- 1 hour 12 minutesBR097 - Cove Wallet, Harbor, ecash, Sparrow, Liana, Bull Bitcoin, JoinMarket, Hardware Wallets, Coinbase Breach, BitLocker Vulnerability, Lightning Phoenixd, LSP Legality + MORE ft. Praveen, Ben, PaulI’m joined by guests Praveen Perera, Future Paul & Ben Carman to go through the list.
Bitcoin
• Software Releases & Project Updates
(00:01:29) Cove Wallet
(00:18:14) Harbor.cash
(00:35:45) Sparrow Wallet
(00:37:05) BDK bdk_chain
(00:37:52) Liana
(00:38:24) Nunchuk Android
(00:39:02) Bull Bitcoin Mobile
(00:40:39) Blue Wallet
(00:41:00) Bitkey App
(00:43:21) FullyNoded
(00:44:03) Zaprite
(00:45:43) BoltzExchange
(00:45:46) Padawan Wallet
(00:46:23) Blockstream Green Android
(00:46:37) Samourai Dojo
(00:46:49) ESP-Miner
(00:46:51) NBXplorer
(00:47:12) Mempal
• Poject Spotlight
(00:47:23) DahLIAS
(00:48:25) Manna Bitcoin
(00:48:34) Darkwire
(00:48:44) Parasite Pool
(00:48:55) Blockpicker
(00:49:10) LOCK Protocol
(00:49:17) Sigbash
(00:49:38) Arkade OS
(00:50:09) Swift Bitcoin
(00:50:36) Pythia
(00:50:45) Arcana Seed Lodge
(00:50:54) BIP47 Message Verifier
(00:51:02) Traxe
(00:51:08) Censorship Resistant
(00:51:21) Bitcoin-4-All
Vulnerability Disclosures
(00:51:38) Coinbase data breach
(00:54:07) Ledger Donjon
(00:54:46) CVE-2023-21563
(00:55:59) Bitpixie
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(00:57:14) SimpleX
(00:57:15) NomadNet
(00:57:16) Sideband
(00:57:17) Mullvad VPN Loader
(00:58:17) Signal Desktop
(00:58:20) Have I Been Pwned
(00:58:22) KYCnot.me
• Poject Spotlight
(01:00:26) Oniux
Lightning + L2+
• Project Spotlight
(01:00:39) Routstr
(01:02:22) Lightning Blinder
(01:02:32) Phoenixd MCP Server
(01:03:27) Amboss Rails
(01:03:48) Sixty Nuts
(01:03:54) BTCNutServer
Boosts
(01:07:13) Shoutout to top boosters AVERAGE_GARY, hgw39, Rod Palmer, Chris, Hech, AVERAGE_GARY, Bob the Cow, Plunger & Homer Hodl.
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-975 June 2025, 5:16 pm - 1 hour 6 minutesBR096 - OP_RETURN Debate, Bitcoin Core Governance, Alternative Implementations, Future Soft Forks, CTV Prospects, Core Vulnerabilities, COLDCARD Hardware Design, Testnet vs Signet + MORE ft. Rob, Odell & CraigI'm joined by guests Rob Hamilton, Craig Raw & Matt Odell to go through the list.
OP_RETURN Drama
(00:00:52) Odell's thoughts
(00:04:29) Craig's thoughts
(00:05:59) NVK's thoughts
(00:07:47) Rob's thoughts
Bitcoin
• Software Releases & Project Updates
(00:22:10) COLDCARD
(00:22:35) Cove Wallet
(00:24:03) BTCPay Server
(00:24:06) Nunchuk Android
(00:24:12) Bitcoin Keeper
(00:24:14) Bitcoin Safe
(00:24:18) Wasabi Wallet
(00:25:43) RoboSats
(00:25:46) Umbrel
(00:25:57) Zaprite
(00:26:22) Blockstream Satellite
(00:26:45) Stratum Work
(00:26:58) SeedHammer II
(00:27:11) ESP-Miner
• Project Spotlight
(00:27:34) Bitcoin Feature Matrix
(00:27:41) secp256k1lab
(00:28:00) GPGap
(00:28:16) NVK Validation Tweet
(00:28:54) BriberBrother
(00:29:11) Stack Math
Vulnerability Disclosures
(00:30:23) CVE-2024-52919
(00:33:02) CVE-2025-43707
(00:34:46) Hackers breach LockBit
Audience Questions
(00:35:12) What’s the difference between test net and signet? And what are the benefits of each?
