>
  <li>Bitcoin Dev Kit Foundation <a href="https://bitcoindevkit.org/foundation/grantees/">announces</a> grants to Wei Chen, newest BDK’s full-time Rust maintainer, Evan Lin, part-time Rust maintainer, and Nymius, a new project grantee contributing to Silent Payments and general project maintenance.</li>
  <li>OCEAN Pool now allows miners to donate rewards directly to the <a href="https://p2prights.org/">P2PRights fund</a> for Samourai Wallet’s legal defense. [<a href="https://atlas21.com/ocean-supports-samourai-wallets-legal-defense-despite-past-tensions/">Atlas21</a>]</li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li>U.S. Customs and Border Protection is holding shipments of Bitmain’s Antminer S21 and T21 ASIC miners at ports, following a request from the Federal Communications Commission. [<a href="https://blockspace.media/insight/officials-are-halting-bitmain-units-at-u-s-ports-industry-firms-report/">BlockSpace</a>]
    <ul>
      <li>Seven U.S.-based bitcoin mining companies report delays of up to two months. Other ASIC manufacturers, such as MicroBT and Canaan, are not affected.</li>
    </ul>
  </li>
  <li>Bitmain introduces a new production line in the U.S. to improve response times and efficiency for North American customers. [<a href="https://x.com/BITMAINtech/status/1866124016819339335">Announcement</a>]</li>
  <li>The Public Utility Commission of Texas requires crypto mining facilities consuming over 75 MW to register with ERCOT, detailing their location, ownership, and power usage. [<a href="https://www.texastribune.org/2024/11/25/texas-cryptocurrency-mining-registration-public-utility-commission-er/">Texas Tribune</a>]</li>
  <li>Bitcoin mining pool issues rewards in ecash, without an account being required. Miners can then withdraw ecash to the Lightning Network or on-chain [<a href="https://njump.me/nevent1qqsys3de3auph4wwcmqcxzzclj6vy5t0zwwe2pdkwke9klf6umuv50cpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3q6vzjeglr653mrmyqvu0trwaq29az753wr9th3hyrm5p63kz2zu8qalcadd">Note</a>]</li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>U.S. agencies, including the FBI and <a href="https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure">CISA</a>, encourage Americans to adopt end-to-end encrypted messaging apps in response to ongoing cyber threats [<a href="https://arstechnica.com/tech-policy/2024/12/us-recommends-encrypted-messaging-as-chinese-hackers-linger-in-telecom-networks/">ArsTechnica</a>]
    <ul>
      <li>U.S. officials reveal an ongoing breach targeting global telecom systems, attributed to the Chinese hacking group “Salt Typhoon”, which has compromised at least 8 U.S. telecom providers, more than initially reported.</li>
      <li>The attack, which began in spring 2024, exploited vulnerabilities in over 80 telecom companies, compromising sensitive data such as call metadata and private communications of political and government-linked individuals.</li>
    </ul>
  </li>
  <li>EU scrutiny on encrypted messaging: The High Level Group on Data Access highlights challenges law enforcement faces with “over-the-top” (OTT) messaging services like Signal, WhatsApp, and Telegram. [<a href="https://www.heise.de/en/news/EU-prosecutors-demand-Sanction-data-saving-messenger-services-10179849.html">Heise</a>]
    <ul>
      <li>They advocate “lawful access by design” to enable real-time access to encrypted communications while ensuring court oversight for serious crimes.</li>
    </ul>
  </li>
  <li>Coinbase advises users against using VPNs and ad blockers, citing that its risk models associate them with malicious activity. Product Director Scott Shapiro states these tools often raise security flags, even for legitimate users. [<a href="https://x.com/scottshapiro/status/1863691538661883925">Twitter post</a>]</li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Libsecp256k1: Safegcd’s implementation formally verified by Blockstream Research [<a href="https://bitcoinmagazine.com/technical/safegcds-implementation-formally-verified">Bitcoin Magazine</a>]
    <ul>
      <li>The safegcd modular inversion algorithm, implemented in libsecp256k1, was formally verified using the Coq proof assistant. This verification ensures its correct termination and accuracy in 256-bit inputs.</li>
    </ul>
  </li>
  <li>Bitcoin Core #30039: dbwrapper: Bump LevelDB max file size to 32 MiB to avoid system slowdown from high disk cache flush rate [<a href="https://github.com/bitcoin/bitcoin/pull/30039">Merged</a>]</li>
  <li>Bitcoin Core #31122: cluster mempool: Implement changeset interface for mempool [<a href="https://github.com/bitcoin/bitcoin/pull/31122">Merged</a>]
    <ul>
      <li>Provides a changeset interface for the mempool, enabling a node to evaluate the impact of proposed changes on its state</li>
    </ul>
  </li>
  <li>Bitcoin Core #30708: rpc: add getdescriptoractivity [<a href="https://github.com/bitcoin/bitcoin/pull/30708">Merged</a>]
    <ul>
      <li>The RPC command scanblocks helps retrieve blockhashes with relevant activity for specific descriptors.</li>
    </ul>
  </li>
  <li>Eclair #2935: Add force-close notification [<a href="https://github.com/ACINQ/eclair/pull/2935">Merged</a>]</li>
  <li>NIP #1551: Instagram feeds [<a href="https://github.com/nostr-protocol/nips/pull/1551">Merged</a>]</li>
  <li>NUT-19 Cached responses: The NUT adds idempotency to key endpoints, enhancing the reliability of the Cashu protocol. [<a href="https://github.com/cashubtc/nuts/blob/main/19.md">Merged</a>]</li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>Brazilian Congressman Eros Biondini introduces RESBit, a bill for a national bitcoin reserve, suggesting an allocation of up to 5% of Brazil’s $372 billion international reserves. [<a href="https://www.theblock.co/post/328448/brazilian-lawmaker-proposes-national-bitcoin-reserve-to-hedge-economic-risks">The Block</a>]
    <ul>
      <li>The bill aims to diversify financial assets and strengthen Brazil’s resilience against currency fluctuations and geopolitical uncertainties.</li>
    </ul>
  </li>
  <li>El Salvador considers adjusting bitcoin policy to secure IMF loan [<a href="https://archive.ph/4MU39#selection-1749.0-2505.0">Financial Times</a>]
    <ul>
      <li>A proposed legal change would allow merchants to choose whether to accept bitcoin. This adjustment is part of conditions set by the IMF for a $1.3 billion loan, alongside $2 billion from other international lenders.</li>
    </ul>
  </li>
  <li>Czech Republic removes capital gains tax on digital assets held for over 3 years, starting December 2024 [<a href="https://www.theblock.co/post/329788/czech-republic-scraps-capital-gains-tax-on-crypto-held-for-over-3-years">The Block</a>]</li>
  <li>Fifth Circuit overturns Tornado Cash sanctions, citing overreach by OFAC [<a href="https://www.therage.co/fifth-circuit-lifts-tornado-cash-sanctions/">The Rage</a>]
    <ul>
      <li>The court rejected the government’s claim that Tornado Cash operates as a service, explaining that its smart contracts are lines of code, not human-driven services. It also clarified that Tornado Cash cannot control its immutable contracts, distinguishing them from mutable, user-controlled systems.</li>
    </ul>
  </li>
  <li>Damian Williams steps down as U.S. Attorney for the Southern District of New York after overseeing Samourai Wallet and Tornado Cash cases [<a href="https://www.justice.gov/usao-sdny/pr/us-attorney-damian-williams-announces-anticipated-resignation-southern-district-new">Press release</a>]</li>
  <li>The Canton of Bern, in Switzerland, approves a feasibility study to explore Bitcoin mining’s potential within its energy framework. [<a href="https://atlas21.com/canton-bern-evaluates-bitcoin-mining-for-power-grid-stability/">Atlas21</a>]
    <ul>
      <li>The study focuses on identifying surplus energy, collaborating with Swiss miners, and evaluating mining’s impact on grid stability.</li>
    </ul>
  </li>
  <li>Operation Choke Point 2.0: U.S. regulators’ actions against crypto activities revealed in FDIC letters [<a href="https://www.coindesk.com/policy/2024/12/05/u-s-regulator-told-banks-to-lay-off-crypto-letters-obtained-by-coinbase-reveal">CoinDesk</a>]
    <ul>
      <li>The FDIC’s “pause letters” dated back to March 2022, with officials advising banks to halt crypto services until further risk assessments were made.</li>
    </ul>
  </li>
  <li>Russia’s president signs a law recognizing digital currencies as property, enabling taxation of mining and transactions. [<a href="https://www.themoscowtimes.com/2024/11/29/putin-signs-law-on-cryptocurrency-tax-a87172">The Moscow Times</a>]
    <ul>
      <li>Cryptocurrency mining and sales are exempt from VAT but subject to income tax at tiered rates. Corporate entities face a 25% tax starting next year.</li>
      <li>A database of government-approved miners was launched in November. Another law permits the Central Bank to pilot cross-border cryptocurrency transactions.</li>
    </ul>
  </li>
  <li>Morocco’s central bank is adopting a draft law to regulate cryptocurrencies, which have been banned since 2017. [<a href="https://www.reuters.com/technology/morocco-preparing-law-allow-cryptocurrencies-central-bank-chief-says-2024-11-26/">Reuters</a>]
    <ul>
      <li>Bank Al Maghrib is also considering the development of a central bank digital currency (CBDC) to enhance financial inclusion.</li>
    </ul>
  </li>
  <li>Taiwan’s Financial Supervisory Commission (FSC) enforces stricter AML rules for digital assets service providers starting November 30, 2024. [<a href="https://www.theblock.co/post/328729/taiwan-fast-tracks-aml-rules-stricter-crypto">The Block</a>]
    <ul>
      <li>FSC officials emphasize fraud prevention and tighter oversight, including regulations on fiat custody, data security, complaint handling, and record-keeping.</li>
    </ul>
  </li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li><a href="https://planb.sv/">Plan ₿ Forum El Salvador</a>
    <ul>
      <li>Central America’s premier Bitcoin conference, uniting global leaders, technologists, and entrepreneurs.</li>
      <li>January 30-31, 2025 in San Salvador, El Salvador</li>
    </ul>
  </li>
  <li><a href="https://bitcoinmedellin.com/">Bitcoin Medellin</a>
    <ul>
      <li>The first ever Bitcoin Medellin Conference</li>
      <li>January 17-18, 2025 in Medellin, Colombia</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>Here’s a list of our top recently published reads:
    <ul>
      <li>Erosion of the Meaning of Custody, by Nicolas Dorier [<a href="https://blog.nicolas-dorier.com/posts/custody/">Blog post</a>]</li>
      <li>Buckets of blind signatures, by Callebtc [<a href="https://blog.cashu.space/buckets-of-blind-signatures/">Blog post</a>]</li>
      <li>Financial surveillance in the United States: How the Federal Government weaponized the Bank Secrecy Act to spy on Americans [<a href="https://judiciary.house.gov/sites/evo-subsites/republicans-judiciary.house.gov/files/2024-12/2024-12-05-Financial-Surveillance-in-the-United-States.pdf">Report</a>]</li>
      <li>Privacy in Public Part 3: Cash and Bitcoin, by BPI Fellows Andrew Bailey, Bradley Rettler, and Craig Warmke [<a href="https://www.btcpolicy.org/articles/privacy-in-public-part-3-cash-and-bitcoin">Bitcoin Policy Institute</a>]</li>
      <li>Understanding Liability for Unlicensed Money Transmitting Businesses under  § 1960, by Daniel Barabander, Amanda Tuminelli and Jake Chervinsky [<a href="https://edit.financialcrimelitigators.org/api/assets/cd682a1c-1cb0-4c99-a491-ac6155f4bdc2.pdf">Paper</a>]</li>
      <li>Hodlers: an apology, by the Financial Times [<a href="https://www.ft.com/content/8533f856-57f1-4765-a3dc-d866543092be">Article</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, CRAIG RAW, ROB HAMILTON</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Craig Raw and Rob Hamilton to go through the list.]]></summary></entry><entry><title type="html">Bitcoin Review Podcast BR088 - AnchorWatch, Bitkey, Krux, Primal, Proton Wallet, Kagi, Debifi, Namecheap $73M bitcoin revenue + MORE ft. Livera, Rijndael &amp;amp; Ben</title><link href="https://bitcoin.review/podcast/episode-88/" rel="alternate" type="text/html" title="Bitcoin Review Podcast BR088 - AnchorWatch, Bitkey, Krux, Primal, Proton Wallet, Kagi, Debifi, Namecheap $73M bitcoin revenue + MORE ft. Livera, Rijndael &amp;amp; Ben" /><published>2024-11-27T14:00:00+00:00</published><updated>2024-11-27T14:00:00+00:00</updated><id>https://bitcoin.review/podcast/episode-88</id><content type="html" xml:base="https://bitcoin.review/podcast/episode-88/"><![CDATA[<p>I’m joined by guests <a href="https://twitter.com/stephanlivera">Stephan Livera</a>, <a href="https://twitter.com/rot13maxi">Rijndael</a> &amp; <a href="https://twitter.com/benthecarman">Ben Carman</a>  to go through the list.</p>

