BR041 - Sparrow, River, COLDCARD, Trident Wallet + MORE ft. Craig Raw, Rob Hamilton & Alex Leishman
I’m joined by guests Craig Raw, Rob Hamilton & Alex Leishman to go through the list.
Housekeeping
00:01:53 #LearnToBuild
00:09:18 COLDCARD PRs
Offer to store/vault ephemeral secrets if opt-in enabled by user
Vault is in settings object (encrypted)
User can easily switch to ephemeral seeds stored in Seed Vault
00:17:44 Censorship rant: Damus vs Apple saga (Damus removal from app store confirmed)
Security Updates
00:24:11 Firmware Extraction: Evil-Maid Attacks on Blockstream Jade Hardware Wallet [Ledger Blog]
The Ledger Donjon team, who is responsible for boosting the security of Ledger products, discovered a hardware vulnerability in the Blockstream hardware wallet (Jade).
An attacker with a stolen Blockstream hardware wallet can decrypt the encrypted firmware that is stored in the external flash, using side-channel attacks (SCAs) to inject a malicious code. An example could be a malicious code that performs transactions to substituted addresses.
It can be called an evil maid attack.
Bitcoin
Software Releases & Project Updates
00:31:04 COLDCARD
New Feature: Batch Sign PSBTs. Advanced/Tools -> File Management -> Batch Sign PSBT
Enhancement: change Key Origin Information export format in multisig addresses.csv to match BIP-0380
Enhancement: Address explorer UX cosmetics, now with arrows and dots.
Deposit mode being worked on
COLDCARD colours
Find binary here and view release notes. Advanced features currently in Edge:
Miniscript and MiniTapscript support (see docs/miniscript.md)
New Enhancement: Tapscript up to 8 leafs
Taproot spending, signing, multisig.
BIP-129 Bitcoin Secure Multisig Setup (BSMS)
00:41:08 Sparrow v1.7.7
Improve the mempool fee rates chart to reflect finer granularity and offer an expanded display on click
Add a 24h toggle to expanded mempool fee rates chart
Add additional inputs to an RBF transaction if needed as required fee is increased
Display the order of word selection on a Border Wallets grid
Avoid simultaneous multiple selection on a Border Wallets grid
Clarify recovery phrase purpose on Border Wallets PDF
Support spendable property on UTXOs in BIP329 wallet label imports and exports
Support scanning text QR containing seed words
Support compact SeedQRs with high error correction
Look for supported cards across all connected card terminals
Support airgapped keystore import of a Tapsigner with a custom derivation path
Add a separate button to backup Tapsigner without changing the PIN
Ensure canonical ordering of key expressions in multisig descriptor QRs
00:52:11 Trident Wallet: Institutional-Grade Open Source Bitcoin Wallet
Open source wallet designed for multi-institutional custody and to protect against collusion
Choose which keys must sign a transaction for any given scenario
Optional embedded property insurance on your bitcoin
Great user experience and highly customizable without sacrificing security
Update: Coldcard Support with Miniscript
01:00:26 Nunchuk iOS v1.9.27
Support for Child-Pays-For-Parent (CPFP) transactions
01:00:37 Blockstream Green Desktop v1.2.2
Added:
Pass hash of uncompressed firmware when updating Jade
Changed:
Better error messages in increase fee dialog
CI process for signing for Windows
Improve Ledger warning to select correct apps on dashboard
Improve Jade serial port writing
01:01:15 Keeper v1.0.6
Directly send remixed sats from Whirlpools to your multi-sig Vaults.
Health Check for Signing Devices:
Ascertain if your signing device is working as expected.
Keeper will highlight if you have not accessed one of the devices for a prolonged period of time.
Optimised the list of white-listed public servers and improved error messaging pertaining to node connectivity
01:01:53 Trezor v23.6.1
New feature: Coinjoin candidate transactions
Improvement: New Suite Guide structure for optimized navigation
Improvement: Enhanced UI for improved account public key display
01:02:09 Umbrel v0.5.4
Reimagined App Store
Migration Assistant feature enables transfer of data and apps from a Raspberry Pi-based Umbrel to the new Umbrel Home in one click.
