Bitcoin Review Podcast BR041 - Sparrow, River, COLDCARD, Trident Wallet + MORE ft. Craig Raw, Rob Hamilton & Alex Leishman
Iâm joined by guests Craig Raw, Rob Hamilton & Alex Leishman to go through the list.
Housekeeping
- 00:01:53 #LearnToBuild
- 00:09:18 COLDCARD PRs
- Seed Vault
- Offer to store/vault ephemeral secrets if opt-in enabled by user
- Vault is in settings object (encrypted)
- User can easily switch to ephemeral seeds stored in Seed Vault
- WIP: Write logs to microSD in HSM mode
- Xor seedsave
- 00:17:44 Censorship rant: Damus vs Apple saga (Damus removal from app store confirmed)
Security Updates
- 00:24:11 Firmware Extraction: Evil-Maid Attacks on Blockstream Jade Hardware Wallet [Ledger Blog]
- The Ledger Donjon team, who is responsible for boosting the security of Ledger products, discovered a hardware vulnerability in the Blockstream hardware wallet (Jade).
- An attacker with a stolen Blockstream hardware wallet can decrypt the encrypted firmware that is stored in the external flash, using side-channel attacks (SCAs) to inject a malicious code. An example could be a malicious code that performs transactions to substituted addresses.
- It can be called an evil maid attack.
Bitcoin
Software Releases & Project Updates
- 00:31:04 COLDCARD
- 5.1.3
- New Feature: Batch Sign PSBTs. Advanced/Tools -> File Management -> Batch Sign PSBT
- Enhancement: change Key Origin Information export format in multisig addresses.csv to match BIP-0380
- Enhancement: Address explorer UX cosmetics, now with arrows and dots.
- Deposit mode being worked on
- COLDCARD colours
- Edge Version 6.1.0X
- Find binary here and view release notes. Advanced features currently in Edge:
- Miniscript and MiniTapscript support (see docs/miniscript.md)
- New Enhancement: Tapscript up to 8 leafs
- Taproot spending, signing, multisig.
- BIP-129 Bitcoin Secure Multisig Setup (BSMS)
- 00:41:08 Sparrow v1.7.7
- Improve the mempool fee rates chart to reflect finer granularity and offer an expanded display on click
- Add a 24h toggle to expanded mempool fee rates chart
- Add additional inputs to an RBF transaction if needed as required fee is increased
- Display the order of word selection on a Border Wallets grid
- Avoid simultaneous multiple selection on a Border Wallets grid
- Clarify recovery phrase purpose on Border Wallets PDF
- Support spendable property on UTXOs in BIP329 wallet label imports and exports
- Support scanning text QR containing seed words
- Support compact SeedQRs with high error correction
- Look for supported cards across all connected card terminals
- Support airgapped keystore import of a Tapsigner with a custom derivation path
- Add a separate button to backup Tapsigner without changing the PIN
- Ensure canonical ordering of key expressions in multisig descriptor QRs
- 00:52:11 Trident Wallet: Institutional-Grade Open Source Bitcoin Wallet
- Open source wallet designed for multi-institutional custody and to protect against collusion
- Choose which keys must sign a transaction for any given scenario
- Optional embedded property insurance on your bitcoin
- Great user experience and highly customizable without sacrificing security
- Update: Coldcard Support with Miniscript
- 01:00:26 Nunchuk iOS v1.9.27
- Support for Child-Pays-For-Parent (CPFP) transactions
- 01:00:37 Blockstream Green Desktop v1.2.2
- Added:
- Pass hash of uncompressed firmware when updating Jade
- Changed:
- Better error messages in increase fee dialog
- CI process for signing for Windows
- Improve Ledger warning to select correct apps on dashboard
- Improve Jade serial port writing
- 01:01:15 Keeper v1.0.6
- Directly send remixed sats from Whirlpools to your multi-sig Vaults.
- Health Check for Signing Devices:
- Ascertain if your signing device is working as expected.
- Keeper will highlight if you have not accessed one of the devices for a prolonged period of time.
- Optimised the list of white-listed public servers and improved error messaging pertaining to node connectivity
- 01:01:53 Trezor v23.6.1
- New feature: Coinjoin candidate transactions
- Improvement: New Suite Guide structure for optimized navigation
- Improvement: Enhanced UI for improved account public key display
- 01:02:09 Umbrel v0.5.4
- Reimagined App Store
- Migration Assistant feature enables transfer of data and apps from a Raspberry Pi-based Umbrel to the new Umbrel Home in one click.