<style>
  .app-logos-wrapper {
    text-align: center;
    margin-top: 2rem;
    margin-bottom: 2rem;
    font-size: 1rem;
    font-weight: 800;
  }

  .app-logos {
    display: flex;
    gap: 1rem;
    align-items: center;
    justify-content: center;
    flex-wrap: wrap;
  }

  .app-logos img {
    width: 2.2rem;
  }

  .app-logos a[title='Amazon Music'] img,
  .app-logos a[title='Anchor'] img {
    border-radius: 0.7rem;
  }

  @media (min-width: 480px) {
    .app-logos-wrapper {
      font-size: 1.2rem;
      margin-top: 3rem;
      margin-bottom: 3rem;
    }

    .app-logos {
      gap: 1.2rem;
    }

    .app-logos img {
      width: 3rem;
    }
  }
</style>

<div class="app-logos-wrapper">
  <p>Listen on your favorite podcast app:</p>
  <div class="app-logos">
    <a title="Fountain" href="https://tinyurl.com/482ta5dx">
      <img src="/assets/images/apps/fountain-logo.png" alt="" />
    </a>
    <a title="Spotify" href="https://open.spotify.com/show/65cGjse0oWooMqHlTVUida">
      <img src="/assets/images/apps/spotify-logo.svg" alt="" />
    </a>
    <a title="Apple Podcasts" href="https://podcasts.apple.com/us/podcast/bitcoin-review/id1632017958">
      <img src="/assets/images/apps/apple-logo.svg" alt="" />
    </a>
    <a title="Amazon Music" href="https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review">
      <img src="/assets/images/apps/amazon-logo.png" alt="" />
    </a>
    <a title="YouTube" href="https://www.youtube.com/channel/UCYq35kSZZADBoL2YuCyqUUA">
      <img src="/assets/images/apps/youtube-logo.png" alt="" />
    </a>
    <a title="Anchor" href="https://anchor.fm/bitcoinreview">
      <img src="/assets/images/apps/anchor-logo.jpeg" alt="" />
    </a>
  </div>
</div>

<h3 id="housekeeping">Housekeeping</h3>
<ul>
  <li>00:05:29 <a href="bitcoinblackfriday.org">Bitcoin Black Friday</a></li>
  <li>00:06:05 AnchorWatch gains Lloyd’s of London Coverholder status [<a href="https://www.businesswire.com/news/home/20241118360660/en/AnchorWatch-Becomes-Lloyds-of-London-Coverholder-Set-to-Begin-Operations-in-December-2024">Business Wire</a>]
    <ul>
      <li>Starting December 2024, it will offer insured bitcoin custody solutions backed by Lloyd’s syndicates, allowing coverage of up to $100M per customer.</li>
      <li>Its proprietary Trident Vault integrates advanced security features with 1-to-1 insured custody, addressing theft, fraud, and catastrophic risks for retail and institutional investors.</li>
    </ul>
  </li>
</ul>

<h3 id="urgent-vulnerability-disclosures">Urgent Vulnerability Disclosures</h3>
<ul>
  <li>00:10:25 Krux releases security fix for AES-CBC encryption flaw [<a href="https://github.com/selfcustody/krux/releases/tag/v24.11.1">Github</a>]
    <ul>
      <li>Issue #477 revealed camera-captured entropy wasn’t properly utilized in AES-CBC encryption, reducing its intended security strength. This affected backups stored on flash drives, SD cards, and encrypted QR codes by users who switched from the default AES-ECB mode.</li>
      <li>Affected users are recommended install the latest update to resolve the issue. After updating, they should recreate all backups to apply the corrected encryption and restore full security.</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin">Bitcoin</h3>
<h4 id="software-releases--project-updates">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:16:05 <a href="https://github.com/taproot-wizards/bitcoin-script-hints.nvim">bitcoin-script-hints</a>: A magical neovim plugin for Bitcoin Script by Taproot Wizards</li>
</ul>

<h3 id="news--noteworthy">News &amp; Noteworthy</h3>
<h4 id="business--finance">Business &amp; Finance</h4>
<ul>
  <li>Leading domain registrars Namecheap surpasses $73M in bitcoin revenue since its 2020 BTCPay integration [<a href="https://blog.btcpayserver.org/case-study-namecheap/">BTCPay Blog</a>]</li>
</ul>