Performance improvements, bug fixes and refinements
01:04:14 StartOS v0.3.4.3
Improved Tor reliability
Experimental features tab (Zram, Manually reset tor)
Update branding
Bugfixes and performance enhancements
01:04:30 Floresta v0.4.0 (A lightweight Bitcoin full node implementation written in Rust, powered by Utreexo)
Fix config file parse error and docs ortography by @Guilospanck in #27
Added support for output descriptors
Derive more addresses as we get transactions
Improve address selection
Update transaction view on broadcast
01:07:15 10101 v1.0.20 (Self-custodial on-chain and off-chain wallet with trading)
Do not trigger DLC manager periodic check twice
Simplify maker binary
Prefer unused addresses to new ones (temporarily)
chore: Remove share on twitter button temporarily
Use address caches in LnDlcWallet
Set background transaction priority to 24 blocks
Improve error message when trying to collab close LN with DLC channel
Simplify deserialisation of channel ID
Stabilise key dependencies
01:08:45 Orange Pill App v1.4.0
Event creation
Event management (edit & delete)
Redesigned events tab
You can now send zaps on the Orange Pill App
01:09:08 Peach v0.2.9
Update bdk-rn
Fund escrow from Peach wallet
Improve app startup time
Peach en français
Featured events/meetups
French PM: no fees for a month (from 21.06 on)
01:09:27 River
Auto-withdrawals
Custodial lightning API
Bitcoin vs the $156 Trillion Global Payments Industry research paper pubished
Project spotlight
01:18:58 mnemonikey
Deterministic backup and recovery of PGP keys using human-readable phrases.
Save your PGP identity as a list of English words. Use these words to recover lost keys or derive new subkeys.
01:19:44 Runcitadel
Citadel OS is the operating system of Umbrel Bitcoin and Lightning node.
It’s based on Raspberry Pi OS (formerly Raspbian) and uses pi-gen for customization.
Citadel allows you to easily run a Bitcoin & Lightning node in your home, without depending on any cloud provider.
2 versions:
Citadel v0.2.3: the default version of Citadel. “This version will soon be replaced by the new Nirvati release, but is currently the version with the most features and also features an app store with a variety of apps.”
Citadel Nirvati edition (technical preview): “The next generation of Citadel. 100% open source, most parts rebuilt from scratch, and a lot more features in the core. Apps are still mostly missing, including basic Bitcoin & Lightning features.”
01:19:54 BitcoinExplorer.org: The free, open-source, easy-to-setup, easy-to-use, self-hosted explorer
01:20:32 tapsim
Tapsim is a simple tool built in Go for debugging Bitcoin Tapscript transactions.
It’s aimed at developers wanting play with Bitcoin script primitives, aid in script debugging, and visualize the VM state as scripts are executed.
Lightning
Software Releases & Project Updates
01:20:42 Alby v2.1.0 The Shark Nebula
feat: add wallet page
feat: add discovery page vida project
feat: add Coincards.com to websites.json
feat: change wording to ‘passcode’
feat: speed up injection of window objects
feat: Add window.alby methods
feat: new onboarding cards
01:21:09 Blink v2.2.82
Features
Handle onchain transaction hash null for pending unbroadcast state (#2364)
Blink app icon (#2371)
Send all onchain (#2381)
Display fees for max payout (#2397)
Miscellaneous Tasks
Adding Malay language
Default invoice memo
Show sats fees for onchain payment
01:21:32 cashu 0.12.1
NUTs:
Dynamic change output amounts (NUT-08 update)
Mint:
Use the httpx library instead of requests for asynchronous operations.
Transition from using DB locks to asyncio locks for RaspberryPi systems and LNbits compatibility.
Wallet:
Huge performance increase due to database optimizations.
Multimint swaps now available in Nutshell.
Option to mint tokens of a specific denomination for headless operation.
Option to send existing token denominations without a /split for high-frequency payments.
01:22:06 Mutiny Wallet Updates
Added ‘Send Max’ buttons for both on-chain sends and new channel openings, making it easier to shift all your on-chain funds without dust left behind.
Beta warning dialog with helpful links, to educate users about using our wallet during this beta phase.