- Performance improvements, bug fixes and refinements
- 01:04:14 StartOS v0.3.4.3
- Improved Tor reliability
- Experimental features tab (Zram, Manually reset tor)
- Update branding
- Bugfixes and performance enhancements
- 01:04:30 Floresta v0.4.0 (A lightweight Bitcoin full node implementation written in Rust, powered by Utreexo)
- Fix config file parse error and docs ortography by @Guilospanck in #27
- Added support for output descriptors
- Derive more addresses as we get transactions
- Improve address selection
- Update transaction view on broadcast
- 01:07:15 10101 v1.0.20 (Self-custodial on-chain and off-chain wallet with trading)
- Do not trigger DLC manager periodic check twice
- Simplify maker binary
- Prefer unused addresses to new ones (temporarily)
- chore: Remove share on twitter button temporarily
- Use address caches in LnDlcWallet
- Set background transaction priority to 24 blocks
- Improve error message when trying to collab close LN with DLC channel
- Simplify deserialisation of channel ID
- Stabilise key dependencies
- 01:08:45 Orange Pill App v1.4.0
- Event creation
- Event management (edit & delete)
- Redesigned events tab
- You can now send zaps on the Orange Pill App
- 01:09:08 Peach v0.2.9
- Update bdk-rn
- Fund escrow from Peach wallet
- Improve app startup time
- Peach en français
- Featured events/meetups
- French PM: no fees for a month (from 21.06 on)
- 01:09:27 River
- Auto-withdrawals
- Custodial lightning API
- Bitcoin vs the $156 Trillion Global Payments Industry research paper pubished
Project spotlight
- 01:18:58 mnemonikey
- Deterministic backup and recovery of PGP keys using human-readable phrases.
- Save your PGP identity as a list of English words. Use these words to recover lost keys or derive new subkeys.
- 01:19:44 Runcitadel
- Citadel OS is the operating system of Umbrel Bitcoin and Lightning node.
- Itâs based on Raspberry Pi OS (formerly Raspbian) and uses pi-gen for customization.
- Citadel allows you to easily run a Bitcoin & Lightning node in your home, without depending on any cloud provider.
- 2 versions:
- Citadel v0.2.3: the default version of Citadel. âThis version will soon be replaced by the new Nirvati release, but is currently the version with the most features and also features an app store with a variety of apps.â
- Citadel Nirvati edition (technical preview): âThe next generation of Citadel. 100% open source, most parts rebuilt from scratch, and a lot more features in the core. Apps are still mostly missing, including basic Bitcoin & Lightning features.â
- 01:19:54 BitcoinExplorer.org: The free, open-source, easy-to-setup, easy-to-use, self-hosted explorer
- 01:20:32 tapsim
- Tapsim is a simple tool built in Go for debugging Bitcoin Tapscript transactions.
- Itâs aimed at developers wanting play with Bitcoin script primitives, aid in script debugging, and visualize the VM state as scripts are executed.
Lightning
Software Releases & Project Updates
- 01:20:42 Alby v2.1.0 The Shark Nebula
- feat: add wallet page
- feat: add discovery page vida project
- feat: add Coincards.com to websites.json
- feat: change wording to âpasscodeâ
- feat: speed up injection of window objects
- feat: Add window.alby methods
- feat: new onboarding cards
- 01:21:09 Blink v2.2.82
- Features
- Handle onchain transaction hash null for pending unbroadcast state (#2364)
- Blink app icon (#2371)
- Send all onchain (#2381)
- Display fees for max payout (#2397)
- Miscellaneous Tasks
- Adding Malay language
- Default invoice memo
- Show sats fees for onchain payment
- 01:21:32 cashu 0.12.1
- NUTs:
- Dynamic change output amounts (NUT-08 update)
- Mint:
- Use the httpx library instead of requests for asynchronous operations.
- Transition from using DB locks to asyncio locks for RaspberryPi systems and LNbits compatibility.
- Wallet:
- Huge performance increase due to database optimizations.
- Multimint swaps now available in Nutshell.
- Option to mint tokens of a specific denomination for headless operation.
- Option to send existing token denominations without a /split for high-frequency payments.
- 01:22:06 Mutiny Wallet Updates
- Added âSend Maxâ buttons for both on-chain sends and new channel openings, making it easier to shift all your on-chain funds without dust left behind.
- Beta warning dialog with helpful links, to educate users about using our wallet during this beta phase.