<h3 id="bitcoin-cont">Bitcoin (Cont.)</h3>
<h4 id="software-releases--project-updates-1">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:17:14 BDK <a href="https://github.com/bitcoindevkit/bdk/releases/tag/v0.30.0">v0.30.0</a>
    <ul>
      <li>This release bumps the MSRV to 1.63.0 and updates the rusqlite dependency version to 0.31 to be aligned with the upcoming 1.0.0 release. These changes will prepare projects for migrating wallet data to the 1.0.0 version of BDK.</li>
    </ul>
  </li>
  <li>00:17:38 BTCPay Server <a href="https://github.com/btcpayserver/btcpayserver/releases/tag/v2.0.3">v2.0.3</a>
    <ul>
      <li>“If you are using Boltcards, we advise you to update to this release.”</li>
      <li>New features:
        <ul>
          <li>Greenfield: Histograms: Add Lightning data and API endpoints</li>
          <li>Greenfield: Add image upload for app items</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:19:53 Nunchuk Desktop <a href="https://github.com/nunchuk-io/nunchuk-desktop/releases/tag/1.9.40">v1.9.40</a> / Android <a href="https://github.com/nunchuk-io/nunchuk-android/releases/tag/android.1.9.54">v1.9.54</a>
    <ul>
      <li>Support Coldcard as inheritance key</li>
      <li>Option to Send all remaining for batch transactions</li>
    </ul>
  </li>
  <li>00:20:20 Proton Wallet <a href="https://x.com/ProtonWallet/status/1858533691422544035">Update</a>
    <ul>
      <li>Adds Replace-By-Fee (RBF), to speed up the confirmation speed of transactions</li>
    </ul>
  </li>
  <li>00:23:58 Bitcoin Keeper
    <ul>
      <li><a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v1.2.20">v1.2.20</a>
        <ul>
          <li>Redesign transaction priority screen</li>
          <li>Enable remote Key sharing and signing for Blockstream Jade and seed key
            <ul>
              <li>Improve transaction fee estimation</li>
            </ul>
          </li>
          <li>Add transaction details to view while signing external PSBTs</li>
        </ul>
      </li>
      <li><a href="https://github.com/bithyve/bitcoin-keeper/releases/tag/v1.2.19">v1.2.19</a>
        <ul>
          <li>Coldcard vault registration via NFC - Android bug fixed</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:24:40 Nix Bitcoin <a href="https://github.com/fort-nix/nix-bitcoin/releases/tag/v0.0.115">v0.0.115</a>
    <ul>
      <li>bitcoind: 27.1 -&gt; 28.0</li>
      <li>clboss: 0.13.3 -&gt; 0.14.0</li>
      <li>electrs: 0.10.5 -&gt; 0.10.6</li>
      <li>trustedcoin: 0.8.2 -&gt; 2024-11-1</li>
      <li>The lnd module’s ExecStartPost script is now extensible with custom scripts</li>
    </ul>
  </li>
  <li>00:25:09 Krux <a href="https://github.com/selfcustody/krux/releases/tag/v24.11.0">v24.11.0</a>
    <ul>
      <li>Tamper Check Flash Hash and Tamper Check Code (Experimental): the feature verifies the integrity of the device’s flash memory by generating a unique tamper indicator that relies on hash properties</li>
      <li>Add Flash Map: an auxiliary tool that allows users to visualize the regions of the device’s memory that are empty</li>
      <li>Add Japanese Translation</li>
      <li>BIP85: Allow Export Base64 Passwords</li>
      <li>Vulnerability Fix: Block Import of Python Modules from SD Card</li>
      <li>Add Compatibility to Partial Text Mnemonic QR Codes</li>
      <li>Add Multi-keypad Position Indicator</li>
      <li>Add Computer simulator for WonderMV device</li>
      <li>Krux Ethos: Guidelines have been created to assist with decision-making regarding the Krux project’s interactions</li>
    </ul>
  </li>
  <li>00:26:49 RoboSats <a href="https://github.com/RoboSats/robosats/releases/tag/v0.7.3-alpha">v0.7.3</a>
    <ul>
      <li>Websockets now working on Android app: this enables instant chat and Nostr order book features</li>
      <li>First external coordinator now available: you can now see @lnp2pBot orders on RoboSats UI</li>
      <li>Better display coordinator info on the Create Order form</li>
      <li>Charts now depend on selected currency</li>
    </ul>
  </li>
  <li>00:26:57 Bitkey App <a href="https://bitkey.world/en-US/releases">v2024.73.0</a>
    <ul>
      <li>Now see Coinbase offers alongside other partner exchanges when you sell bitcoin.</li>
      <li>Bitkey introduces an inheritance feature, enabling users to designate a single beneficiary for simplified fund transfer after their passing. A 6-month waiting period safeguards against fraudulent or accidental claims. [<a href="https://bitkey.build/inheritance-simplifying-the-transfer-of-bitcoin-to-future-generations/">Blog post</a>]
        <ul>
          <li>Beneficiaries must set up a Bitkey wallet to receive funds, but cannot view the benefactor’s wallet details. Owners retain control over beneficiary changes.</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:31:07 RewindBitcoin <a href="https://x.com/landabaso/status/1860353605305307560">v1.1.3</a>
    <ul>
      <li>Enhancements:
        <ul>
          <li>Emergency Addresses are now pre-filled by default, with contextual help provided</li>
          <li>The app is now more resilient: it operates independently, even if backend services are unavailable or the backend goes offline</li>
        </ul>
      </li>
      <li>Robustness to Network Errors:
        <ul>
          <li>Automated and reasonable retries for network failures</li>
          <li>Improved handling of Electrum node disconnections</li>
          <li>Friendly, actionable error messages for poor connectivity</li>
          <li>Optimized timeouts for better performance in weak network conditions</li>
          <li>Avoids unnecessary network usage while the app is in the background and resumes seamlessly when restored to the foreground</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:35:15 Umbrel <a href="https://github.com/getumbrel/umbrel/releases/tag/1.3.0-beta.3">v1.3.0</a>
    <ul>
      <li>Swappable apps: You can now choose which Bitcoin node app you want to run: Bitcoin Node, Bitcoin Knots, or Libre Relay, and select your preferred Electrum server app: Electrs, Fulcrum, or ElectrumX.</li>
      <li>Cloudflare DNS: Enable Cloudflare DNS for improved reliability, or disable it to inherit DNS settings from your router.</li>
      <li>Add Factory Reset option</li>
    </ul>
  </li>
  <li>00:35:32 ESP-Miner <a href="https://github.com/skot/ESP-Miner/releases/tag/v2.4.0">v2.4.0</a>
    <ul>
      <li>Re-worked how we publish artifacts when releasing new builds</li>
      <li>Use the same espressif/idf release for github and vscode</li>
      <li>Add OLED Bitaxe logo screen</li>
      <li>Add all in one factory file script</li>
      <li>Replace default address with a prompt</li>
      <li>Add info for check on update</li>
    </ul>
  </li>
  <li>00:35:36 Boltz boltz-web-app <a href="https://github.com/BoltzExchange/boltz-web-app/releases/tag/v1.5.1">v1.5.1</a>
    <ul>
      <li>Disable EVM connect button for invalid pairs</li>
      <li>Loading spinner when fetching signer balance</li>
      <li>Add RSK to mainnet config</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight">Project spotlight</h4>
<ul>
  <li>00:35:43 <a href="https://wallet.tether.io/">Wallet Dev Kit</a> (WDK) by Tether: a multi asset cryptocurrency wallet library in JavaScript. [<a href="https://docs.wallet.tether.io/">Documentation</a>]
    <ul>
      <li>“An open-source, self-custodial toolkit for developers to create Bitcoin and USD₮ wallets for humans, AI and robots”</li>
    </ul>
  </li>
  <li>00:35:51 ScriptLab: Uncomplicating Bitcoin Script: Learn and Code Scripts with blocks [<a href="https://github.com/bellujrb/scriptlab">Github</a>]
    <ul>
      <li>Script Lab allows users to create Bitcoin scripts through an intuitive drag-and-drop interface or by generating basic scripts via chat</li>
    </ul>
  </li>
  <li>00:36:04 Mempal: A Bitcoin mempool monitoring and notification app for Android. [<a href="https://github.com/aeonBTC/Mempal">Github</a>]
    <ul>
      <li>“Mempal is a Bitcoin monitoring app that allows users to effortlessly track real-time fee rates and mempool depth for smarter transaction management.”</li>
    </ul>
  </li>
  <li>00:36:44 <a href="https://debifi.com/">Debifi</a>: A Bitcoin-backed lending platform providing institutional-grade liquidity
    <ul>
      <li>Debifi App <a href="https://x.com/debificom/status/1858897785044500642">Update</a>
        <ul>
          <li>Add support for Coldcard</li>
          <li>Now available on the App Store</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:37:41 Dart-bip85 package: A Flutter binding for the rust-bip85 which is an updated version of the original rust-bip85. [<a href="https://pub.dev/packages/bip85">Repository</a>]</li>
  <li>00:37:45 Descriptors Go: An experimental Go library to handle Bitcoin output descriptors, including miniscript and tapminiscript. [<a href="https://github.com/benma/descriptors-go/">Github</a>]</li>
  <li>00:37:47 tick-tock-tui: A TUI app to handle Bitcoin data provided by Mempool: fees, blocks and price converter. [<a href="https://github.com/sectore/tick-tock-tui">Github</a>]</li>
  <li>00:37:56 Awesome-bitcoin-guide: The Ultimate Bitcoin Guide: Secure, Private, and Informed Usage, by iAnonymous3000 [<a href="https://github.com/iAnonymous3000/awesome-bitcoin-guide">Github</a>]
    <ul>
      <li>Comprehensive Bitcoin guide focusing on operational security, wallet management, privacy best practices, and risk mitigation</li>
    </ul>
  </li>
  <li>00:38:30 BitAxe HAS Dashboard: A Home Assistant dashboard for BitAxe Miners [<a href="https://github.com/satoshiradio/bitaxe-HAS-dashboard">Github</a>]
    <ul>
      <li>“This dashboard brings all your BitAxe miners and Satoshi Radio pool stats together in one clean, informative interface.”</li>
    </ul>
  </li>
  <li>00:38:39 <a href="https://www.radpool.xyz/1/index.html">Radpool</a>: Syndicated Mining Pool
    <ul>
      <li>Radpool introduces a syndicated design, using Mining Service Providers (MSPs) to decentralize bitcoin mining and reduce transaction censorship risks.</li>
    </ul>
  </li>
  <li>00:38:43 <a href="https://satadelica.btcdir.org/">Satadelica</a>: A trippy Bitcoin price visualiser [<a href="https://github.com/BXL909/Satadelica">Github</a>]
    <ul>
      <li>Updates real-time Bitcoin metrics like price, block height and hashrate, and allow users to visualize market movements through ‘trippy’ graphics and tools.</li>
    </ul>
  </li>
</ul>