(00:37:15) Can you explain, in simple terms, what OP_CHECKCONTRACTVERIFY does?
Nostr
• Software Releases & Project Updates
(00:46:55) Nostr Messaging Layer Security
(00:48:42) Primal
(00:48:43) Damus
Boosts
(01:01:58) Shoutout to top boosters Rod Palmer, AVERAGE_GARY, pink money, user4, Wartime & btconboard
Tech Tip of the Day
(01:03:51) A free online cryptography course repository by Alfred Menezes
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-9615 May 2025, 5:48 pm - 1 hour 37 minutesBR095 - OP_NEXT Recap, COLDCARD, Bitcoin Core, Ephemeral Dust, Ephemeral Anchors, Pay-to-Anchor outputs, Taplocks, Electrum, Cove Wallet, Mempool.space, Liana, Bitcoin Privacy Accounting, ESP32.Review + MORE ft. Rob & RijndaelI'm joined by guests Rob Hamilton & Rijndael to go through the list.
Housekeeping
(00:01:09) OP_Next recap
Bitcoin
• Software Releases & Project Updates
(00:15:18) Coldcard
(00:42:53) Bitcoin Core
(00:47:21) BDK
(00:48:12) Coinswap
(00:48:56) Electrum Wallet
(00:52:45) BTCPay Server
(00:53:33) Nunchuk Android
(00:54:04) Liana
(00:54:51) The Mempool Open Source Project
(00:57:01) BoltzExchange boltz-web-app
(00:57:16) RoboSats
(00:57:21) Bitcoin Safe
(00:57:58) Blockstream Green
(00:58:08) Rust Payjoin
(01:01:15) Zaprite
(01:01:48) Krux
(01:02:29) Iris Wallet Desktop
(01:02:46) Bitcoin Core Config Generator
(01:02:52) UTXOracle
• Project Spotlight
(01:04:14) SwiftSync
(01:04:43) PrivatePond
(01:05:00) JoinMarket Fidelity Bond Simulator
(01:05:52) DahLIAS
(01:06:00) Satoshi Escrow
(01:06:12) Taplocks
(01:15:48) bitcoin.softforks.org
(01:15:52) CTV and CSFS Enabled Bitcoin Node
(01:16:03) UTXOscope
(01:16:13) Block Bitcoin Treasury
(01:16:47) Waye
(01:17:08) Sovereign Craft
(Not) a Vulnerability Disclosure
(01:17:17) Pay-to-Anchor outputs now exploited for blockchain spam
Audience Questions
(01:23:46) How do we use open time stamps for transfer of assets using two party integrity between holders?
(01:24:50) Does Cove have testnet4?
(01:25:15) Can you explain like I’m 5 what opcodes are, how they are used on the network, and the level of optionality that applies to them?
(01:26:49) Please discuss this idea: Block-based TOTP for bitcoin wallet passphrase validation.
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:28:48) Tor Browser
(01:28:51) TailsOS
(01:28:53) NymVPN
(01:28:55) MapleAI
Lightning + L2+
• Project Spotlight
(01:29:17) Misty Breez
(01:29:25) Sovereign Tools
(01:29:28) Silk Road on Lightning
(01:29:37) Cashu Token Decoder
• Software Releases & Project Updates
(01:29:48) Zeus
(01:29:49) LDK
(01:31:40) Minibits Wallet
(01:31:42) Hydrus
Nostr
• Project Spotlight
(01:31:44) Atomic Signature Swaps over Nostr
(01:31:51) Lantern
(01:31:59) Promenade
(01:32:09) Noauth-enclaved
(01:32:27) GM Swap
Boosts
(01:33:04) Shoutout to top boosters Rod Palmer Bugle News, pink monkey, btconboard, jespada, AVERAGE_GARY & larryoshi finkamoto
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-9523 April 2025, 4:54 pm - 1 hour 28 minutesBR094 - COLDCARD KeyTeleport, Harbor, Ark, Cove Wallet, Zaprite, Bitcoin Core, OMEMO, Knots, Vibe Coding, Trezor Safe 3 Attack Vector, Coinbase Phishing Campaign, Bitcoin Business Software + MORE ft. Rob & PaulI'm joined by guests Rob Hamilton & Future Paul to go through the list.