- Zaps now typically send out in under 10s
- In the pipeline: an in-app feedback form, static channel backups, wallet recovery, authentication, and more
- 01:22:58 mutiny-node
- v0.3.13
- Sets the floor for the minimize transaction feerate when negotiating channel on chain fees with a peer. Should result in less channel closures that comes from the two peers not being able to negitiate the next channel fee.
- v0.3.10
- Improve on-chain activity for old channel closures
- Nostr Wallet Connect improvements that should allow event fetching to be more efficient and quicker
- Fixes force close bugs relating to an old fee rate estimate
- Reduce wasm binary size by ~7% to 8.3MB
- New fee estimations APIs for sweeps
- v0.3.12
- Added an option to launch mutiny-node without connecting to peers, to fix âFallen Behindâ errors when connecting to a peer with an outdated state.
- Moved some functions to not rely on the node manager, such as exporting state and logs.
- Local storage is now cleared when importing a new wallet.
- 01:24:21 Eclair v0.9.0
- Dual funding: Eclair is now up-to-date with the latest state of the dual funding specification.
- Splicing prototype: Eclair now supports a custom prototype for splicing
- Bolt 12 offers: Continued working on Bolt 12 support, and made a lot of updates to this experimental feature
- 01:26:05 TORQ v0.23.0
- Open telemetry instrumentation
- Jaeger tracing
- Prometheus export
- Peersâ page now supports multi-node setups
- Custom mempool.space URL
- Inspect a closed/closing channel
- Pagination added to all channel table pages and forwarding pages
- 01:28:53 Voltage Surge
- Surge provides node operators with a way to access and visualize valuable data about their node.
- Data includes:
- The nodeâs health status
- Detailed payment history (including success rates)
- Channel analytics (identifying channels that require rebalancing or are inactive)
- Historical activity for each channel
- Peer information
- 01:29:05 Boltz New Web App:
- United Liquid & mainchain swaps: one web app to swap them all
- Increased Liquid swap limits: Now up to 0.1 BTC
- Swap to Taproot addresses: now supporting bech32m
- Enhanced privacy: Liquid swaps available via onion domain
- App Store censorship resistance: install as Progressive Web App
- Exact on-chain amounts: swap to pay with precision down to the satoshi
- 01:29:18 Lightning Terminal
- Multi-Node UX: Manage multiple nodes in a single UX
- 01:29:28 Zebedee Time-based rewards
- Get paid in Bitcoin simply for playing games. Not related to how well you do, just how long you play.
- 01:29:33 Stacker News v1.0.5
- Remove BLoC & Flutter BLoC stuff
- Profile Page: Tap user button to send tip
- Layout adjustments
Project spotlight
- 01:29:46 LDK Node: A ready-to-go Lightning node library built using LDK and BDK.
- LDK Node is a self-custodial Lightning node in library form.
- Its central goal is to provide a small, simple, and straightforward interface that enables users to easily set up and run a Lightning node with an integrated on-chain wallet
- While minimalism is at its core, LDK Node aims to be sufficiently modular and configurable to be useful for a variety of use cases.
- An example iOS app using LDK Node has been made - Monday
- 01:29:59 Coffee Plugin Manager
- Plugin manager for Core Lightning.
- Takes care of all the configuration and installation of a plugin for your Core Lightning node.
- Handles all the tedious setup and configuration tasks of the underlying Core Lightning plugin infrastructure and the hassle of setting up dependencies.
- Helps you keep your plugins up to date. With CLI and git support, you can update your plugin to the latest version, ensuring it works seamlessly.
- 01:30:15 cashu-rs-mint
- Anew Cashu mint implementation in Rust being developed by @thesimplekid â Direct support for a Core Lightning backend
- 01:30:21 Lightning Piggy âĄď¸đˇ
- An electronic cash piggy bank for children that accepts Bitcoin sent over lightning, while displaying the amount saved in satoshis.
Nostr
Software Releases & Project Updates
- 01:30:29 Primal One-Tap Zaps [Demo]
- Primal Unveils One-Tap Zaps: Seamless Zaps using WebLN & Alby
- Primalâs integration of WebLN allows users of WebLN-enabled wallets, such as Breez, Blixt, or Alby, to initiate one-tap zaps on the app.
- This eliminates the need for scanning QR codes for initiating payments.
Project spotlight
- 01:30:47 Oak Node
- An LND node tool that lets its users to send scheduled Lightning payments, interact with your node over Nostr DMs or PGP-secured emails, mine Nostr vanity keys, and more.
