Announcements

Please join us for our next Socratic Seminar, hosted at Pubkey! Food and drinks will be available for purchase from Pubkey. A limited tab will be available on a first-come basis. We thank Wolf NYC for sponsoring the event. Discussion topics for the event are denoted with a 👉.

Follow New York BitDevs on Twitter

Follow us on NOSTR: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsu

Presentation

• Cake Wallet implementation of Silent Payments

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• 👉 Timewarp fix, Mining software and Clocks
• BIP 8.5: Flag day activation based on nlocktime signaling
• Mining pools, stratumv2 and oblivious shares
• 👉 Bitcoin Core’s migration to the CMake buildsystem
• Bitcoin Knots 27.1.knots20240801 released
• 👉 Public disclosure of 2 vulnerabilities affecting Bitcoin Core < v22.0
• 👉 Keyless Anchors Are Vulnerable To Replacement Cycling Attacks
• HODL Tax Proposal
• BIP Draft: “FROST Signing”
• OP_ZKP updates

Delving Bitcoin

• 👉 Non interactive anti-exfil (airgap compatible)
• Efficient Multi-Input Transaction Grinding for OP_CAT-based Bitcoin Covenants
• BIP Draft: Flag day activation based on nLockTime signaling
• Casual research on running mempoolfullrbf
• 👉 Zawy’s Alternating Timestamp Attack
• Onion Messaging DoS Threat Mitigations
• 👉 Stats on compact block reconstructions
• Optimistic ZK verification using MATT
• Bolt 12 Trusted Contacts
• Cluster mempool: block building with sub-chunk granularity
• Hyperion: A discrete time network event simulator for Bitcoin (Core)

Meetings

• Bitcoin PR Review Club
  • #30352 Add PayToAnchor(P2A), OP 1 <0x4e73> as standard output script for spending
• Bitcoin Core general developer meetings
  • July 25
  • July 1
  • August 8
  • August 15
  • August 22
• Lightning Specification meeting
  • July 29th
  • August 12th
  • August 26th

Optech

• Bitcoin Optech Newsletter #313
  • Recap Podcast
• Bitcoin Optech Newsletter #314
  • Recap Podcast
• Bitcoin Optech Newsletter #315
  • Recap Podcast
• Bitcoin Optech Newsletter #316
  • Recap Podcast
• Bitcoin Optech Newsletter #317

Network Data

• 8 minute long song inscribed in 3KB
• 👉 Babylon staking protocol causes fee spike
• 👉 Bitaxe mines 290th solo block on solo ckpool
• Distribution of Lightning node implementations
• “First” OP_CAT transaction on mainnet
• Largest % difficulty adjustment in almost two years
• New mystery miner
• Two nodes serving up bad data on hundreds of unique IP addresses
• Lightning Data
  • Bitrefill
  • Coingate
  • OKX

    CVEs and Research

    Research

• Optimizing Big Integer Multiplication on Bitcoin: Introducing w-windowed Approach
• Permissionless Verifiable Information Dispersal (Data Availability for Bitcoin Rollups)

InfoSec

• 0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices
• ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts
• Crypto exchange Gemini discloses third-party data breach
• 👉 Dark Skippy Exfil Attack
• Engineering a backdoored bitcoin wallet
• dydx exchange DNS Hijack
• 👉 Intel SGX Fuse Key0 compromised
• Linux kernel impacted by new SLUBStick cross-cache attack
• Monero Black Marble Flood Attack
• New AMD SinkClose flaw helps install nearly undetectable malware
• rust-miniscript vulnerability disclosure (DoS/Stack Overflow)