Housekeeping
(00:01:09) Nostr DVM Playground
(00:26:33) Bitcoin Security Guide
(00:27:23) TestFlight need more beta testers for Cove
(00:33:19) COLDCARD Key Teleport
Urgent Vulnerability Disclosures
(00:29:04) A new email phishing campaign targets Coinbase users
Bitcoin
• Software Releases & Project Updates
(00:44:33) Bitcoin Core
(00:45:52) Fulcrum
(00:46:06) Blue Wallet
(00:46:27) Bitcoin Safe
Interlude
(00:48:54) OMEMO
Bitcoin
• Software Releases & Project Updates (Cont.)
(00:53:28) Bitcoin Knots
(00:53:59) BoltzExchange
(00:54:01) Blockstream Green QT
(00:54:58) FullyNoded
(00:55:11) BullBitcoin Mobile
(00:55:19) RoboSats
(00:55:24) Bisq 2
(00:55:26) Zaprite
(00:56:38) Bitcoin Jungle App
(00:57:22) SRI
(00:57:57) Stratum.work
(00:58:46) Braiins OS
(00:58:50) Coinselect
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:18:13) Sideband
(01:18:23) Mullvad VPN
(01:18:33) NymVPN Noise Generating Mixnet technology
Vulnerability Disclosures
(01:18:42) Ledger Donjon conducts a security analysis of Trezor's hardware wallets
Interlude
(01:21:05) Coinbase is open-sourcing their multiparty computation cryptography library
(01:21:35) Mempool.space now supports address poisoning detection
Lightning + L2+
• Software Releases & Project Updates
(01:22:46) LDK
Boosts
(01:26:33) Shoutout to top boosters pink monkey, Anonymous, jespada, ., btconboard, AVERAGE_GARY & alanStacksSats.
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-942 April 2025, 6:04 pm - 1 hour 28 minutesBR093 - ECDSA Key Extraction, ESP32 Security Concerns, COLDCARD, Cove Wallet, Krux, Nunchuk, Invalid Mining Jobs, Javascript Injection Attack, CTV Back on the table? + MORE ft. Rob & VivekI'm joined by guests Rob Hamilton & Vivek to go through the list.
Housekeeping
(00:01:18) Unleashed.chat rebrands to dataMachine
Urgent Vulnerability Disclosures
(00:01:52) Private key leak via malformed ECDSA input
(00:09:12) ESP32 Security Concerns
(00:21:32) Coinos revokes NWC connection secrets
Vivek's Corner
(00:22:51) Invalid mining jobs by AntPool & friends during forks
Bitcoin
• Software Releases & Project Updates
(00:37:44) COLDCARD
(00:52:47) Sparrow Wallet
(00:54:33) Lark
(00:55:03) Krux
(00:56:37) Cove Wallet
(00:59:09) Nunchuk Desktop
(01:00:32) BTCPayServer
(01:00:44) Bitcoin Keeper
(01:01:25) BlueWallet
(01:02:08) Bitcoin Safe
(01:03:15) Bitkey App
(01:04:05) libwally-core
(01:06:00) Bisq2
(01:06:04) RoboSats
(01:06:08) Boltz Exchange
(01:06:10) Zaprite
(01:06:13) Blockstream Explorer API
(01:07:22) Mempal
(01:07:29) Iris Wallet desktop
(01:07:31) Utreexo
(01:07:34) ESP Miner
• Project Spotlight
(01:07:38) Reorg Calculator
(01:07:51) Bitcoin Core Config Generator
(01:09:05) Bitcoin Core Snapshots
(01:09:11) Boot Protocol
(01:09:18) multisig-backup
(01:09:58) Wallet backup
(01:10:04) regtest-in-a-pod
Vulnerability Disclosures
(01:11:56) JavaScript injection attack
(01:15:05) Malicious PyPI package 'set-utils' steals Ethereum private keys
(01:16:57) OpenSSH vulnerabilities expose clients and servers to attacks
(01:17:05) USB side-channel attacks
(01:17:37) Cellebrite
(01:17:49) Messengers vulnerabilities
(01:17:56) GitVenom
(01:18:10) Stablecoin payment firm Infini loses $50M in exploit
(01:18:18) Five dollar wrench attacks
Audience Questions
(01:20:00) Comment on a flaw in Bitcoin Core regarding mining pools and their vulnerability against block withholding attacks
Nostr
• Project spotlight
(01:22:32) 24242.io
(01:22:49) nostr.media
(01:22:58) Frostr
(01:23:33) nostr-double-ratchet
(01:23:44) DVMCP
(01:23:53) Samiz
(01:24:00) Welshman
(01:24:09) Norma
(01:24:20) Wallet Relay
(01:24:27) Nostr0
(01:24:35) nAuth Protocol
(01:24:43) Hostr
Boosts
(01:25:36) Shoutout to top boosters @sean, @pink monkey, @Anonymous, @martinbarilik, @Momo Tahmasbi & @jespada.