Zaps now typically send out in under 10s
In the pipeline: an in-app feedback form, static channel backups, wallet recovery, authentication, and more
01:22:58 mutiny-node
Sets the floor for the minimize transaction feerate when negotiating channel on chain fees with a peer. Should result in less channel closures that comes from the two peers not being able to negitiate the next channel fee.
Improve on-chain activity for old channel closures
Nostr Wallet Connect improvements that should allow event fetching to be more efficient and quicker
Fixes force close bugs relating to an old fee rate estimate
Reduce wasm binary size by ~7% to 8.3MB
New fee estimations APIs for sweeps
Added an option to launch mutiny-node without connecting to peers, to fix “Fallen Behind” errors when connecting to a peer with an outdated state.
Moved some functions to not rely on the node manager, such as exporting state and logs.
Local storage is now cleared when importing a new wallet.
01:24:21 Eclair v0.9.0
Dual funding: Eclair is now up-to-date with the latest state of the dual funding specification.
Splicing prototype: Eclair now supports a custom prototype for splicing
Bolt 12 offers: Continued working on Bolt 12 support, and made a lot of updates to this experimental feature
01:26:05 TORQ v0.23.0
Open telemetry instrumentation
Jaeger tracing
Prometheus export
Peers’ page now supports multi-node setups
Custom mempool.space URL
Inspect a closed/closing channel
Pagination added to all channel table pages and forwarding pages
01:28:53 Voltage Surge
Surge provides node operators with a way to access and visualize valuable data about their node.
Data includes:
The node’s health status
Detailed payment history (including success rates)
Channel analytics (identifying channels that require rebalancing or are inactive)
Historical activity for each channel
Peer information
01:29:05 Boltz New Web App:
United Liquid & mainchain swaps: one web app to swap them all
Increased Liquid swap limits: Now up to 0.1 BTC
Swap to Taproot addresses: now supporting bech32m
Enhanced privacy: Liquid swaps available via onion domain
App Store censorship resistance: install as Progressive Web App
Exact on-chain amounts: swap to pay with precision down to the satoshi
01:29:18 Lightning Terminal
Multi-Node UX: Manage multiple nodes in a single UX
01:29:28 Zebedee Time-based rewards
Get paid in Bitcoin simply for playing games. Not related to how well you do, just how long you play.
01:29:33 Stacker News v1.0.5
Remove BLoC & Flutter BLoC stuff
Profile Page: Tap user button to send tip
Layout adjustments
Project spotlight
01:29:46 LDK Node: A ready-to-go Lightning node library built using LDK and BDK.
LDK Node is a self-custodial Lightning node in library form.
Its central goal is to provide a small, simple, and straightforward interface that enables users to easily set up and run a Lightning node with an integrated on-chain wallet
While minimalism is at its core, LDK Node aims to be sufficiently modular and configurable to be useful for a variety of use cases.
An example iOS app using LDK Node has been made - Monday
01:29:59 Coffee Plugin Manager
Plugin manager for Core Lightning.
Takes care of all the configuration and installation of a plugin for your Core Lightning node.
Handles all the tedious setup and configuration tasks of the underlying Core Lightning plugin infrastructure and the hassle of setting up dependencies.
Helps you keep your plugins up to date. With CLI and git support, you can update your plugin to the latest version, ensuring it works seamlessly.
01:30:15 cashu-rs-mint
Anew Cashu mint implementation in Rust being developed by @thesimplekid – Direct support for a Core Lightning backend
01:30:21 Lightning Piggy ⚡️🐷
An electronic cash piggy bank for children that accepts Bitcoin sent over lightning, while displaying the amount saved in satoshis.
Nostr
Software Releases & Project Updates
01:30:29 Primal One-Tap Zaps [Demo]
Primal Unveils One-Tap Zaps: Seamless Zaps using WebLN & Alby
Primal’s integration of WebLN allows users of WebLN-enabled wallets, such as Breez, Blixt, or Alby, to initiate one-tap zaps on the app.
This eliminates the need for scanning QR codes for initiating payments.
Project spotlight
01:30:47 Oak Node
An LND node tool that lets its users to send scheduled Lightning payments, interact with your node over Nostr DMs or PGP-secured emails, mine Nostr vanity keys, and more.