Pull Requests and repo updates

Bitcoin Core

• kernel: pre-28.x chainparams and headerssync update
• Have miner account for timewarp mitigation, activate on regtest, lower nPowTargetTimespan to 144 and add test
• Fix maybe-uninitialized warning in IsSpentKey
• Move maximum timewarp attack threshold back to 600s from 7200s
• wallet: fix blank legacy detection
• validation: assumeutxo params mainnet
• 👉 Don’t empty dbcache on prune flushes: >30% faster IBD
• cluster mempool: cluster linearization algorithm
• guix: GCC 12 consolidation
• fix: Make TxidFromString() respect string_view length
• contrib: asmap-tool - Compare ASMaps with respect to specific addresses
• wallet: Fix listwalletdir listing of migrated default wallets and generated backup files
• chainparams: Handle Testnet4 in GetNetworkForMagic
• p2p: For assumeutxo, download snapshot chain before background chain
• assumeutxo: Drop block height from metadata
• 👉 Testnet4 including PoW difficulty adjustment fix
• Update libsecp256k1 subtree to latest master
• blockstorage: XOR blocksdir *.dat files
• policy: enable full-rbf by default
• rpc: Return errors in loadtxoutset that currently go to logs
• PayToAnchor(P2A) followups
• p2p: Lazy init some bloom filters; fuzz version handshake
• cluster mempool: merging & postprocessing of linearizations
• policy: Add PayToAnchor(P2A), OP_1 <0x4e73> as a standard output script for spending
• rpc: add utxo’s blockhash and number of confirmations to scantxoutset output
• depends: Cleanup postprocess commands after switching to CMake
• test: Add arguments for creating a slimmer TestingSetup
• rest: Reject truncated hex txid early in getutxos parsing
• Fee Estimation: change estimatesmartfee default mode to economical
• depends: build zeromq with CMake
• depends: build expat with CMake
• depends: Fix CMake-generated libevent*.pc files

BDK

• Introduce bdk_core
• Introduce tx_graph::Update and simplify TxGraph update logic
• Derive Clone on AddressInfo
• Simplify wallet persistence
• Allow opting out of getting LocalChain updates with FullScanRequest/SyncRequest structures
• (wallet) Enable support for single descriptor wallets
• bdk_wallet: Don’t reimplement descriptor checksum, use the one from rust-miniscript

rust-bitcoin

• feat(bip158): compute canonical filter hash
• Reduce API surface of tagged wrapped hash types
• Document the new build script magic
• bip158: Improve casting
• Push up the Default bound on HashEngine in order to better support keyed hash functions
• Add validation extension to script

libsecp

• release: prepare for 0.5.1
• Fix compilation when extrakeys module isn’t enabled

Core Lightning

• Real getroutes fixes
• lightningd: fix another trivial memleak when running installed version.
• renepay: bugfix assertion htlc_total<=known_max
• Sql plugin crash fix
• bookkeeper: fix up out-of-order migrations in rc1
• Renepay const prob cost
• cln-plugin: add multi options for String and i64
• Reckless RPC Plugin
• plugin/pay: fix crash if failcodename isn’t set.
• Fix gossip update propagation
• (RFC) offer: allow re-enabling a previously disabled offer
• bugfix: node refuses to re-start after emergency recover
• onchaind: Adjust the sweep fee estimation
• pay: Pre-flight checks and better error messages
• Askrene: an EXPERIMENTAL MCF plugin and infrastructure
• offers: fix crash when receiving response to offer without offer_issuser_id
• Gossmap topology compression and helper
• gossipd: always ask first peer for all the gossip.
• Part 6: final catchup to latest BOLT spec
• close: Do not attempt a unilateral close when we see another close on-chain
• common: fix endless loop in gossmap iteration.
• Part 5: experimental range

eclair

• Fix failure to launch from directory with space in it
• Pagination for channelstats RPC
• Add HTLC endorsement/confidence

LDK

• Allow sending closing tx signatures asynchronously
• Disambiguate blinded path ForwardNodes between payment + message
• Deprecate AvailableBalances::balance_msat
• Implement route blinding test vectors
• Add PaymentId authentication to public API
• Expose blinded paths’ advance_path_by_one
• Authenticate InvoiceError messages
• Accuracy fixes and differentiating sources for Balance
• Drop electrsd’s auto-download feature for good
• Make funding_transaction_generated take a ChannelId by value
• Set default ChannelHandshakeLimits::min_funding_satoshis to 1000
• Add Notifier to OnionMessenger
• tx-sync: Protect against Core’s Merkle leaf node weakness
• Mark ChannelManager::send_payment_with_route as deprecated and take Route by value
• Add more information to OpenChannelRequest Event
• Include routing failures in Bolt12PaymentError
• lightning-invoice: Add Description::as_inner
• Enforce segwit inputs for all “safe” funding transactions
• Authenticate use of offer blinded paths
• Funding signed event