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-9313 March 2025, 6:56 pm - 1 hour 29 minutesBR092 - Nostr Wallet Connect, DeepSeek, AI Coding, Sparrow, Bitcoin Keeper, Maple AI, Calculating Tx Sizes + MORE ft. Future PaulI'm joined by guest Future Paul to go through the list.
Prelude to the list
(00:01:00) Conversation on AI and building with AI
Housekeeping
(00:22:02) New Coldcard Q tutorial by Loïc Morel
(00:22:10) Looking for bitcoin builders to come on the show
(00:23:13) Unleashed.Chat Update
(00:23:19) NWC and Olas/Primal
Urgent Vulnerability Disclosures
(00:37:17) Replacement Cycling Attacks on Bitcoin Miners Block Templates
Bitcoin
• Software Releases & Project Updates
(00:37:34) Sparrow Wallet
(00:41:08) BDK
(00:41:35) Bitcoin Keeper
(00:42:40) Wasabi Wallet
(00:42:43) Blockstream
(00:43:06) Electrs
(00:43:44) Umbrel
(00:44:29) Bisq
(00:44:40) Bisq2
(00:44:51) Zaprite
(00:45:54) Mempal
(00:46:04) Bitcoin Safe
(00:48:50) ESP Miner
• Project Spotlight
(00:49:02) cbip32
(00:49:15) StackStates
(00:49:21) Instamouse bitcoin
(00:50:24) Iris Wallet Desktop
(00:50:43) Explorer.timechainindex
(00:50:54) txTree
(00:50:58) HurriCash
(00:51:29) The Bitcoin Trail
(00:51:41) Bitcoin Laws
(00:51:50) CoinMarketCrap
Vulnerability Disclosures
(00:54:19) Researchers uncover two security flawsin Apple's A and M-series chips
(00:54:33) Kaspersky identifies malware in both Google Play and Apple's App Store
(00:54:40) Exploit targets users on adult sites via Phantom or Trust Wallet browser
(00:56:30) Lazarus Group deploys electron-based malware to steal cryptocurrency data
(00:56:36) Coinbase users lose millions to social engineering scams amid security failures
(00:56:57) Phemex suffers $85 million hack
(00:57:56) NoOnes suffers $8 million exploit due to Solana bridge vulnerability
(00:58:40) Deepseek exposes over a million plaintext chat records
(00:58:16) Five dollars wrench attacks
Audience Questions
(01:00:55) Why, when you sign a transaction on the COLDCARD, does it generate 2 files?
(01:01:50) P1: What's the maximum number of outputs there can be for a bitcoin transaction?
(01:03:43) P2: Is there any way to estimate what the size that a transaction will be depending on it's number of outputs?
(01:04:13) Does using a passphrase offer any protection against a malicious hardware wallet?
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:06:10) Maple AI
(01:06:20) SimpleX
(01:11:00) TailsOS
(01:13:24) Reticulum MeshChat
(01:25:26) Mullvad VPN
Lightning + L2+
• Project spotlight
(01:26:17) Ark Wallet SDK
Boosts
(01:26:35) Shoutout to top boosters Anonymous & AVERAGE_GARY
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-9211 February 2025, 4:22 pm - 1 hour 16 minutesBR091 - AnchorWatch Trident Vault, Ledger Co-founder Kidnapped, Blue Wallet, M17, The Case for Multi-vendor Setups, Tails removes HWW Support + MORE ft. Craig & RobI'm joined by guests Craig Raw and Rob Hamilton to go through the list.