Boosts
- 01:31:28 Thanks to everyone who streamed sats, and shoutout to our top boosters:
- @apemithrandir (7,777 sats) âv4vâ
- dubravko (1,000 sats) âY U No read Boostsâ?â
- @michaelmatulef (500 sats) âThe groups laughter is contagious đ¤Łâ
Bitcoin Optech Newsletter
- 01:32:11 256
- Proposal to extend BOLT11 invoices to request two payments:
- Thomas Voegtlin posted to the Lightning-Dev mailing list to suggest BOLT11 invoices be extended to optionally allow a receiver to request two separate payments from a spender, with each payment having a separate secret and amount.
- 01:32:27 255
- Discussion about the taproot annex:
- Joost Jager posted to the Bitcoin-Dev mailing list a request for a change in the Bitcoin Core transaction relay and mining policy to allow storing arbitrary data in the taproot annex field. This field is an optional part of the witness data for taproot transactions.
- Draft BIP for silent payments:
- Josie Baker and Ruben Somsen posted to the Bitcoin-Dev mailing list a draft BIP for silent payments, a type of reusable payment code that will produce a unique onchain address each time it is used, preventing output linking.
- Output linking can significantly reduce the privacy of users (including users not directly involved in a transaction).
- The draft goes into detail about the benefits of the proposal, its tradeoffs, and how software can effectively use it.
News & Noteworthy
Bitcoin
- 01:32:38 Ledger Recover Cryptographic Protocol White Paper released for review
- Document covers the system design, architecture, and operational flows of Ledger Recover, for backing up and restoring the Ledger deviceâs Secret Recovery Phrase.
- 01:33:01 Bitkey invites first external customers in Beta launch
- 01:33:06 Binance Pool launches the BTC Transaction Accelerator [Announcement]
- Through this new feature, you can speed up any on-chain transaction on the #Bitcoin network
- 01:33:11 Ministry of Nodes Bitcoin Nodebox [launched]
- Built from arefurbished Dell Optiplex MicroPC or Lenovo ThinkCentre MiniPC
- 01:33:42 Bitcoin Centric-ai âSpirit Of Satoshiâ Unveiled [Bitcoin Magazine]
- The Spirit of Satoshi, the worldâs first Bitcoin-centric AI, has been announced, promising to revolutionize the understanding and accessibility of Bitcoin knowledge.
- âItâs a Large Language Model being built from first principles, oriented on the core values of Bitcoin, trained on the best bitcoin data in the world, and fine-tuned by the global bitcoin community.â
- The release stated that development is driven by the need to provide an alternative to mainstream, generalized language models and preserve the collective intelligence of the Bitcoin community.
Lightning
- 01:34:13 Binance joins the lightning network with a node and will be enabling lightning withdrawals
- 01:34:49 The lightning network is closely approaching All Time High levels at 5,608 BTC on the network. [Amboss]
- 01:34:58 Santander blog post highlights the benefits of Lightning in enhancing Bitcoin scalability.
- The post by the largest bank in Spain explained how Lightning enables users to conduct cost-effective transactions with instant settlement, contributing to the overall improvement of the Bitcoin networkâs efficiency and scalability.
Misc
- The post by the largest bank in Spain explained how Lightning enables users to conduct cost-effective transactions with instant settlement, contributing to the overall improvement of the Bitcoin networkâs efficiency and scalability.
- 01:35:06 taproot-assets v0.2.2
- Use the proper default tapd directory (cmd/tapcli).
- Add Signet support.
- Implement getinfo RPC request.
- Expose FetchAssetMeta on the CLI.
- Add production Docker file for official builds.
- Support multiple proof courier service types in itest.
- Add asset type field to asset commitment structure.
- Use hex encoding for raw bytes in REST API.
- Make batch state atomic in caretaker.
- Add asset ownership proof sub-commands in cmd/tapcli.
- Implement method to decode proofs into a human-readable format in RPC and tapcli.
Finance
- 01:36:34 Crypto custody firm Prime Trust has âa shortfall in customer fundsâ [Coindesk]
- Was unable to meet all withdrawal requests this month, the Nevada Department of Business and Industry said Thursday.
- Prime Trust is âoperating at a substantial deficitâ or may even be insolvent, the order said.
- The Departmentâs Financial Institutions Division (FID), which oversees state-regulated trust companies, ordered Prime Trust to cease all activities which violate Nevada regulations, alleging that the companyâs âoverall financial condition ⌠has considerably deteriorated to a critically deficient level.â
- Prime Trust can request a hearing within 30 days of the order. If it does not file for one, the cease-and-desist order will be deemed final.