Boosts
01:31:28 Thanks to everyone who streamed sats, and shoutout to our top boosters:
@apemithrandir (7,777 sats) “v4v”
dubravko (1,000 sats) “Y U No read Boosts”?”
@michaelmatulef (500 sats) “The groups laughter is contagious 🤣”
Bitcoin Optech Newsletter
01:32:11 256
Proposal to extend BOLT11 invoices to request two payments:
Thomas Voegtlin posted to the Lightning-Dev mailing list to suggest BOLT11 invoices be extended to optionally allow a receiver to request two separate payments from a spender, with each payment having a separate secret and amount.
01:32:27 255
Discussion about the taproot annex:
Joost Jager posted to the Bitcoin-Dev mailing list a request for a change in the Bitcoin Core transaction relay and mining policy to allow storing arbitrary data in the taproot annex field. This field is an optional part of the witness data for taproot transactions.
Draft BIP for silent payments:
Josie Baker and Ruben Somsen posted to the Bitcoin-Dev mailing list a draft BIP for silent payments, a type of reusable payment code that will produce a unique onchain address each time it is used, preventing output linking.
Output linking can significantly reduce the privacy of users (including users not directly involved in a transaction).
The draft goes into detail about the benefits of the proposal, its tradeoffs, and how software can effectively use it.
News & Noteworthy
Bitcoin
01:32:38 Ledger Recover Cryptographic Protocol White Paper released for review
Document covers the system design, architecture, and operational flows of Ledger Recover, for backing up and restoring the Ledger device’s Secret Recovery Phrase.
01:33:01 Bitkey invites first external customers in Beta launch
01:33:06 Binance Pool launches the BTC Transaction Accelerator [Announcement]
Through this new feature, you can speed up any on-chain transaction on the #Bitcoin network
01:33:11 Ministry of Nodes Bitcoin Nodebox [launched]
Built from arefurbished Dell Optiplex MicroPC or Lenovo ThinkCentre MiniPC
01:33:42 Bitcoin Centric-ai “Spirit Of Satoshi” Unveiled [Bitcoin Magazine]
The Spirit of Satoshi, the world’s first Bitcoin-centric AI, has been announced, promising to revolutionize the understanding and accessibility of Bitcoin knowledge.
“It’s a Large Language Model being built from first principles, oriented on the core values of Bitcoin, trained on the best bitcoin data in the world, and fine-tuned by the global bitcoin community.”
The release stated that development is driven by the need to provide an alternative to mainstream, generalized language models and preserve the collective intelligence of the Bitcoin community.
Lightning
01:34:13 Binance joins the lightning network with a node and will be enabling lightning withdrawals
01:34:49 The lightning network is closely approaching All Time High levels at 5,608 BTC on the network. [Amboss]
01:34:58 Santander blog post highlights the benefits of Lightning in enhancing Bitcoin scalability.
The post by the largest bank in Spain explained how Lightning enables users to conduct cost-effective transactions with instant settlement, contributing to the overall improvement of the Bitcoin network’s efficiency and scalability.
Misc
01:35:06 taproot-assets v0.2.2
Use the proper default tapd directory (cmd/tapcli).
Add Signet support.
Implement getinfo RPC request.
Expose FetchAssetMeta on the CLI.
Add production Docker file for official builds.
Support multiple proof courier service types in itest.
Add asset type field to asset commitment structure.
Use hex encoding for raw bytes in REST API.
Make batch state atomic in caretaker.
Add asset ownership proof sub-commands in cmd/tapcli.
Implement method to decode proofs into a human-readable format in RPC and tapcli.
Finance
01:36:34 Crypto custody firm Prime Trust has “a shortfall in customer funds” [Coindesk]
Was unable to meet all withdrawal requests this month, the Nevada Department of Business and Industry said Thursday.
Prime Trust is “operating at a substantial deficit” or may even be insolvent, the order said.
The Department’s Financial Institutions Division (FID), which oversees state-regulated trust companies, ordered Prime Trust to cease all activities which violate Nevada regulations, alleging that the company’s “overall financial condition … has considerably deteriorated to a critically deficient level.”
Prime Trust can request a hearing within 30 days of the order. If it does not file for one, the cease-and-desist order will be deemed final.