Housekeeping
(00:01:11) Ross Ulbricht receives a pardon from President Trump
(00:03:44) New Marketing Manager opening at Coinkite
(00:03:48) Exchanges added to BitcoinSecurity.guide
(00:04:15) Olas - new nostr app
(00:04:48) Call for guests
Urgent Vulnerability Disclosures
(00:05:58) Ledger co-founder David Balland released after kidnapping
(00:12:28) AxeOS CSRF Vulnerability
Bitcoin
• Software Releases & Project Updates
(00:12:58) AnchorWatch
(00:47:28) Bitcoin Core
(00:48:10) Wasabi Wallet
(00:48:15) BDK
(00:48:27) Nunchuk Android
(00:48:37) Specter Desktop
(00:49:02) Bitcoin Keeper
(00:49:18) Blue Wallet
(00:50:32) BTC Pay Server
(00:55:39) Liana
(00:55:58) Blockstream Green QT
(00:57:58) BoltzExchange
(00:58:00) Live Wallet
(00:58:11) Kyoto
(00:58:19) ESP-Miner
(00:58:21) Bitcoin Safe
(00:58:40) BTC Map
• Project Spotlight
(00:58:44) Bitaxe Touch
(00:58:51) Coinswap
(00:59:20) Scure
(00:59:28) Bitcoin Is Data
(00:59:43) Qoinstr
(00:59:53) TollGate
Vulnerability Disclosures
(01:01:27) 0-click deanonymization attack targets Cloudflare-backed apps
(01:02:00) UEFI secure boot vulnerability allows malicious bootkit deployment
(01:02:23) Google Ad directs users to malicious homebrew clone
(01:03:01) Critical rsync vulnerability on Linux and Unix systems
(01:03:31) January 2025 Patch Tuesday
(01:03:48) Unsecured tunneling protocols expose 4.2 million hosts
(01:03:58) Apple's CUPS printing system vulnerable to spoofing attacks
(01:04:11) Thomas Roth demonstrates code execution on Apple's ACE3 USB-C controller
(01:05:32) Five dollar wrench attacks
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:07:17) Tails
(01:09:52) Module_17
Boosts
(01:12:29) Shoutout to top boosters Anonymous, manbyt, agichoote & btconboard
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-9124 January 2025, 5:53 pm - 1 hour 23 minutesBR090 - COLDCARD, BullBitcoin, Bitcoin Safe, miningpool-observer, Zero Fee/P2PK Playgrounds, Tangem Private Keys Exposed, Proton Wallet Vuln, Signatures Explained, "Not Enough UTXOs!" + MORE ft. RobI'm joined by guest Rob Hamilton to go through the list.
Housekeeping
(00:01:37) Verify-address over NFC using a Coldcard Q and BDK iOS example wallet
Vulnerability Disclosures
(00:18:57) New fake Ledger data breach emails try to steal crypto wallets
(00:20:51) Cryptocurrency hardware wallet Tangem fixes app bug
(00:26:03) Irrevocable fees—stealing from LN using revoked commitment transactions
(00:27:13) Zellic identified a vulnerability in Proton Wallet's preview version
Bitcoin
• Software Releases & Project Updates
(00:28:29) Coldcard Edge
(00:33:00) BLOCKCLOCK
(00:33:36) BDK
(00:33:50) Nunchuk
(00:34:19) BullBitcoin Mobile
(00:36:59) Bitcoin Keeper
(00:37:21) Electrs
(00:39:20) BTCPayServer
(00:39:36) rust-payjoin
(00:39:45) Krux installer
(00:39:55) Frostsnap
(00:40:42) Bitcoin Safe
(00:42:03) Blockstream Satellite
(00:42:28) Raspiblitz
(00:42:39) Ashigaru
(00:45:02) BoltzExchange
(00:45:04) Mempal
(00:45:11) Zaprite
(00:45:13) ESP-Miner
• Project Spotlight
(00:45:18) Satoshi
(00:45:28) Joinstr
(00:45:33) miningpool-observer
(00:46:51) Dojo Bay
(00:46:56) Nightly Bitcoin Core Tests
(00:47:04) Nigiri
(00:47:15) Run Litd
(00:47:28) bllsh
(00:48:05) Btceed
(00:48:12) Zero Fee Playground
(00:49:17) P2PK Playground
(00:50:51) Bitcoin Testnet4 Faucet
(00:50:58) Hashteroids
(00:51:07) Community Hub by My First Bitcoin
Major/Urgent Vulnerability Disclosures
(00:51:39) Oasis discovers a critical flaw in Microsoft's Multi-Factor Authentication system
(00:51:53) Five dollar wrench attacks
(00:52:40) Two men fall victim to phishing scams, in May 2024
(00:55:28) Apache MINA's CVE-2024-52046 flaw
(00:55:37) WPA3 vulnerability
(00:56:07) Hackers compromise 16 Chrome extensions
(00:56:54) Symlink exploit
Audience Questions
(00:57:32) Can you explain how signatures work for spending Bitcoin?