- The order was published on the Nevada regulatorâs website hours after fellow crypto company BitGo announced it was terminating its potential acquisition of Prime Trust.
- 01:41:51 The Bitcoin ETF Race
- Wisdomtree [Bitcoin Magazine]]
- WisdomTree, a prominent provider of exchange-traded funds (ETFs), has filed an application seeking approval for the launch of the WisdomTree Bitcoin Trust, to be listed on the Cboe BZX Exchange.
- This filing comes in the wake of BlackRockâs recent application for a spot bitcoin ETF, signaling the increasing interest and recognition of bitcoin within the traditional finance space.
- Valkyrie [Bitcoin Magazine]
- A Delaware-based subsidiary of Valkyrie Investments Inc. has filed an updated spot ETF proposal, altering the intended exchange to Nasdaq and changing the ticker to $BRRR.
- The company, which already has a bitcoin futures ETF product listed on the Nasdaq, is likely to have been closely observing the developments in the industry, with a particular focus on other firms entering the ETF market.
- 01:42:10 Hong Kongâs HSBC Allows Customers To Trade Bitcoin Etfs, Signaling A Shift In Traditional Banksâ Stance [Bitcoin Magazine]
- Hong Kongâs leading financial institution has made a significant move by allowing its customers to trade Bitcoin exchange-traded funds (ETFs).
- This development marks a notable shift in the stance of traditional banks towards bitcoin, as HSBC has previously been cautious in embracing it.
Shitcoin Wreckage
- 01:42:22 Unregistered Securities Removed from Robinhood [WatcherGuru]
- Robinhood, the popular trading platform, has decided to de-list Cardano (ADA), Polygon (MATIC), and Solana (SOL) cryptocurrencies.
Security
- Robinhood, the popular trading platform, has decided to de-list Cardano (ADA), Polygon (MATIC), and Solana (SOL) cryptocurrencies.
- 01:42:29 North Korean Hackers Pocketed More Than $100M in Atomic Wallet Hack [Decrypt]
- The North Korean group allegedly behind a hack which earlier this month targeted Atomic Wallet have now pocketed over $100 million in stolen crypto, blockchain analytics firm Elliptic said today.
- Cybercriminals hacked self-custodial, decentralized Atomic Wallet on June 3, taking at the time $35 million-worth of digital tokens.
- Elliptic attributed the attack to cybercrime syndicate Lazarus Group, which is believed to have stolen over $2 billion in its prolific hacking.
- 01:43:30 Malicious âTrezor Wallet Suiteâ App in Apple AppStore Steals Crypto by Requesting Seed Phrase [Security Alert] #### Funding
- 01:47:24 New Spiral grantee - Matthew Ramsden
- Matthew is an experienced iOS developer who is building native Swift apps for Bitcoin Dev Kit related to projects such as production grade points of reference implementation, assisting with BDK maintainer manual testing, shaping the BDK API, and integrating and collaborating with the Bitcoin Design Community to develop best practices in UI & UX.
- Matthew is also planning to work on LDK Node, Bitcoin Dev Kit Scripts, Bitcoin Dev Kit Language Bindings (Rust), Wallet UI, LDK Swift bindings and more.
Mining
- 01:47:53 Riot Purchases 7.6 Eh/s Of Next Generation Miners From MicroBT, Manufactured In The United States [Press release]
- Landmark deal includes an initial purchase of 33,280 miners to increase self-mining capacity to 20.1 EH/s upon full deployment in 2024.
- Agreement also includes an option to purchase up to 66,560 additional miners at same terms.
Reads
- 01:48:00 Deep Dive into Zero-Knowledge Proofs by [NOAH]
- 01:48:08 Ark Layer 2: A Groundbreaking Development in Bitcoin Transactional Landscape by [NOAH]
- 01:48:13 Bitcoin as a Nonviolent Tool Against State Financial Censorship [Ville M. Kokkomäki]
- 01:48:27 The Grug Brained Developer: A laymanâs guide to thinking like the self-aware smol brained
Resources
- Bitcoin Review Podcast BR036 - Lightning Privacy & Splice Panel ft. Tbast, Dusty, Tony, Jeff & Vivek
Episode submission ideas
- Weâre looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to bitcoin.review and follow the contact links at the bottom of the page.
Get in touch with the pod
- Podcast Twitter
- NVK Twitter
- Telegram
- Nostr & LN âĄnvk@nvk.org (not an email!)
Did I get anything wrong above? Help me correct it producer@coinkite.com