<h3 id="vulnerability-disclosures">Vulnerability Disclosures</h3>
<ul>
  <li>00:39:16 Nearest neighbor attack: exploiting nearby Wi-Fi for covert access [<a href="https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/">Volexity</a>]
    <ul>
      <li>Russian APT GruesomeLarch’s novel Wi-Fi breach: The group leveraged nearby networks to infiltrate a Ukrainian-focused organization’s systems. Proximity was key in this “Nearest Neighbor Attack,” bypassing MFA-protected services by exploiting Wi-Fi credentials.</li>
    </ul>
  </li>
  <li>00:39:27 New Ghost Tap attack exploits NFC mobile payments for fraud [<a href="https://www.bleepingcomputer.com/news/security/new-ghost-tap-attack-abuses-nfc-mobile-payments-to-steal-money/">Bleeping Computer</a>]
    <ul>
      <li>The Ghost Tap attack exploits stolen credit card data and NFC technology to commit scalable financial fraud through global networks of money mules.</li>
      <li>Attackers use banking malware and phishing to obtain payment credentials, relaying NFC card details remotely via servers.</li>
    </ul>
  </li>
  <li>00:39:38 Leaked documents reveal Graykey, a phone unlocking tool, provides only partial access to iPhones running iOS 18 and 18.0.1, including the iPhone 12 through iPhone 16 series. [<a href="https://archive.ph/hdWRw">404Media</a>]
    <ul>
      <li>Graykey’s capabilities with Android devices vary, with limited access on newer Pixel phones unless unlocked at least once, highlighting challenges due to the range of Android manufacturers.</li>
    </ul>
  </li>
  <li>00:40:38 OverSecured researchers discover seven vulnerabilities in Android and Google Pixel devices, affecting millions of users worldwide.[<a href="https://blog.oversecured.com/Disclosure-of-7-Android-and-Google-Pixel-Vulnerabilities/">Oversecured</a>]
    <ul>
      <li>Vulnerabilities allow unprivileged apps to access geolocation and grant VPN bypass privileges, posing significant security risks.
Other issues include arbitrary file theft via WebView, incorrect Bluetooth permission checks, and HTML injection vulnerabilities, all of which have been fixed by Google.</li>
    </ul>
  </li>
  <li>00:41:03 Apple urgently patches vulnerabilities affecting macOS and iOS, including CVE-2024-44308 (arbitrary code execution) and CVE-2024-44309 (cross-site scripting). [<a href="https://www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/">Security Week</a>]
    <ul>
      <li>The flaws involve JavaScriptCore and WebKit, primarily targeting Intel-based macOS devices. Apple advises immediate updates to macOS Sequoia 15.1.1 and iOS versions.</li>
    </ul>
  </li>
  <li>00:41:32 Decades-old security flaws in Ubuntu’s Needrestart Package [<a href="https://thehackernews.com/2024/11/decades-old-security-vulnerabilities.html">The Hacker News</a>]
    <ul>
      <li>Researchers discover local privilege escalation vulnerabilities in Ubuntu’s needrestart package, installed since version 21.04. Exploits allow attackers to gain root access via manipulated environment variables like PYTHONPATH and RUBYLIB.</li>
    </ul>
  </li>
  <li>00:41:48 Chinese man arrested in Bangkok for operating, from a van, a 3km-range SMS blaster targeting populated areas, sending one million phishing messages per hour [<a href="https://x.com/sickcodes/status/1859979785847570718">Twitter post</a>]</li>
  <li>D-Link discontinues legacy routers over remote code execution flaw [<a href="https://www.bleepingcomputer.com/news/security/d-link-urges-users-to-retire-vpn-routers-impacted-by-unfixed-rce-flaw/">Bleeping Computer</a>]
    <ul>
      <li>D-Link urges users to replace DSR-150 and DSR-250 VPN routers due to an unfixed remote code execution vulnerability. The issue affects all hardware and firmware versions, with no patch planned.</li>
    </ul>
  </li>
  <li>00:42:28 Five dollar wrench attack:
    <ul>
      <li>A gym trainer in Mira Road, Mumbai, was robbed of ~$56,000 by an eight-member gang during a USDT cryptocurrency deal. [<a href="https://www.latestly.com/india/news/cryptocurrency-scam-in-mumbai-gym-trainer-robbed-of-inr-13-5-lakh-by-gang-of-8-in-mira-road-while-trying-to-buy-usdt-cryptocurrency-case-registered-6421852.html">LatestLy</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="privacy--other-related-bitcoin-projects">Privacy &amp; Other Related Bitcoin Projects</h3>
<h4 id="software-releases--project-updates-2">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:42:53 SimpleX
    <ul>
      <li><a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.2.0-beta.1">v6.2.0-beta.1</a>
        <ul>
          <li><a href="https://runonflux.com">Flux</a> - the second pre-configured operator in the app to improve metadata privacy</li>
          <li>Improved chat navigation (Android/desktop apps):
            <ul>
              <li>Open chat on the first unread message</li>
              <li>Jump to quoted messages anywhere in the conversation</li>
            </ul>
          </li>
        </ul>
      </li>
      <li><a href="https://github.com/simplex-chat/simplex-chat/releases/tag/v6.2.0-beta.0">v6.2.0-beta.0</a>
        <ul>
          <li>Edge-to-edge interface with translucent toolbars*</li>
          <li>Reachable UI in desktop apps - greatly reduces risks to send a message to a wrong chat accidentally</li>
          <li>Conversation and settings toolbars moved to the bottom with reachable UI*</li>
          <li>Don’t ask passcode/biometric to open your chat profiles (only required to add/delete)</li>
          <li>Better stability of iOS notifications delivery</li>
          <li>
            <ul>
              <li>Android and desktop apps</li>
            </ul>
          </li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:43:06 Signal
    <ul>
      <li>Introduces <a href="https://signal.org/blog/call-links/">Call Links</a> and enables users to share unique meeting URLs for quick access to calls without forming group chats. Admin controls and reusable links improve flexibility for recurring meetings.</li>
    </ul>
  </li>
</ul>

<h4 id="project-spotlight-1">Project spotlight</h4>
<ul>
  <li>00:43:28 <a href="https://deflock.me/">DeFlock</a>: An open-source crowdsourced project mapping Automated License Plate Readers (ALPRs) around the world
    <ul>
      <li>The project aims to raise public awareness about the widespread use of ALPRs, the privacy implications, and the extent of surveillance networks.</li>
    </ul>
  </li>
</ul>

<h3 id="lightning--l2">Lightning + L2+</h3>
<h4 id="project-spotlight-2">Project spotlight</h4>
<ul>
  <li>00:43:56 Phoenix Server Lightning Wallet: An open-source wallet built on top of phoenixd [<a href="https://github.com/ZapriteApp/phoenix-server-wallet">Github</a>]
    <ul>
      <li>This project is a Lightning wallet interface built on top of Phoenixd server designed for Umbrel Server and Start9</li>
      <li>It lets you easily manage your phoenixd transactions and leverage the power of Phoenixd for your Bitcoin Lightning wallet needs</li>
    </ul>
  </li>
  <li>00:44:32 <a href="https://brrr.gandlaf.com/">Cashu Brrr</a>: Cashu ecash money printer [<a href="https://github.com/gandlafbtc/cashu-brrr">Github</a>]
    <ul>
      <li>Print your own ecash notes using either ecash from the same mint or Lightning</li>
    </ul>
  </li>
  <li>00:45:08 SING4SATS: Karaoke: A web client which allows users to request songs to be added to the queue, leveraging LNURL and Fedimod [<a href="https://github.com/JCm8/sing4sats-client">Github</a>]</li>
</ul>