(01:01:04) When people say "there's not enough UTXOs for everyone to have one". How do you quantify that?
(01:06:20) I have a legacy address that starts with 1 wirh some BTC Should I be worried about CC?
(01:07:16) Why should anyone, except maybe millionaires, self custody?
(01:10:20) If BTC must be essentially be held in custody, then why use BTC over gold?
Boosts
(01:13:47) Shoutout to top boosters @Ape Mithrandir, @shadowysuperbadger, @user40113771, @btconboard, @Leurico8 & @Juan.
News & Noteworthy
• Encryption
(01:16:45) NIST proposes to standardize wider variant of AES
• Funding
(01:17:40) OpenSats Ninth Wave of Nostr Grants
(01:17:47) Spiral renews its grant to BTCPayServer
(01:17:49) HFR donates 7 bitcoin to fund Bitcoin development and projects
(01:17:53) Btrust its Q4 2024 Btrust grant recipients
• Mining
(01:18:12) GreenpeaceUSA's campaign to modify Bitcoin's proof-of-work likely ended
• Privacy
(01:18:29) Samourai Wallet pretrial hearing postponed to March 12, 2025
(01:19:59) Russian government directs ISPs to identify users accessing blocked content via VPNs
• Government & Political
(01:20:14) Craig Wright is handed a one-year suspended sentence in the UK
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-903 January 2025, 10:22 pm - 2 hours 3 minutesBR089 - Lark, Security Tradeoffs Masterclass, Bitcoin Quantum Risks, WabiSabi Deanonymization, Core Txn Broadcast, Better Wallet Migration, Scaling Bitcoin, Bullish Sentiments + MORE ft. Craig & RobI'm joined by guests Craig Raw and Rob Hamilton to go through the list.
Major/Urgent Vulnerability Disclosures
(00:01:18) Transaction-Relay Throughput Overflow Attacks against Off-Chain Protocols
(00:01:53) Vulnerability in WabiSabi coinjoin protocol
Bitcoin
• Software Releases & Project Updates
(00:19:59) Rust Payjoin
(00:32:48) Lark
(01:12:40) Bitcoin Keeper
(01:13:23) Blue Wallet
(01:13:33) Floresta
(01:13:44) Labelbase
(01:14:17) BDK
(01:14:26) FullyNoded
(01:14:43) BTCPay Server
(01:14:52) Zaprite
(01:14:54) Peach
(01:14:55) Boltz boltz-web-app
(01:14:56) ESP-Miner
(01:14:58) Clams remote
(01:14:59) Mempal
(01:15:07) Kyoto
(01:15:20) LifPay
• Project Spotlight
(01:16:09) Specter Shield Lite
(01:16:17) Covenants support
(01:18:08) Kibo
(01:18:20) Saving Satoshi
(01:18:28) Fully Noded Server
(01:18:30) Timestamp
(01:18:49) Satoshee
(01:19:06) hass-miner
(01:19:12) Entropy
(01:19:20) PlebDev Starter Course
Major/Urgent Vulnerability Disclosures
(01:19:29) Droidbot targets banking and crypto apps in Europe
(01:19:36) SD Express Card vulnerability exposes memory access risks
(01:19:47) Malicious Solana web3.js exposes private keys
Audience Questions
(01:24:05) How do NVK and the guests feel about Google's Willow quantum chip
(01:30:01) Can NVK and the guests comment on James OB's recent Tweet
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-8913 December 2024, 9:35 pm - 1 hour 7 minutesBR088 - AnchorWatch, Bitkey, Krux, Primal, Proton Wallet, Kagi, Debifi, Namecheap $73M bitcoin revenue + MORE ft. Livera, Rijndael & Ben
I'm joined by guests Stephan Livera, Rijndael & Ben Carman to go through the list.
