Announcements

Please join us for our next Socratic Seminar. A special thank you to our sponsors Chaincode Labs and Wolf NYC for food, refreshments and event space.

If you can’t make it to the main event please join us at PUBKEY around 9:30PM.

Follow New York BitDevs on Twitter

Follow us on NOSTR: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsu

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• 👉 Bitcoin Core 28.0 Release Candidate 2 Available
• 👉 Public disclosure of 1 vulnerability affecting Bitcoin Core <24.0.1
• Publishing text of 2017-era proposed Bitcoin opcode OP_FFS (Fold Function Stream)
• Proposal to upgrade the transaction relay protocol to a new version
• Demonstrating Pinning Attacks under Real-World Conditions
• OP_CAT Research Fund sponsored by StarkWare

Delving Bitcoin

• Hybrid Jamming Mitigation: Results and Updates
• SuperScalar: Laddered Timeout-Tree-Structured Decker-Wattenhofer Factories
• Proving UTXO set inclusion in zero-knowledge
• Modeling (Social) Consensus About (Cryptographic) Consensus Change
• Privately sending payments while offline with BOLT12
• Fork withholding attack
• Hardcoded seeds, DNS seeds and Darknet nodes
• Mutation-core: A mutation testing tool for Bitcoin Core
• File Format for Recovering Descriptor Wallets
• Lava Loans: Trust-minimized, Bitcoin-Secured Loans
• The path to general computation on Bitcoin (with OP_CAT)

Meetings

• Bitcoin PR Review Club
  • Testing Bitcoin Core 28.0 Release Candidates
• Bitcoin Core general developer meetings
  • August 29
  • September 5
  • September 12
  • September 19
• Lightning Specification meeting
  • September 9

Optech

• Bitcoin Optech Newsletter #318
  • Recap Podcast
• Bitcoin Optech Newsletter #319
  • Recap Podcast
• Bitcoin Optech Newsletter #320
  • Recap Podcast
• Bitcoin Optech Newsletter #321

Network Data

• 👉 Block Template Similarities between Mining Pools
• 👉 Coinbase Lightning Data
• Fees drop below 2 sats/vyte for the first time in almost a year
• 👉 First 0-fee lightning commitment transaction
• Large BRC-20 consolodations
• 👉 Lightning Nodenamer, repo
• Merge Mining Report
• POW-locked signet transaction
• 👉 Testnet4 consensus failure due to timewarp related “softfork”
• Transaction signaling SIGHASH_NONE gets 0.8 BTC burned to fees
• TRUC transaction on testnet4
  • TRUC available on signet as well
• Wabisator - Wabisabi Coordinators List
• Wave of “unbounding” 200 sats/vbyte babylon staking transactions

CVEs and Research

Research

• Blind Multisignatures for Anonymous Tokens with Decentralized Issuance
• Deanonymizing Ethereum Validators: The P2P Network Has a Privacy Issue
• Horcrux: Synthesize, Split, Shift and Stay Alive Preventing Channel Depletion via Universal and Enhanced Multi-hop Payments
• Multi-class Bitcoin mixing service identification based on graph classification
• ORBITAAL: A Temporal Graph Dataset of Bitcoin Entity-Entity Transactions
• P2C2T: Preserving the Privacy of Cross-Chain Transfer
• Privacy Comparison for Bitcoin Light Client Implementations
• 👉 Shielded CSV: Private and Efficient Client-Side Validation
• Survivable Payment Channel Networks

InfoSec

• 👉 Disclosure of memory DoS due to headers spam
• EUCLEAK Side-Channel Attack on the YubiKey 5 Series
• NBitcoin MuSig Nonce Reuse
• Nix2.24 vulnerable to remote privlilege escalation
• PIXHELL Attack: Leaking Sensitive Information from Air-Gap Computers via ‘Singing Pixels
• RAMBO: Leaking Secrets from Air-Gap Computers by Spelling Covert Radio Signals from Computer RAM
• TIKTAG: Breaking ARM’s Memory Tagging Extension with Speculative Execution
• Tor responds to de-anonymization claims
• Turning Everyday Gadgets into Bombs is a Bad Idea

Pull Requests and repo updates

Bitcoin Core

• interfaces: #30697 follow ups
• addrman: change internal id counting to int64_t
• cli: Improve error message on multiwallet cli-side commands
• Follow-up after AutoFile position caching: remove unused code
• doc: update NeedsRedownload() and nStatus comment
• Remove Autotools packages from CI (and depends doc)
• streams: cache file position within AutoFile
• net: call Select with reachable networks in ThreadOpenConnections
• rpc, rest: Improve block rpc error handling, check header before attempting to read block data.
• 👉 Drop -dbcache limit
• Have createNewBlock() return a BlockTemplate interface
• fuzz: Test headers pre-sync through p2p
• cluster mempool: optimized candidate search
• kernel: Move background load thread to node context
• doc: fix assumeutxo design doc link
• kernel: Create usable static kernel library
• build: Add more cmake presets
• security-check: test for _FORTIFY_SOURCE usage in release binaries
• ci: Post CMake-migration fixes and amendments
• Fix peers abruptly disconnecting from AssumeUTXO nodes during IBD
• 👉 multiprocess: Add -ipcbind option to bitcoin-node
• test: Add coverage for dumptxoutset failure robustness
• init: fix init fatal error on invalid negated option value
• fix: increase consistency of rpcauth parsing
• Update libsecp256k1 subtree to latest master
• guix: Drop unused autotools packages
• contrib/signet/miner updates
• 👉 net: Favor peers from addrman over fetching seednodes
• rpc: dumptxoutset height parameter follow-ups (29553)
• fuzz: Rename fuzz_seed_corpus to fuzz_corpora
• doc: Clarify libbitcoin_consensus in design/libraries.md
• 👉 http: set TCP_NODELAY when creating HTTP server
• log: expand BCLog::LogFlags (categories) to 64 bits
• kernel: Use spans instead of vectors for passing block headers to validation functions
• assumeutxo: Add dumptxoutset height param, remove shell scripts
• test: Avoid intermittent timeout in p2p_headers_sync_with_minchainwork.py
• misc: Autotools -> CMake changes
• Remove bsdmainutils from doc/ci
• ci: Use C++23 in one task
• doc: update dev note examples for CMake
• ci: Re-add configs removed in cmake migration