<h4 id="software-releases--project-updates-3">Software Releases &amp; Project Updates</h4>
<ul>
  <li>00:45:44 Primal <a href="https://github.com/PrimalHQ/primal-android-app/releases/tag/2.0.21">v2.0.21</a>
    <ul>
      <li>Updates:
        <ul>
          <li>New tab: READS</li>
          <li>New tab: EXPLORE</li>
          <li>Feed Marketplace</li>
          <li>Advanced Search</li>
        </ul>
      </li>
      <li>Launch Primal Premium: obtain a Primal name and Nostr tools for power users for $7 per month.</li>
    </ul>
  </li>
  <li>00:47:27 LND <a href="https://github.com/lightningnetwork/lnd/releases/tag/v0.18.4-beta.rc1">v0.18.4rc1</a>
    <ul>
      <li>The main channel state machine and database now allow for processing and storing custom Taproot script leaves, allowing the implementation of custom channel types</li>
      <li>A new <code class="language-plaintext highlighter-rouge">protocol.simple-taproot-overlay-chans</code> configuration item/CLI flag was added to turn on custom channel functionality</li>
      <li>Compatibility with bitcoind  v28.0 was ensured by updating the version the CI pipeline is running against</li>
      <li>Performance Improvements: A new method AssertTxnsNotInMempool has been added to lntest package to allow batch exclusion check in itest</li>
    </ul>
  </li>
  <li>00:48:05 Cashu Development Kit <a href="https://github.com/cashubtc/cdk/releases/tag/v0.5.0">v0.5.0</a>
    <ul>
      <li>This release included support with NUT-17 websockets for the mint as well as many bug fixes and improvements.
        <ul>
          <li>Add description to <code class="language-plaintext highlighter-rouge">MintQuoteBolt11Request</code></li>
          <li>Add description to <code class="language-plaintext highlighter-rouge">mint_quote</code></li>
          <li>Add <code class="language-plaintext highlighter-rouge">amount</code> and <code class="language-plaintext highlighter-rouge">fee_paid</code> to <code class="language-plaintext highlighter-rouge">Melted</code></li>
          <li>Add <code class="language-plaintext highlighter-rouge">from_proofs</code> on <code class="language-plaintext highlighter-rouge">Melted</code></li>
          <li>Add unit on <code class="language-plaintext highlighter-rouge">PaymentResponse</code></li>
          <li>Add description for mint quote</li>
          <li>Add cache to some endpoints</li>
          <li>Add Proofs trait</li>
          <li>Wallet verifies keyset id when first fetching keys</li>
          <li>NUT18 payment request support</li>
          <li>Add <code class="language-plaintext highlighter-rouge">Wallet::get_proofs_with</code></li>
          <li>Mint NUT-17 Websocket support</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:48:36 Phoenix Wallet <a href="https://github.com/ACINQ/phoenix/releases/tag/android-v2.4.3">v2.4.3</a>
    <ul>
      <li>Redesigned the screen for sending payments: The contacts list and a free-form text input are now displayed first, instead of trying to open the scanner immediately. A button to read QR codes on images stored on disk has also been added.</li>
      <li>Photos can now be attached to contacts (Android): You can also use an image from your device’s gallery. Photos are stored in the app private folder. Note that on iOS this feature was added in a previous version.</li>
    </ul>
  </li>
  <li>00:48:47 Zeus
    <ul>
      <li>Wallet <a href="https://github.com/ZeusLN/zeus/releases/tag/v0.9.3-beta1">v0.9.3-beta1</a>
        <ul>
          <li>Channel reserve display</li>
          <li>Bitcoin denominated amounts: display with spaces</li>
          <li>ZEUS Pay: UX improvements</li>
        </ul>
      </li>
      <li>Zeus Pay <a href="https://njump.me/nevent1qgsrf5h4ya83jk8u6t9jgc76h6kalz3plp9vusjpm2ygqgalqhxgp9gqyrw6d974sgj6sf4m7x6zdv095y4ahenl59fv63rwde6hucr3ug2sg6sgvm8">Update</a>
        <ul>
          <li>All payments will incur no fee for the receiver (previously 2.5-10% depending on amount)</li>
          <li>The minimum amount receivable has been lowered to 1 satoshi (previously 10 satoshis)</li>
        </ul>
      </li>
      <li>Zeus introduces Zeus White: White glove node management, point of sale, and integrated enterprise solutions for businesses [<a href="https://blog.zeusln.com/introducing-zeus-white/">Announcement</a>]</li>
    </ul>
  </li>
  <li>00:49:56 Nutstash <a href="https://github.com/gandlafbtc/nutstash-wallet/releases/tag/nutstash-v2.0.1">v2.0.1</a>
    <ul>
      <li>New re-build</li>
      <li>Multi-mint selection</li>
      <li>Wallet Backup</li>
      <li>New Ui</li>
      <li>Integrated Nostr DM</li>
      <li>Contact list</li>
      <li>Zap contacts</li>
    </ul>
  </li>
  <li>00:49:59 Nutshell <a href="https://github.com/cashubtc/nutshell/releases/tag/0.16.3">v0.16.3</a>
    <ul>
      <li>Mint:
        <ul>
          <li>bolt11 invoices with different units on the same mint now settle externally via the Lightning network</li>
          <li>Turn on multipath payments (MPP) by default for LND and CLN</li>
          <li>NUT-06: Signal alternative URLs to reach the mint from using <code class="language-plaintext highlighter-rouge">.env</code> var <code class="language-plaintext highlighter-rouge">MINT_INFO_URLS</code></li>
        </ul>
      </li>
      <li>Wallet:
        <ul>
          <li>Store Lightning invoices in new melt and mint quote tables</li>
          <li>Sort outputs by amount to mitigate transaction amount privacy leaks</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:50:07 Fountain <a href="https://blog.fountain.fm/p/1-1-8">v1.1.8</a>
    <ul>
      <li>Add and upvote tracks in the queue</li>
      <li>Support the artist currently playing</li>
      <li>Post in the live chat</li>
      <li>Save tracks to your library</li>
      <li>Listen to Fountain Radio on other apps</li>
      <li>Artist Takeovers: Artists can now take control of the music and host a listening party or an AMA</li>
      <li>Add prompt to share to Nostr after creating a clip</li>
      <li>Add OPML file explorer</li>
    </ul>
  </li>
  <li>00:50:10 Breez SDK <a href="https://github.com/breez/breez-sdk-greenlight/releases/tag/0.6.4">v0.6.4</a> - Native (Greenlight Implementation)
    <ul>
      <li>Improve sync performance by moving to an incremental sync</li>
      <li>Improve trampoline payments reliability and fix fees passed to the trampoline node</li>
      <li>Add list_swaps API</li>
      <li>Auto recover network connections after hibernation</li>
      <li>Stability fixes for trampoline payments</li>
    </ul>
  </li>
  <li>Ride-The-Lightning <a href="https://github.com/Ride-The-Lightning/RTL/releases/tag/v0.15.4">v0.15.4</a>
    <ul>
      <li>Improve authentication logic for clearer error handling and validation during login and password reset processes</li>
      <li>Refine application settings handling to ensure stricter validation of access keys</li>
    </ul>
  </li>
  <li>00:50:14 Lnp2pBot <a href="https://github.com/lnp2pBot/bot/releases/tag/v0.11.1">v0.11.1</a>
    <ul>
      <li>Show the previous Status to DISPUTE in dispute message for solvers</li>
      <li>Add MWK currency</li>
      <li>Add community stats</li>
    </ul>
  </li>
  <li>00:50:17 BoardWalk <a href="https://x.com/boardwalk_cash/status/1859278721301217477">Update</a>
    <ul>
      <li>Add support for Cashu payment requests</li>
      <li>Add ability to request and send payments for specific amounts</li>
      <li>All users now have a reusable ecash address to receive payments</li>
      <li>Use dollars or bitcoin. Perfect for point of sale or tips</li>
    </ul>
  </li>
  <li>00:50:19 Geyser <a href="https://about.geyser.fund/OLD/Archive/blog/november-2024-release-2">November second release</a>
    <ul>
      <li>Heroes Hall of Fame: a page that highlights the top projects and heroes driving Bitcoin adoption</li>
      <li>Ambassadors: users can spread awareness of Bitcoin initiatives and earn recognition for their contributions</li>
      <li>Hero Link: a unique link for users to share projects and earn points as ambassadors</li>
      <li>Hero Card: a card displaying user rankings and impact across creator, contributor, and ambassador roles</li>
      <li>Better Profile Stats: updated profiles now show detailed stats and rankings across all hero categories</li>
    </ul>
  </li>
  <li>00:50:20 Aqua Wallet <a href="https://github.com/AquaWallet/aqua-wallet/releases/tag/v0.2.5">v0.2.5</a> - Make AQUA Great Again
    <ul>
      <li>Phase 1 of UI refresh with new AQUA logo and colors</li>
      <li>Watch-Only Wallet export for Bitcoin and Liquid</li>
      <li>Add UTXO filtering to prevent errors when sending back-to-back Lowball transactions</li>
      <li>Add second guard to prevent double-pay issue with Boltz sends</li>
    </ul>
  </li>
  <li>00:50:47 Clams Remote <a href="https://github.com/clams-tech/Remote/releases/tag/remote-2.5.0">v2.5.0</a>
    <ul>
      <li>Add BIP353 support</li>
    </ul>
  </li>
</ul>