Housekeeping
(00:05:29) Bitcoin Black Friday
(00:06:05) AnchorWatch gains Lloyd's of London Coverholder status
Major/Urgent Vulnerability Disclosures
(00:10:25) Krux releases security fix for AES-CBC encryption flaw
Bitcoin
• Software Releases & Project Updates
(00:16:05) Bitcoin-script-hints
(00:17:14) BDK
(00:17:38) BTCPay Server
(00:19:53) Nunchuk Desktop
(00:20:20) Proton Wallet
(00:23:58) Bitcoin Keeper
(00:24:40) Nix Bitcoin
(00:25:09) Krux
(00:26:49) RoboSats
(00:26:57) Bitkey App
(00:31:07) RewindBitcoin
(00:35:15) Umbrel
(00:35:32) ESP-Miner
(00:35:36) Boltz web-app
• Project Spotlight
(00:35:43) Wallet Dev Kit
(00:35:51) ScriptLab
(00:36:04) Mempal
(00:36:44) Debifi
(00:37:41) Dart-bip85 package
(00:37:45) Descriptors Go
(00:37:47) Tick-tock-tui App
(00:37:56) Awesome-Bitcoin-guide
(00:38:30) BitAxe HAS Dashboard
(00:38:39) Radpool
(00:38:43) Satadelica
Vulnerability Disclosures
(00:39:16) Nearest neighbor attack - Exploiting nearby Wi-Fi for covert access
(00:39:27) New Ghost Tap attack exploits NFC mobile payments
(00:39:38) Graykey partially unlocks iPhones with iOS 18/18.0.1, from iPhone 12 to 16 series
(00:40:38) OverSecured finds seven flaws in Android and Google Pixel, affecting millions of users
(00:41:03) Apple urgently patches vulnerabilities affecting macOS and iOS
(00:41:32) Decades-old security flaws in Ubuntu's Needrestart Package
(00:41:48) Chinese man arrested in Bangkok for operating from a van-based SMS blaster
(00:42:28) Five dollar wrench attack
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(00:42:53) SimpleX
(00:43:06) Signal
• Project Spotlight
(00:43:28) DeFlock
Lightning & L2(+)
• Project Spotlight
(00:43:56) Phoenix Server Lightning Wallet
(00:44:32) Cashu Brrr
(00:45:08) SING4SATS
• Software Releases & Project Updates
(00:45:44) Primal
(00:47:27) LND
(00:48:05) CDK Cashu Development Kit
(00:48:36) Phoenix Wallet
(00:48:47) Zeus
(00:49:56) Nutstash
(00:49:59) Nutshell
(00:50:07) Fountain
(00:50:10) Breez SDK
(00:50:14) Lnp2pBot
(00:50:17) BoardWalk
(00:50:19) Geyser
(00:50:20) Aqua Wallet
(00:50:47) Clams Remote
Nostr
• Project spotlight
(00:50:52) NDK Mobile
(00:50:55) Olas
(00:51:26) Knox
(00:51:32) Nostraut
(00:51:35) Ezdvm
(00:51:40) Futr
(00:51:45) Nosey
(00:51:49) Nos2x for Firefox
• Software Releases & Project Updates
(00:52:00) GifBuddy
Boosts
(00:52:30) Shoutout to top boosters Chris, podconf & btconboard
News & Noteworthy
• Bitcoin
(00:55:05) Chaincode Labs launches the 2025 BOSS program
• Nostr
(00:55:49) Kagi HQ joins Nostr
• Business & Finance
(00:57:06) Block, Inc. unveils Proto
(00:57:11) Casa introduces Casa Enterprise
(00:57:30) Swan Bitcoin sues former law firm for conflict of interest in Tether case
• Tradfi
(00:57:46) Revolut X expands to 30 European countries
(00:57:58) Newmarket Capital, launches Battery Finance
• Funding
(00:58:06) OpenSats announces long term support and educational grants
• Mining
(00:58:12) Russia bans winter digital currency mining in Siberia
• Privacy
(00:58:40) U.S. Congress critiques Tornado Cash and urges for stricter regulations
(00:58:44) Chinese government employees are selling citizen data for profit
(00:59:20) Mullvad VPN cancels remaining PayPal subscriptions and aligns with privacy-focused policy
• Cryptography
(01:00:59) Two mathematicians break an 18-year record with an elliptic curve of rank 29
• Events
(01:01:22) SATS'N'FACTS, Bitcoin Technical Unconference
(01:01:26) Hackalajara, Guadalajara's first Bitcoin-focused hackathon
(01:01:39) Bengaluru BitDevs Summit
Reads:
(01:01:46) Here's a list of our top recently published reads
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN: ⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-8827 November 2024, 8:28 pm - 1 hour 30 minutesBR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & PaulI'm joined by guests Justin Moon & Future Paul & to go through the list.
