Announcements

Please join us for our next Socratic Seminar, hosted at Pubkey! Food and drinks will be available for purchase from Pubkey. A limited tab will be available on a first-come basis. We thank Wolf NYC for sponsoring the event. Discussion topics for the event are denoted with a 👉.

Follow New York BitDevs on Twitter

Follow us on NOSTR: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsu

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• A “Free” Relay Attack Taking Advantage of The Lack of Full-RBF In Core
• BIP Draft: “ChillDKG: Distributed Key Generation for FROST”
• Octojoin: Payjoin with no interaction between sender and recipient
• BIP Authors: These BIPs could be Final
• Public disclosure of 10 vulnerabilities affecting Bitcoin Core < 0.21.0
• Unlocking Blockchain UTXO Transactional Patterns and Their Effect on Storage and Throughput Trade-Offs
• 👉 Bitcoin Core Security Disclosure Policy
• BIP-85 Champion Unreachable? Please weigh in.

Delving Bitcoin

• Introduction to cluster linearization
• Bitcoin OP_CAT Use Cases #1: Covenants, #2: Merkle Trees, #3: Vaults, #4: Recursive Covenants
• Empirical Data Analysis of Fee Rate Forecasters for ASAP (next-block) Fee Estimation
• B’SST: Bitcoin-like Script Symbolic Tracer v0.1.3 released

Meetings

• Bitcoin PR Review Club
  • #29775 Testnet4 including PoW difficulty adjustment fix
• Bitcoin Core general developer meetings
  • June 27
  • July 4
  • July 11
  • July 18
• Lightning Specification meeting
  • July 1st
  • July 15th

Optech

• Bitcoin Optech Newsletter #309
  • Bitcoin Optech Newsletter #309 Recap Podcast
• Bitcoin Optech Newsletter #310
  • Bitcoin Optech Newsletter #310 Recap Podcast
• Bitcoin Optech Newsletter #311
  • Bitcoin Optech Newsletter #311 Recap Podcast
• Bitcoin Optech Newsletter #312

Network Data

• Bitcoin Cash Mining Pool Phoenix dominance spikes to 89%
• Definitive explanation of my weird Bitcoin transaction
• 👉 First v3 Bitcoin transaction
• Stale Blocks - 849233, 853051, 851170
• 👉 stratum.work explorer
• UNCOMMON GOODS rune mints backstopping fees
• Wasabi Wallet coordinator & explorer
• 👉 ZK Proof verified on signet

CVEs and Research

Research

• Adaptor Signatures: New Security Definition and A Generic Construction for NP Relations
• Benchmarking GNNs Using Lightning Network Data
• Blockchain Space Tokenization
• Bribe & Fork: Cheap Bribing Attacks via Forking Threat
• From Slow Propagation to Partition: Analyzing Bitcoin Over Anonymous Routing
• RFC 9591 The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two‑Round Schnorr Signatures
• Simple Logarithmic-size LSAG signature
• Shared-Custodial Password-Authenticated Deterministic Wallets
• Towards a Formal Foundation for Blockchain Rollups
• Unforgeability of Blind Schnorr in the Limited Concurrency Setting
• Unlocking Blockchain UTXO Transactional Patterns and Their Effect on Storage and Throughput Trade-Offs

InfoSec

• Cloudflare blames recent outage on BGP hijacking incident
• DNS hijacks target crypto platforms registered with Squarespace
• 👉 CrowdStrike update crashes Windows systems, causes outages worldwide
  • No drop in Bitcoin nodes following incident
• Gitlab attacker can run pipeline jobs as an arbitrary user
• Indirector: High-Precision Branch Target Injection Attacks Exploiting the Indirect Branch Predictor
• Infinite approval attack triggers $9.7m lost in LiFi protocol
• Malicious PyPi Package triggers $8m hack on Bittensor
• Oracle misconfiguration leads to $7.5m hack of Rho Market
• Polyfill supply chain attack hits 100K+ sites
• Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability
• WazirX exchange hacked for $235m
• 👉 Wasabi Wallet Security Incident Disclosure: July 9th-10th 2024

Pull Requests and repo updates

Bitcoin Core

• net: Allow -proxy=(::1) on nodes with IPV6 lo only
• assumeutxo: Don’t load a snapshot if it’s not in the best header chain
• rest: Reject negative outpoint index early in getutxos parsing
• refactor: add coinbase constraints to BlockAssembler::Options
• Wallet: Add max_tx_weight to transaction funding options (take 2)
• Fix cases of calls to FillPSBT errantly returning complete=true
• Make it possible to disable Tor binds and abort startup on bind failure
• script/sign: avoid duplicated signature verification after signing (+introduce signing benchmarks)
• kernel: De-globalize static validation variables
• net: fix race condition in self-connect detection
• MiniMiner: use FeeFrac in AncestorFeerateComparator
• test/BIP324: disconnection scenarios during v2 handshake
• psbt: Check non witness utxo outpoint early
• #28984 package rbf followups
• wallet: Migrate legacy wallets to descriptor wallets without requiring BDB
• prune, rpc: Check undo data when finding pruneheight
• Assumeutxo: bugfix on loadtxoutset with a divergent chain + test
• kernel: De-globalize validation caches
• validation: Check if mempool exists before size check in ActivateSnapshot
• Several randomness improvements
• rpc: Avoid getchaintxstats invalid results
• assumeutxo: Check snapshot base block is not in invalid chain
• kernel: remove mempool_persist
• init: Add option for rpccookie permissions (replace 26088)
• 👉 policy: Add PayToAnchor(P2A), OP_1 <0x4e73> as a standard output script for spending