<h3 id="nostr">Nostr</h3>
<h4 id="project-spotlight-3">Project spotlight</h4>
<ul>
  <li>00:50:52 NDK Mobile: A React Native/Expo implementation of NDK (Nostr Development Kit) that provides a complete toolkit for building Nostr applications on mobile platforms. [<a href="https://github.com/nostr-dev-kit/ndk/tree/master/ndk-mobile">Github</a>]
    <ul>
      <li>Features:
        <ul>
          <li>Multiple signer implementations (NIP-07, NIP-46, Private Key)</li>
          <li>SQLite-based caching for offline support</li>
          <li>Subscription management with automatic reconnection</li>
          <li>React Native and Expo compatibility</li>
          <li>React hooks for easy state management</li>
          <li>NDK Mobile is the library behind Olas and the (upcoming) Honeypot wallet</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>00:50:55 Olas: An Instagram-like client for iOS and Android [<a href="https://njump.me/nevent1qqs9wv8w0dmkcmdnez73l5way0kjj9zz8y09nfcjcqy9pft29l9ws6cpp4mhxue69uhkummn9ekx7mqzyrafsj7hmweg9ur7zmn6apajdg48hxuskujx53rhrux0ttjcqx84y89n8mh">Announcement</a>]
    <ul>
      <li>“Olas 0.1 provides a feed of videos (like those on flare/highlighter/zap.stream), picture events (kind:20, a new kind that no client had implemented yet) and the classical short notes with images attached we are all used to.” [<a href="https://testflight.apple.com/join/2FMVX2yM">TestFlight</a>]</li>
    </ul>
  </li>
  <li><a href="https://chachi.chat/">chachi.chat</a>: A relay-based group chat client for the web [<a href="https://git.v0l.io/verbiricha/chachi">Gitea</a>]
    <ul>
      <li>“NIP-29 allows creating groups that can be read by anyone or only authenticated users. These groups can be open to new members or require explicit approval from the group admins.” [<a href="https://njump.me/nevent1qqsv25qz88gdhu2c5a9ykhpltychv90726ngnllel2ka96g7xewn76szypl62m6ad932k83u6sjwwkxrqq4cve0hkrvdem5la83g34m4rtqeggls2ps">Note</a>]</li>
    </ul>
  </li>
  <li>00:51:26 Knox: A command-line Nostr bunker built with Deno. [<a href="https://gitlab.com/soapbox-pub/knox">Gitlab</a>]
    <ul>
      <li>“Knox is a new Nostr bunker CLI for running a NIP-46 remote signer and granting credentials to members of your team”</li>
    </ul>
  </li>
  <li>00:51:32 <a href="https://nostraut.net/">Nostraut</a>: Automate anything - on nostr
    <ul>
      <li>Nostraut is a platform designed to automate interactions on Nostr (schedule an event, receive notifications about events, and automatically react to events)</li>
    </ul>
  </li>
  <li>00:51:35 ezdvm: Simple DVM python implementation [<a href="https://github.com/dtdannen/ezdvm">Github</a>]
    <ul>
      <li>Easily run any python code behind a DVM on Nostr. Just pick a kind (for basic text-to-text use 5050) and put the code you want to run in the <code class="language-plaintext highlighter-rouge">do_work()</code> function. Then run the DVM.</li>
    </ul>
  </li>
  <li>00:51:40 Futr: A cross-platform nostr client app written in haskell and qt5 [<a href="https://github.com/futrnostr/futr">Github</a>]</li>
  <li>00:51:45 <a href="https://nosey.vercel.app/">Nosey</a>: Nosey is a search app for nostr. Focus on supporting features similar to Twitter search directives. [<a href="https://github.com/akiomik/nosey">Github</a>]</li>
  <li>00:51:49 nos2x for Firefox: nostr signer extension for Firefox [<a href="https://github.com/diegogurpegui/nos2x-fox">Github</a>]
    <ul>
      <li>A fork from <a href="https://github.com/fiatjaf/nos2x">nos2x</a> by Fiatjaf, focused on Firefox and related browsers.</li>
    </ul>
  </li>
</ul>

<h4 id="software-releases--project-updates-4">Software Releases &amp; Project Updates</h4>
<ul>
  <li>Damus
    <ul>
      <li><a href="https://github.com/damus-io/damus/releases/tag/v1.11-10">v1.11-10</a>
        <ul>
          <li>Add Damus Share sheet action</li>
          <li>Add new easy to use video controls for full screen video</li>
          <li>Add Edit, Share, and Tap-gesture in Profile pic image viewer</li>
          <li>Add Apple translation popovers for notes for iOS 17.4+ and macOS 14.4+</li>
          <li>Allow multiple images to be uploaded at the same time</li>
          <li>Add support for pasting images from the clipboard to the post composer</li>
          <li>Add NDB search functionality to the universe view</li>
        </ul>
      </li>
      <li>New <a href="https://njump.me/nevent1qgsraldwhvwcjgltmxwfu7kw8dqef2692yhzheuurd7k3kfy8cxjdqgqyz54jkm9xtzqkxeh54txnvt5zfsn3u0kgrttsvq8zw2dv5y7glsmcm5plac">TestFlight</a> available, with the following features:
        <ul>
          <li>Improved video controls</li>
          <li>Stability improvements to video support</li>
          <li>New image share options on the full screen carousel</li>
          <li>Hashtag suggestions</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>YakiHonne <a href="https://njump.me/nevent1qgszpxr0hql8whvk6xyv5hya7yxwd4snur4hu4mg5rctz2ehekkzrvcqyq0zhhc5pf4282h8culuavgjr8fyqf9d6t389ac2yjtuz9eer3wnysu8666">Update</a>
    <ul>
      <li>Mobile:
        <ul>
          <li>Adjust your home feed with what interests you the most</li>
          <li>Home suggestion box can be enabled and disabled</li>
          <li>Profile preview can be enabled and disabled</li>
          <li>Replies can be previewed and highlighted directly</li>
          <li>Articles, videos and curations can be quoted inside notes for more exposure</li>
          <li>Add the ability to link connected wallet to your profile for zaps receiving</li>
        </ul>
      </li>
      <li>Web:
        <ul>
          <li>Connected threads: A refined notes thread makes following entire discussions more intuitive</li>
          <li>Users can now personalize their home feed by selecting their top interests</li>
          <li>Replies can now be previewed directly from the note card, without needing to open the full note</li>
          <li>Wallets can now be linked to your account directly from the wallet page</li>
          <li>Drafts for notes and replies are now saved, allowing easy edits later</li>
          <li>The suggestions box on the home page can now be hidden</li>
          <li>Articles, videos and curations can now be quoted and shared as notes</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Flotilla <a href="https://github.com/coracle-social/flotilla/releases/tag/0.1.0">v0.1.0</a>
    <ul>
      <li>Remove nip05 login, use nostrconnect instead</li>
      <li>Add types file</li>
      <li>Add notification badges</li>
      <li>Add checked store and set data</li>
    </ul>
  </li>
  <li>Pokey
    <ul>
      <li><a href="https://github.com/KoalaSat/pokey/releases/tag/v0.1.0-alpha">v0.1.0</a>
        <ul>
          <li>Add Mute thread button for notifications</li>
        </ul>
      </li>
      <li><a href="https://github.com/KoalaSat/pokey/releases/tag/v0.0.9-alpha">v0.0.9</a>
        <ul>
          <li>Notifications now display NIP05 names if available</li>
        </ul>
      </li>
    </ul>
  </li>
  <li>Oxchat <a href="https://github.com/0xchat-app/0xchat-app-main/releases/tag/v1.4.1-release">v1.4.1</a>
    <ul>
      <li>Optimize video player UI with support for landscape mode</li>
      <li>Add audio configuration in settings</li>
      <li>Enable copying of ecash tokens from ecash messages</li>
      <li>Support for media deletion</li>
    </ul>
  </li>
  <li>Zapstore <a href="https://github.com/zapstore/zapstore/releases/tag/0.1.6">v0.1.6</a>
    <ul>
      <li>Performance: Background loading, remove deprecated</li>
      <li>Allow sending system info and error report</li>
      <li>Add Deeplink signer param support</li>
    </ul>
  </li>
  <li>Grain <a href="https://github.com/0ceanSlim/grain/releases/tag/v0.2.0">v0.2.0</a>
    <ul>
      <li>Separate YAML Files for Blacklists and Whitelists: Moved the blacklist and whitelist configurations out of the main config.yml and into their own separate YAML files</li>
      <li>Backup Relay Support: Introduced a new feature to configure a backup relay.</li>
      <li>Support for Nostr Mutelists: Introduced the ability to consider one or multiple pubkeys’ nostr mutelists as blacklists</li>
      <li>Configurable Time Constraints: Added new configurations to reject events based on their <code class="language-plaintext highlighter-rouge">created_at</code> timestamps</li>
    </ul>
  </li>
  <li>OpenLibrarian <a href="https://github.com/RydalWater/OpenLibrarian/releases/tag/v0.1.3">v0.1.3</a>
    <ul>
      <li>Add second round of testing (up to 77% coverage)</li>
      <li>Separate features &amp; updates section</li>
      <li>Add privacy policy</li>
      <li>Include alternative secondary API for pulling book covers based on isbn</li>
    </ul>
  </li>
  <li>Nostr-PHP <a href="https://github.com/nostrver-se/nostr-php/releases/tag/1.5.1">v1.5.1</a>
    <ul>
      <li>Support for PHP 8.4</li>
      <li>Add id property to Subscription class</li>
      <li>Update example snippets</li>
      <li>AllowDynamicProperty in Filter class</li>
    </ul>
  </li>
  <li>00:52:00 GifBuddy <a href="https://njump.me/nevent1qqs9kct03kpq3rx5jclzwdtzhgz8qvjdnp6j2ydlaaqd7s93m0jkrsgzyzl8xkxylegpfrxv4lqzags9mqq5tcjn3zd289vd4tagvdcy0jzqufkm7tm">Update</a>
    <ul>
      <li>Add your own gifs with uploads</li>
      <li>Load more gifs to find what you want</li>
      <li>Faster gif loading</li>
      <li>Less memory intensive on the server</li>
    </ul>
  </li>
</ul>