Quote of the Day
00:00:48 Nobody knows anything
Housekeeping
00:06:00 New COLDCARD Tutorials
Major/Urgent Vulnerability Disclosures
00:06:26 Vulnerability in secp256k1-node affecting ECDH
00:08:01 Stalling peers cause disclosure of hindered block propagation
Bitcoin
• Software Releases & Project Updates
00:08:40 Bitcoin Core
00:09:11 Electrs
00:10:22 BTC Pay Server
00:11:57 libsecp256k1
00:14:18 Bitcoin Keeper
00:14:56 Liana
00:17:30 Bitcoin Safe
00:20:08 RoboSats
00:21:10 Bitkey Firmware
00:21:20 Raspiblitz
00:21:37 ESP-Miner
00:22:14 BoltzExchange
• Project Spotlight
00:22:21 Frost
00:23:12 ColliderScript
00:27:44 GreatRSI
00:28:16 Boltzmann TS monorepo
00:28:55 PlebDevs
00:29:51 SatSale
00:31:58 EmailBTC
Vulnerability Disclosures
00:33:21 Lottie player JS hacked, affecting Primal and 1inch
00:38:38 Hackers abuse emergency data requests
00:41:15 Tor relays targeted in spoofing attack
00:41:22 Synology devices exposed to zero-click flaw
00:42:03 North Korean hackers BlueNoroff target crypto firms with new macOS malware
00:44:45 Five dollar wrench attacks
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
00:52:50 Reticulum MeshChat
00:53:14 Matrix
Lightning & L2(+)
• Project Spotlight
00:54:52 Podcaster Boost Dashboard
00:55:06 zPay.live
00:55:14 BullishNuts
00:55:19 Athenut
00:55:33 TinyPine
• Software Releases & Project Updates
00:55:41 Fedimint
00:56:34 Zeus
00:58:19 Alby Go
00:58:28 Ride-The-Lightning
00:58:37 CLBOSS
00:58:40 Nutshell
00:59:00 Geyser
00:59:24 Clams Remote
Nostr
• Project spotlight
00:59:36 SnapNostr
00:59:42 OpenLibrarian
00:59:49 Jumble
00:59:54 Honeypot
1:00:00 Mutestr
1:00:08 Nostr Gadgets
1:00:16 Mostro Tools
Boosts
1:08:57 Shoutout to top boosters @Ape Mithrandir, @btconboard, @VonPhoto & @AVERAGE_GARY
Tech tip of the day
1:10:45 LocalSend
1:10:54 Protect iPhones from downgrade attacks by disabling 2G in Lockdown mode
News & Noteworthy
• Lightning + L2+
1:12:38 Ndolo and Tschorsch publish Payment Censorship in Lightning Network
1:14:01 Blockstream opens its newest research center in Lugano
1:14:05 CasaOS integrates Alby Hub
• Business & Finance
1:14:46 Block refocuses on bitcoin mining equipment and Bitkey
1:15:49 Fold App introduces insured deposits
1:16:33 Strike introduces Bitcoin auto-withdrawals
1:18:52 Ten31 launches Bitcoin Alpha
1:19:13 CleanSpark finalized its acquisition of GRIID Infrastructure
• Nostr
1:19:25 Nos.social is now live in Australia and New Zealand
• Funding
1:19:32 OpenSats announces its Eighth Wave of Nostr Grants
• Mining
1:20:23 MMS and Metzler partner on Bitcoin mining for grid stability
• Privacy
1:20:38 Tommy Robinson sentenced to 18 months for not unlocking phone for police
1:20:47 Ex-TD Bank employee indicted for sharing customer data on Telegram
1:21:02 Kenya to require phone IMEI declaration from 2025
1:21:09 Apple adds "inactivity timer" feature in iOS 18.1
• Protocol
1:22:16 Ren Crypto Fish, Steve Lee, and Lyn Alden publish Analyzing Bitcoin Consensus: Risks in Protocol Upgrades
1:25:30 BIP85 updated to final status, now widely deployed
1:25:47 LDK #3207 adds invoice requests to async payments
• Government & Political
1:26:05 US DOJ charges AurumXchange operator with laundering Silk Road fund
1:26:12 Roman Sterlingov sentenced to 12.5 years for money laundering
1:26:34 Argentina's central bank hosts a live Bitcoin mining art exhibit
1:26:50 BIS exits cross-border payments platform Project mBridge
1:26:56 EU and ECB debate digital euro control, raising sovereignty concerns
• Events
1:27:22 Btc Hel: The first ever large scale bitcoin conference in the Nordics.
• Reads
1:27:46 Top recently published reads
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: [email protected]
Nostr & LN:⚡[email protected] (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-8713 November 2024, 9:03 pm - More Episodes? Get the App