BDK

• feat(electrum)!: Update bdk_electrum to use merkle proofs
• refactor(wallet)!: Add support for custom sorting and deprecate BIP69

rust-bitcoin

• Move locktimes and Sequence to primitives
• Specify required_height in variable name when comparing to other height
• Optimize base58 on small inputs
• Add TxIdentifier trait
• Move opcodes to primitives
• bip152: check if indexes do not overflow
• bip158: Hash data instead of copying first
• OP_RETURN standardness check

Core Lightning

• plugins/sql: allow datetime functions
• Part 4: offers for non-public nodes, and handling self-pay
• Part 3: offers with paths
• splice: Add funding outnum
• bolt12: allow minimal offer
• Part 2: connectd onionmessage improvements
• Connectd throttle
• Part 1: offers cleanups
• msggen: add missing-grpc command
• fundchannel: remove crash on race condition
• Connectd speed up #1: spend less time polling.
• Speed compilation times

eclair

• Reject new static_remote_key channels
• 👉 Activate route blinding and quiescence features
• Monitor onion messages

LDK

• Handle fallible commitment secret
• Make event handling fallible
• Make impl_writeable_tlv_based_enum* actually upgradable
• Misc routing optimization
• Allow blinded path diversification by expanding create_blinded_paths
• Clarify maximum length of an invoice description
• Handle fallible per commitment point for RAA
• Electrum: Use upstreamed validate_merkle_proof
• Revert “Signal GossipQuery support when using IgnoringMessagHandler”
• Use unique per-node “node_counter”s rather than a node hashmap in routing
• Introduce MessageContext and use it to allow abandon failed payments
• Fix bug failing CS-RAA resend order on pending commitment signatures
• Block monitor updates to ensure preimages are in each MPP part
• Set max path length when paying BOLT 12 invoices.
• Introduce mutation testing
• Update splice messages according to new spec draft
• Handle feerates of u32::MAX without overflowing
• Interactive TX negotiation tracks shared outputs

lnd

• btcwallet: bump dependency to fix duplicate address creation
• contractcourt: Taproot Channel Bugfixes
• DynComms (0/n): fn package additions
• (1/4) Route Blinding Receives: Groundwork
• sqldb+invoices: fix incorrectly stored invoice expiries when using native SQL
• multi: allow min-depth of zero for non-zero conf channels
• routing: remove left over TLV feature bit checks

BIPs

• bip-0046: Address Scheme for Timelocked Fidelity Bonds
• Move BIP 338 to Withdrawn
• 389: Explicitly disallow duplicate multipath
• bip-0327: Remove obsolete paragraph

BLIPs

• bLIP-0025: Allow forwarding HTLCs that underpay the onion encoded value

BOLTs

• Clarify onion spec: part 1 (the uncontroversial bits)
• bolt4+proposals: fix max_cltv_expiry calculation
• Drop the required channel_update in failure onions
• 328, 390, 373: BIPs for MuSig2 derivation, descriptors, and PSBT fields

New Releases

• Additive RBF Batcher
• Bitcoin Core 26.2

Events and Podcasts

• Bitcoin Explained: Silent Payments Part 2
• Matt Morehouse on Fuzz Testing the Lightning Network
• SLP588 - Why are Empty Blocks Happening with OrangeSurf from mempool.space
• SLP591 - Stable Channels with Tony Klausing
• The Bitcoin Development Podcast - Discussing Pre-0.21.0 Bitcoin Core Vulnerability Disclosures

Mining

• Bitcoin miner Bitfarms sets vote date on Riot’s attempted takeover
• Core Scientific to be first customer of Block’s mining chip
• Cryptocurrency mining as a novel virtual energy storage system in islanded and grid-connected microgrids
• Mining Pool Game Theory during Forks
• Network Hashrate Reaches 600 EH/s Amid Price Surge
• State of the Market: Bitcoin Mining H1 Review in 21 Charts
• The Development of Corsicana, The World’s Largest Bitcoin Mining Site

Miscellaneous

• Announcing the OpenSats Education Initiative
• BIP 353 Resolver
• Bitcoin Dev Project releases Bitcoin Search v2
• Bitcoin Dollar
• 👉 Bitcoinj bug causes Rootstock outage
• Can AMMs Be Built on Brollup?
• Charting the Course to Mt. Gox Repayments
• Full COPA vs CSW judgment available
• FROST Federation
• FROST Threshold Signatures for Multiple Channel Updates
• How Silent Payments Work
• Innovations in BitVMX: Reducing Protocol Rounds
• Introducing Brollup v2, Now Without The Trusted Setup
• Maelstrom Fund Announces Bitcoin Grant Program
• OP_CAT: THE PURR-FECT SOLUTION FOR COVENANTS?
• Opensats Fifth Wave of Bitcoin Grants
• Roman Storm Judge Grants Delay of Tornado Cash Trial
• Script State From Lamport Signatures
• Silent Payments introduce bitflipping pitfall to hardware wallets
• Spiral Grants - thesimplekid, sivr2, Pavlenex