<h3 id="boosts">Boosts</h3>
<ul>
  <li>00:52:30 Thanks to everyone who streamed sats, and shoutout to our top boosters:
    <ul>
      <li>[🏆 TOP BOOSTER] @Chris (5,000 sats) “Is there a technical limitation that prevents Coldcard Q from being able to type a note, and export it encrypted with a deterministic encryption key, so that it can only be decrypted on another Q with the same seed AND same passphrase? Thanks!”</li>
      <li>@podconf (500 sats) “THIS PODCAST IS NONCOMPLIANT”</li>
      <li>@btconboard (300 sats) “Liana is massively underrated”</li>
    </ul>
  </li>
</ul>

<h3 id="bitcoin-optech-newsletter">Bitcoin Optech Newsletter</h3>
<ul>
  <li>Highlights from recent Bitcoin Optech Newsletters
    <ul>
      <li><a href="https://bitcoinops.org/en/newsletters/2024/11/22/">330</a>
        <ul>
          <li>Pluggable channel factories: ZmnSCPxj <a href="https://delvingbitcoin.org/t/pluggable-channel-factories/1252/">posted</a> to Delving Bitcoin a proposal to make a small set of changes to the BOLT specification to allow existing LN software to manage LN-Penalty payment channels within a channel factory using a software plugin.</li>
          <li>Signet activity report: Anthony Towns <a href="https://delvingbitcoin.org/t/ctv-apo-cat-activity-on-signet/1257">posted</a> to Delving Bitcoin a summary of activity on the default signet related to proposed soft forks available through Bitcoin Inquisition.</li>
          <li>Update to LNHANCE proposal: Moonsettler <a href="https://delvingbitcoin.org/t/op-paircommit-as-a-candidate-for-addition-to-lnhance/1216">posted</a> to Delving Bitcoin and also the Bitcoin-Dev mailing list a proposal for a new opcode, OP_PAIRCOMMIT, to be added to the LNHANCE soft fork proposal that includes OP_CHECKTEMPLATEVERIFY and OP_CHECKSIGFROMSTACK.</li>
          <li>Covenants based on grinding rather than consensus changes: Ethan Heilman <a href="https://mailing-list.bitcoindevs.xyz/bitcoindev/CAEM=y+W2jyFoJAq9XrE9whQ7EZG4HRST01TucWHJtBhQiRTSNQ@mail.gmail.com/">posted</a> to the Bitcoin-Dev mailing list the summary of a paper he coauthored with Victor Kolobov, Avihu Levy, and Andrew Poelstra.</li>
        </ul>
      </li>
      <li><a href="https://bitcoinops.org/en/newsletters/2024/11/15/">329</a>
        <ul>
          <li>MAD-based offchain payment resolution (OPR) protocol: John Law <a href="https://delvingbitcoin.org/t/a-fast-scalable-protocol-for-resolving-lightning-payments/1233">posted</a> to Delving Bitcoin the description of a micropayment protocol that requires both participants to contribute funds to a bond that can be effectively destroyed at any time by either participant.</li>
          <li>Papers about IP-layer censorship of LN payments: Charmaine Ndolo <a href="https://delvingbitcoin.org/t/research-paper-on-ln-payment-censorship/1248">posted</a> to Delving Bitcoin summaries of two recent papers about reducing the privacy of LN payments and potentially censoring them.</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h3 id="news--noteworthy-cont">News &amp; Noteworthy (cont.)</h3>
<h4 id="bitcoin-1">Bitcoin</h4>
<ul>
  <li>00:55:05 Chaincode Labs launches the 2025 edition of its BOSS (Bitcoin Open-Source Software) program, a free, three-month program focused on Bitcoin and Lightning open-source software development [<a href="https://learning.chaincode.com/#BOSS">Website</a>]
    <ul>
      <li>The program runs from January to April 2025. Applications close on December 31, 2024.</li>
    </ul>
  </li>
</ul>

<h4 id="lightning--l2-1">Lightning + L2+</h4>
<ul>
  <li><a href="https://dlcmarkets.com/">DLC Markets</a> has transitioned from signet to mainnet, offering a secure, non-custodial Bitcoin derivatives platform. [<a href="https://blog.dlcmarkets.com/engineering-behind-dlcmarkets/">Blog post</a>]
    <ul>
      <li>Using Discreet Log Contracts and innovative features like Rust-based oracles and WebAssembly, it improves OTC trading efficiency.</li>
    </ul>
  </li>
  <li>Boltz integrates Rootstock swaps with the Lightning Network, enabling users to seamlessly move funds between the two networks. [<a href="https://blog.boltz.exchange/p/hello-rootstock-swaps">Announcement</a>]</li>
</ul>

<h4 id="nostr-1">Nostr</h4>
<ul>
  <li>00:55:49 Private and ad-free pay-per-query search engine <a href="https://kagi.com/">Kagi HQ</a>, joins Nostr [<a href="https://njump.me/nevent1qqsgldgngvxk5wfea5tny9sj4qj8zsv2caru44lr6c40avsd8jllaxgpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgqg5waehxw309aex2mrp0yhxgctdw4eju6t0qy28wumn8ghj7mn0wd68ytn00p68ytnyv4mqygp5zpx7mu7vtymgqtyrpz3aqzg09ptaf2ayazmjptx276e2kpyedyynk2y2">Note</a>]</li>
</ul>

<h4 id="business--finance-1">Business &amp; Finance</h4>
<ul>
  <li>00:57:06 Block, Inc. announces Proto, a suite of bitcoin mining products and services aimed at decentralizing hardware supply and enhancing network resiliency [<a href="https://www.mining.build/blog/introducing-proto-building-the-future-of-bitcoin-mining-hardware-2/">Press release</a>]
    <ul>
      <li>Its focus spans ASIC chips, mining rigs, and developer tools for diverse applications like home mining and energy reuse.</li>
    </ul>
  </li>
  <li>00:57:11 Casa introduces Casa Enterprise, a specialized product designed to help businesses securely manage their bitcoin treasuries through self-custody solutions. [<a href="https://blog.casa.io/introducing-casa-enterprise/">Blog post</a>]</li>
  <li>00:57:30 Swan Bitcoin sues former legal firm for conflict of interest in Tether case [<a href="https://x.com/theMiningPod/status/1860531063426080814">The Mining Pod</a>]
    <ul>
      <li>Swan Bitcoin files a lawsuit against its former legal firm, Gibson Dunn &amp; Crutcher, alleging breach of fiduciary duty and attorney malpractice. Swan claims Gibson Dunn created a conflict of interest by representing Tether in a competing case.</li>
    </ul>
  </li>
</ul>

<h4 id="tradfi">Tradfi</h4>
<ul>
  <li>00:57:46 Revolut’s cryptocurrency exchange, Revolut X, expands to 30 European countries after successful UK launch. [<a href="https://www.coindesk.com/business/2024/11/13/revolut-expands-crypto-exchange-across-eu-after-successful-launch-in-uk/">Coin Desk</a>]</li>
  <li>00:57:58 Private investment firm, Newmarket Capital, launches Battery Finance: Bitcoin-collateralized loan strategy. CEO explains bitcoin-backed private credit strategy on <a href="https://www.cnbc.com/video/2024/11/22/why-newmarket-capital-ceo-andrew-hohns-is-fusing-loans-with-bitcoin.html">CNBC</a></li>
</ul>

<h4 id="funding">Funding</h4>
<ul>
  <li>00:58:06 OpenSats announces:
    <ul>
      <li><a href="https://opensats.org/blog/m1sterc001guy-receives-lts-grant">Long-term support</a> for m1sterc001guy for his continued contributions to the Bitcoin ecosystem.</li>
      <li><a href="https://opensats.org/blog/3rd-wave-of-education-grants">Third wave of education grants</a>, dedicated to advancing Bitcoin literacy and community development across the globe:
        <ul>
          <li>BTC Map</li>
          <li>Yes Bitcoin Haiti</li>
          <li>Entropy Bitcoin Education</li>
          <li>Bitcoin 4all</li>
        </ul>
      </li>
      <li><a href="https://opensats.org/blog/doubling-down-on-nostr">Doubling down on Nostr</a>, with additional grants to:
        <ul>
          <li>Damus</li>
          <li>Gossip</li>
          <li>nostr.build</li>
          <li>nostr-sdk-ios</li>
          <li>ngit &amp; gitworkshop</li>
          <li>nostr-relay (-nestjs, -tray)</li>
          <li>Nostrocket</li>
          <li>DVMDash</li>
        </ul>
      </li>
    </ul>
  </li>
</ul>

<h4 id="mining">Mining</h4>
<ul>
  <li>00:58:12 Russia bans winter digital currency mining in Siberia, North Caucasus, and occupied Ukraine to address energy shortages [<a href="https://www.themoscowtimes.com/2024/11/19/russia-bans-winter-cryptocurrency-mining-in-siberia-north-caucasus-and-occupied-ukraine-a87065">The Moscow Times</a>]
    <ul>
      <li>The ban affects specific areas from December 1, 2024, to March 15, 2025, with annual restrictions in Siberia until 2031 and total bans in other regions.</li>
    </ul>
  </li>
</ul>