The order was published on the Nevada regulator’s website hours after fellow crypto company BitGo announced it was terminating its potential acquisition of Prime Trust.
01:41:51 The Bitcoin ETF Race
Wisdomtree [Bitcoin Magazine]]
WisdomTree, a prominent provider of exchange-traded funds (ETFs), has filed an application seeking approval for the launch of the WisdomTree Bitcoin Trust, to be listed on the Cboe BZX Exchange.
This filing comes in the wake of BlackRock’s recent application for a spot bitcoin ETF, signaling the increasing interest and recognition of bitcoin within the traditional finance space.
Valkyrie [Bitcoin Magazine]
A Delaware-based subsidiary of Valkyrie Investments Inc. has filed an updated spot ETF proposal, altering the intended exchange to Nasdaq and changing the ticker to $BRRR.
The company, which already has a bitcoin futures ETF product listed on the Nasdaq, is likely to have been closely observing the developments in the industry, with a particular focus on other firms entering the ETF market.
01:42:10 Hong Kong’s HSBC Allows Customers To Trade Bitcoin Etfs, Signaling A Shift In Traditional Banks’ Stance [Bitcoin Magazine]
Hong Kong’s leading financial institution has made a significant move by allowing its customers to trade Bitcoin exchange-traded funds (ETFs).
This development marks a notable shift in the stance of traditional banks towards bitcoin, as HSBC has previously been cautious in embracing it.
Shitcoin Wreckage
01:42:22 Unregistered Securities Removed from Robinhood [WatcherGuru]
Robinhood, the popular trading platform, has decided to de-list Cardano (ADA), Polygon (MATIC), and Solana (SOL) cryptocurrencies.
Security
01:42:29 North Korean Hackers Pocketed More Than $100M in Atomic Wallet Hack [Decrypt]
The North Korean group allegedly behind a hack which earlier this month targeted Atomic Wallet have now pocketed over $100 million in stolen crypto, blockchain analytics firm Elliptic said today.
Cybercriminals hacked self-custodial, decentralized Atomic Wallet on June 3, taking at the time $35 million-worth of digital tokens.
Elliptic attributed the attack to cybercrime syndicate Lazarus Group, which is believed to have stolen over $2 billion in its prolific hacking.
01:43:30 Malicious ‘Trezor Wallet Suite’ App in Apple AppStore Steals Crypto by Requesting Seed Phrase [Security Alert] #### Funding
01:47:24 New Spiral grantee - Matthew Ramsden
Matthew is an experienced iOS developer who is building native Swift apps for Bitcoin Dev Kit related to projects such as production grade points of reference implementation, assisting with BDK maintainer manual testing, shaping the BDK API, and integrating and collaborating with the Bitcoin Design Community to develop best practices in UI & UX.
Matthew is also planning to work on LDK Node, Bitcoin Dev Kit Scripts, Bitcoin Dev Kit Language Bindings (Rust), Wallet UI, LDK Swift bindings and more.
Mining
01:47:53 Riot Purchases 7.6 Eh/s Of Next Generation Miners From MicroBT, Manufactured In The United States [Press release]
Landmark deal includes an initial purchase of 33,280 miners to increase self-mining capacity to 20.1 EH/s upon full deployment in 2024.
Agreement also includes an option to purchase up to 66,560 additional miners at same terms.
Reads
01:48:00 Deep Dive into Zero-Knowledge Proofs by [NOAH]
01:48:08 Ark Layer 2: A Groundbreaking Development in Bitcoin Transactional Landscape by [NOAH]
01:48:13 Bitcoin as a Nonviolent Tool Against State Financial Censorship [Ville M. Kokkomäki]
01:48:27 The Grug Brained Developer: A layman’s guide to thinking like the self-aware smol brained
Resources
Bitcoin Review Podcast BR036 - Lightning Privacy & Splice Panel ft. Tbast, Dusty, Tony, Jeff & Vivek
Episode submission ideas
We’re looking for ideas for interesting panel conversations. To send Bitcoin related questions, just go to bitcoin.review and follow the contact links at the bottom of the page.
Get in touch with the pod
Nostr & LN ⚡nvk@nvk.org (not an email!)