BDK

• fix(wallet): fix SingleRandomDraw to error if insufficient funds
• fix(core): calling CheckPoint::insert with existing block must succeed
• Allow custom fallback algorithm for bnb
• fix(wallet): do check_wallet_descriptor when creating and loading
• Change methods of IndexedTxGraph/TxGraph/Wallet that insert txs to be more generic
• fix(wallet): only mark change address used if create_tx succeeds
• feat(wallet): add transactions_sort_by function
• feat(core): add TxUpdate::map_anchors

HWI

• trezor: add Trezor Safe 5 support

rust-bitcoin

• Add doc comment detailing fee calculation
• [Implement GetKey for Vec](https://github.com/rust-bitcoin/rust-bitcoin/pull/2850)
• Document the magic bytes for witness commitment
• Fix GetKey for sets (plus some related changes)
• priority: Introduce and use a new compact_size module
• Update the documentation to indicate that the Display implementation in Amount is unstable
• Show compressed public key in Debug for CompressedPublicKey

Core Lightning

• cln-grpc: add anchors/even to primitives
• Remove db accesses in listpeerchannels
• Askrene fixes and enhancements
• schemas: “description” field in “wait(any)invoice” is optional since BOLT12
• lightningd: make sure channels always have a local alias.
• channeld: fix crash with pre-TLV peers.

eclair

• Include faulty TLV tag in InvalidOnionPayload error
• prevent FC with old LND nodes if HTLCs are in flight while closing
• Reduce the number of RPC calls to bitcoind during force-close

LDK

• Don’t pay a duplicate BOLT 12 invoice if ChannelManager is stale
• Support paying static invoices
• Introduce Retry InvoiceRequest Flow
• Introduce Reply Paths for BOLT12 Invoice in Offers Flow.
• Always print why we disconnect explicitly
• Finish closing channel after async closing signed
• Correct handling of added OP_RETURN outputs

lnd

• contractcourt: use the sweeper for HTLC offered remote timeout resolu…
• (custom channels 4/5): Extract PART4 from mega staging branch
• (custom channels 3/5): Extract PART3 from mega staging branch
• (1/7) lnwire: add new Gossip 1.75 messages
• lnwire: detect invalid timestamp field
• commands: update interactive input in create command description
• routing: export dbMPPayment interface
• (custom channels 2/5): Extract PART2 from mega staging branch
• lnwallet: ensure we re-sign retransmitted commits for taproot channels

BIPs

• Add a PSBT per-output field for BIP 353 DNSSEC Proofs

New Releases

• 👉 Ark v0.2
• SV2 Template Provider v0.1.9

Events and Podcasts

• 0xb10c - Monitoring Bitcoin P2P Network Attacks and Anomalies with eBPD and USDT Tracepoints
• FROST Implementers Round Table 2024

Mining

• Bhutan’s Bitcoin Holdings Revealed: Kingdom Owns $780M in BTC from Mining
• Bitcoin Mining Industry Report: August 2024 - Monthly Operational Updates
• Bitmain made too many ASIC miners, and no one is buying
• Japan’s Largest Electricity Provider Explores Bitcoin Mining with Surplus Renewable Energy
• Norway: Bitcoin Mining Facility Shutdown Leads to 20% Higher Energy Bills for Town Residents
• The Trifecta of Bitcoin Centralization

Miscellaneous

• 10101 is shutting down
• Analysis of Bitcoind Policy Estimator Effectiveness for Long-Term Fee Estimation
• Discussion of Auditor Role for sv2
• Friends don’t let friends reuse nonces
• Elements 23.2.3: Discounted Fees for Confidential Transactions
• Introducing NOIST: a non-interactive, single-round t-of-n threshold signing protocol
• HRF Bitcoin Development Fund Grants 1 Billion Satoshis to 20 Projects Worldwide
• Lava Loans
• Maelstrom fund issues first grant to Rkrux
• Multi-Party Submarine Swaps
• OpenSats LTS Support For Jason Donenfeld
• OpenSats funds DLC Dev Kit
• Privacy preserving proof of taproot assets
• Selfie Records - BIP 353 records for payments, identies, and more
• Soft-Fork/Covenant Dependent Layer 2 Review
• STARK proof vapable of verifying Bitcoin Script execution with Shinigami, more info
• The Key to FROST: What is Distributed Key Generation?
• TMUL - An optimized, tunable field multiplication script for bitcoin
• Treasury cited only three examples of North Korean Tornado Cash use, says judge
• Understanding Silent Payments - Part One