lnd

• blindedpath: Minor bug fixes and feature addition.
• Improve the performace of LeaseOutput
• (2/4) - peer: add new abstract message router
• discovery: fix bug that can lead to sending invalid chan_ann msgs
• bumpforceclosefee rpc
• lnrpc: add new min_relay_fee response to EstimateFee
• peer: always send channel update on reconnect
• routing: fix stuck inflight payments
• Allow selecting coins in sendcoins
• routing: inbound fees support for BuildRoute
• lnrpc: avoid needing to download Golang
• routing: add payment failure reason FailureReasonCancel
• routing: shutdown chanrouter correctly.
• (3/4) Route Blinding: send MPP over multiple blinded paths
• (MILLI): Introduce and use ChannelParty
• multi: include commitment fees in dust calculation
• Fix bumpforceclose behavior for force closes without htlcs.
• routing: fix fee limit condition
• (2/4) Route Blinding Receives: Receive and send to a single blinded path in an invoice.
• Fix batchopen fee calculation
• chainfee: allow specifying min relay feerate from the API source

BIPs

• BIP94 Testnet 4
• BIP 324: fix python aad in complete_handshake

BLIPs

• blip-0039: BOLT 11 Invoice Blinded Path Tagged Field
• blip-0004: experimental endorsement signaling in update_add_htlc

BOLTs

• Clarify onions part 2: a bit deeper rework
• Make blinded link work

New Releases

• CPUNet, CPU-mined braidpool testnet
• Floresta v0.6.0
• statechainjs
• Stratum Benchmarking Tool

Events and Podcasts

• BitVM2 Explained with Alexei Zamyatin
• Decentralizing Bitcoin Mining With Bitcoin Mechanic
• Discussing 0.21.0 Bitcoin Core Vulnerability Disclosures
• Rusty Russell on the Great Script Restoration
• SLP597 - Dark Skippy: A New Attack on Bitcoin Hardware Wallets? With Nick, Lloyd and Robin
• SLP599 - Bitcoin Hardware Security Panel
• Talks from Nashville’s @BitcoinWildlife event

Mining

• Bitcoin 2024
• Bitcoin Mining Industry Report: July 2024 - Monthly Operational Updates
• Russia Legalizes Cryptocurrency Mining in New Law Signed by Putin

Miscellaneous

• BitaxeGamma Announcement
• Bitcoin Layer 2s – The CoreDAO Model
• Bitcoin Script News
  • BitVM2 Specification: Verify ZKP on Bitcoin with Fraud Proof
  • Great Script Restoration update
  • New TMUL promitive unlocks more efficient ZK verification on Bitcoin
  • OP_CAT vs Great Script Restoration
  • Prevent the CATastrophe
  • Stwo STARK Verifier live on OP_CAT-enabled signet
  • Using Elftrace to compile the Winterfell ZK-STARK verifier to Bitcoin Script and use it to verify-the-verification of a STARK
• BitGo to Move WBTC to Multi-Jurisdictional Custody to Accelerate Global Expansion Plan
• Btrust announces Q3 Grants
• Fixing Lightning Force Closures
• Full-chain membership proof++ integration into Monero
• 👉 How Many Bitcoin Seed Phrases Are Only One Repeated Word?
• L402 Library Showcase: Paywalled Stock Data API
• Mutiny Wallet is Shutting Down
• 👉 Opensats announces three more Bitcoin Core grants
• OpenSats Receives Donation Commitment from Build Asset Management
• Problems with Coinbase Withdrawal Fees
• Proton Wallet announced
• StarkNut - STARK proofs for Cashu protocol.
• Taproot Assets on Lightning: The Global Financial Interoperability Layer
• Testers needed for AssumeUTXO mainnet params PR
• You probably don’t need a hardware wallet