<h4 id="privacy">Privacy</h4>
<ul>
  <li>00:58:40 U.S. Congress critiques Tornado Cash and urges for stricter regulations [<a href="https://www.therage.co/congress-letter-tornado-cash/">The Rage</a>]
    <ul>
      <li>Seven U.S. Congress members urge the Treasury to finalize regulations on cryptocurrency mixers like Tornado Cash, citing misuse for laundering, terrorism, and sanctions evasion.</li>
    </ul>
  </li>
  <li>00:58:44 Chinese government employees with access to vast surveillance systems are profiting by selling citizen data to private brokers [<a href="https://web.archive.org/web/20241121122224/https://www.wired.com/story/chineses-surveillance-state-is-selling-citizens-data-as-a-side-hustle/">Wired</a>]
    <ul>
      <li>Brokers resell information ranging from phone numbers and bank details to encrypted passwords. Researchers reveal that even restrictions on accessing officials’ data are easily bypassed.</li>
    </ul>
  </li>
  <li>00:59:20 Mullvad VPN cancels remaining PayPal subscriptions in order to reduce stored customers’ data and aligns with privacy-focused policy. [<a href="https://mullvad.net/en/blog/remaining-paypal-subscriptions-are-being-canceled">Announcement</a>]
    <ul>
      <li>Users can still make one-time payments, including via PayPal, and will receive a notification from PayPal but retain unused account time.</li>
    </ul>
  </li>
</ul>

<h4 id="protocol">Protocol</h4>
<ul>
  <li>Bitcoin Core #30239: Introduces a standard for ephemeral dust outputs, enabling zero-fee transactions with dust outputs to be included in the mempool. [<a href="https://github.com/bitcoin/bitcoin/issues/30239">Merged</a>]</li>
  <li>Bitcoin Core #30930: Introduces a new peer services column in the netinfo command and an “outonly” filter to display only outgoing connections. [<a href="https://github.com/bitcoin/bitcoin/pull/30930">Merged</a>]</li>
  <li>Bitcoin Core #30592: Removes the option to disable full Replace-by-Fee (RBF) and revert to opt-in RBF [<a href="https://github.com/bitcoin/bitcoin/pull/30592">Merged</a>]</li>
  <li>Core Lightning #6980: introduces a <code class="language-plaintext highlighter-rouge">splice</code> command that supports either a JSON payload or a splice script. This command facilitates complex splicing actions and combines multiple channel operations into a single transaction. [<a href="https://github.com/ElementsProject/lightning/pull/6980">Merged</a>]</li>
  <li>LDK #3283: Support paying directly to Human Readable Names using bLIP 32: introduces compatibility with BIP353 by enabling Bitcoin payments to use DNS-based human-readable addresses. [<a href="https://github.com/lightningdevkit/rust-lightning/issues/3283">Merged</a>]</li>
  <li>NIP #1578: nip46: simple public key login using kind:10046 [<a href="https://github.com/nostr-protocol/nips/pull/1578">Open</a>]</li>
  <li>NIP #1605: Kind-scoped follow: A way of following one or multiple kinds that are of interest [<a href="https://github.com/nostr-protocol/nips/pull/1605">Open</a>]</li>
  <li>NIP #1587: Time-ordered event ids: Implementing temporal locality in primary keys, inspired by UUIDv7, increases the database efficiency by reducing memory usage and data rearrangement. [<a href="https://github.com/nostr-protocol/nips/pull/1587">Draft</a>]</li>
</ul>

<h4 id="cryptography">Cryptography</h4>
<ul>
  <li>1:00:59 Two mathematicians discovered an elliptic curve of rank 29, breaking an 18-year-old record. This rank measures the complexity of rational points on the curve. [<a href="https://www.quantamagazine.org/new-elliptic-curve-breaks-18-year-old-record-20241111/">Quanta Magazine</a>]
    <ul>
      <li>Their finding highlights unresolved debates in mathematics, including whether there is an upper limit to elliptic curve rank, which remains unproven.</li>
    </ul>
  </li>
</ul>

<h4 id="government--political">Government &amp; Political</h4>
<ul>
  <li>Shanghai’s Songjiang People’s Court clarifies that personal ownership of bitcoin is legal in China under property laws, despite restrictions on commercial activities. [<a href="https://www.scmp.com/tech/blockchain/article/3287415/shanghai-court-says-crypto-ownership-legal-under-china-law-amid-bitcoin-price-surge">South China Morning Post</a>]</li>
  <li>Polish Presidential candidate Sławomir Mentzen commits to establishing a Strategic Bitcoin Reserve if elected in 2025. [<a href="https://x.com/SlawomirMentzen/status/1858276016822603970">Twitter post</a>]</li>
  <li>Pennsylvania is considering a bill, the Strategic Bitcoin Reserve Act, which would allow the state to invest up to 10% of its $7 billion treasury in Bitcoin. [<a href="https://atlas21.com/pennsylvania-opens-up-to-bitcoin-proposed-bill-for-a-strategic-reserve/">Atlas21</a>]</li>
  <li>U.S. SEC Chair Gary Gensler announces his resignation, effective January 20, 2025, after serving since 2021. [<a href="https://x.com/GaryGensler/status/1859658192298574096">Twitter post</a>]</li>
  <li>Five-year sentence for Bitfinex hacker Ilya Lichtenstein following $3.6 billion (120,000 units) bitcoin theft [<a href="https://www.justice.gov/usao-dc/pr/bitfinex-hacker-sentenced-money-laundering-conspiracy-involving-billions-stolen">Press release</a>]</li>
  <li>Federal agents raid Polymarket CEO’s home, seizing electronic devices. Polymarket is under DOJ scrutiny for allegedly allowing U.S. users to access its platform despite prior restrictions. [<a href="https://www.coindesk.com/business/2024/11/13/fbi-reportedly-raids-polymarket-ceos-home/">CoinDesk</a>]</li>
</ul>

<h4 id="events">Events</h4>
<ul>
  <li>1:01:22 <a href="https://satsnfacts.btc.pub/">SATS’N’FACTS</a>: Bitcoin Technical Unconference
    <ul>
      <li>First edition conference diving into Scalability, Mining, Payments, Infrastructure, and much more.</li>
      <li>February 8—10, 2025 in Chiang Mai, Thailand</li>
    </ul>
  </li>
  <li>1:01:26 <a href="https://hackalajara.xyz/">Hackalajara</a>: Guadalajara’s first bitcoin-focused hackathon
    <ul>
      <li>November 29-December 1, 2025 in Guadalajara, Mexico</li>
    </ul>
  </li>
  <li>1:01:39 <a href="https://lu.ma/m788gz0a">Bengaluru BITDEVS</a>: BitDevs Summit
    <ul>
      <li>Day-long gathering of Bitcoin and open-source contributors showcasing their cutting-edge work in panels, demos, and talks.</li>
      <li>November 30, 2024 in Bangalore, India</li>
    </ul>
  </li>
</ul>

<h3 id="reads">Reads</h3>
<ul>
  <li>1:01:46 Here’s a list of our top recently published reads:
    <ul>
      <li>High Risk, Low Reward, by Tony Giorgio [<a href="https://tonygiorgio.com/high-risk-low-reward/">Blog post</a>]</li>
      <li>Boost Your Bitcoin Node Sync With UTXO Snapshots, by Jameson Lopp [<a href="https://blog.lopp.net/bitcoin-node-sync-with-utxo-snapshots/">Blog post</a>]</li>
      <li>Bitcoin Core’s Loss of Focus, by Jamesob [<a href="https://x.com/jamesob/status/1860340932706730261">Twitter post</a>]</li>
      <li>Analysis of the Crypto Policy Landscape Following the Elections, by Coin Center [<a href="https://www.coincenter.org/coin-centers-analysis-of-the-crypto-policy-landscape-following-the-elections/">Blog post</a>]</li>
      <li>How decentralized is Bluesky really? by Christine Lemmer-Webber [<a href="https://dustycloud.org/blog/how-decentralized-is-bluesky/">Blog post</a>]</li>
      <li>Bitcoin Dev Project’s guide on how to sign a MuSig transaction [<a href="https://bitcoindevs.xyz/decoding/musig">Guide</a>]</li>
      <li>Does Sovereign Default Risk Explain Cryptocurrency Adoption? International Evidence from Mobile Apps [<a href="https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5029660">Research paper</a>]</li>
      <li>Bitcoin Under Volatile Block Rewards: How Mempool Statistics Can Influence Bitcoin Mining [<a href="https://arxiv.org/html/2411.11702v1">Research paper</a>]</li>
    </ul>
  </li>
</ul>

<h3 id="episode-submission-ideas">Episode submission ideas</h3>
<ul>
  <li>We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to <a href="https://bitcoin.review/">bitcoin.review</a> and follow the contact links at the bottom of the page.</li>
</ul>

<h3 id="get-in-touch-with-the-pod">Get in touch with the pod</h3>
<ul>
  <li><a href="https://twitter.com/bitcoinreviewhq">Podcast Twitter</a></li>
  <li><a href="https://primal.net/p/npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt">Podcast Nostr</a></li>
  <li><a href="https://twitter.com/nvk">NVK Twitter</a></li>
  <li><a href="https://t.me/BitcoinReviewPod">Telegram</a></li>
  <li><a href="mailto:producer@coinkite.com">Email</a></li>
  <li>Nostr &amp; LN ⚡nvk@nvk.org (not an email!)</li>
</ul>

<hr />
<p>Did I get anything wrong above? Help me correct it producer@coinkite.com</p>]]></content><author><name>NVK, RIJNDAEL, BENTHECARMAN, LIVERA</name></author><category term="podcast" /><summary type="html"><![CDATA[I’m joined by guests Stephan Livera, Rijndael &amp; Ben Carman to go through the list.]]></summary></entry></feed>