Announcements

Please join us for our next Socratic Seminar. A special thank you to our sponsors Chaincode Labs and Lava for food, refreshments and event space.

If you can’t make it to the main event please join us at PUBKEY around 9:30PM.

Follow New York BitDevs on Twitter

Follow us on NOSTR: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsu

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• (FULL DISCLOSURE): Replacement Cycling Attacks on Attacks on Bitcoin Miners Block Templates
• Reiterating centralized coinjoin (Wasabi & Samourai) deanonymization attacks
• BIP Draft: unspendable() Descriptor Key Expression
• Who uses or wants to use PSBTv2 (BIP370)
• Summary: Covenants Support - Bitcoin Wiki
• Bitcoin Core 28.1 Released
• Mandatory Inclusion of Old Transactions in Blocks
• Trivial QC signatures with clean upgrade path
• TRUC and P2A for CTV fee management
• CTV++ OP_TEMPLATEHASH & OP_INPUTAMOUNTS
• Censorship and Privacy in Chaumian ecash implementations
• Double Exponential Hash Rate Growth and Difficulty Adjustment
• (BIP Proposal) Redefinition of the Bitcoin Unit to the Base Denomination
• Difficulty in emulating “weaker” OP_SUCCESS and why it should be a real opcode

Delving Bitcoin

• ZK-gossip for lightning channel announcements
• Full Disclosure: Replacement Cycling Attacks on Bitcoin Miners Block Templates
• Disclosure: LDK Invalid Claims Liquidity Griefing
• Pruning non-transaction data instead of pruning whole blocks?
• What happens after we “run out” of script flags?
• Challenge: Covenants for Braidpool
• (BROKEN) Multi-Party Eltoo with bounded settlement
• End of 2024 site statistics
• Contract-level Relative Timelocks (or, let’s talk about ancestry proofs and singletons)
• Analyzing Mining Pool Behavior to Address Bitcoin Core’s Double Coinbase Reservation Issue
• CTV++ OP_TEMPLATEHASH and OP_INPUTAMOUNTS
• Transitory Soft Forks for Consensus Cleanup Forks
• Fastest-possible PoW via Simple DAG
• Security soft fork deployments arent risky
• Timewarp attack 600 second grace period

Meetings

• Bitcoin Core general developer meetings
  • December 12
  • December 19
  • January 2
  • January 9
  • January 16
  • January 23
• Lightning Specification meeting
  • December 16
  • January 13
  • January 27

Optech

• Bitcoin Optech Newsletter #338
• Bitcoin Optech Newsletter #337 – (Recap Podcast)
• Bitcoin Optech Newsletter #336 – (Recap Podcast)
• Bitcoin Optech Newsletter #335 – (Recap Podcast)
• Bitcoin Optech Newsletter #334: 2024 Year-in-Review Special – (Recap Podcast)
• Bitcoin Optech Newsletter #333 – (Recap Podcast)
• Channel Depletion Research Deep Dive Podcast

Network Data

• Fifteen OFAC-sanctioned transactions missing from blocks

CVEs and Research

Research

-

InfoSec

• 15-year-old publishes unique 0-click deanonymization attack targeting Signal
• Chinese hackers accessed workstations inside US Treasury

Pull Requests and repo updates

Bitcoin Core

• ci: Enable DEBUG=1 for one GCC-12+ build to catch 117966 regressions
• test: Remove –noshutdown flag, Tidy startup failures
• Safegcd-based modular inverses in MuHash3072
• wallet: remove BDB dependency from wallet migration benchmark
• init: Lock blocksdir in addition to datadir
• Miner: never create a template which exploits the timewarp bug
• cmake: Fail if Libmultiprocess is missing when WITH_MULTIPROCESS=ON
• rpc: add target to getmininginfo field and show next block info
• fuzz: Abort when global PRNG is used before SeedRand::ZEROS
• descriptor: Add proper Clone function to miniscript::Node
• depends: Override default build type for libevent
• Update leveldb subtree to latest upstream
• descriptors: Try pubkeys of both parities when retrieving the private keys for an xonly pubkey in a descriptor
• kernel: Move kernel-related cache constants to kernel cache
• wallet, desc spkm: Return SigningProvider only if we have the privkey
• p2p: track and use all potential peers for orphan resolution
• refactor: Avoid UB in SHA3_256::Write
• test: avoid internet traffic
• wallet: Cleanup accidental encryption keys in watchonly wallets
• fuzz: Abort if system time is called without mock time being set
• wallet: migration, avoid loading legacy wallet after failure when BDB isn’t compiled
• BlockAssembler: return selected packages virtual size and fee
• include verbose “reject-details” field in testmempoolaccept response
• rpc: increase the defaults for -rpcthreads and -rpcworkqueue
• rpc: Add signet_challenge field to getblockchaininfo and getmininginfo
• coins: warn on shutdown for big UTXO set flushes
• Prune mining interface
• Drop script_pub_key arg from createNewBlock
• cmake: Link bitcoin_consensus as a library
• net, init: derive default onion port if a user specified a -port
• wallet: Migrate non-HD keys to combo() descriptor

BDK

• feat(wallet): support Testnet4 in valid networks
• test(wallet): create tx locktime cltv for a specific time
• test(electrum): test for checking that fee calculation is correct
• Change default tx to version 2
• fix(wallet): improve safety on finaize psbt
• Architectural Decision Records
• transactions method should only return relevant transactions
• Introduce O(n) canonicalization algorithm

HWI

• Jade native psbt
• Support testnet4 chain

rust-bitcoin

• Add µBTC as a recognized str form of a MicroBitcoin Denomination
• bitcoin: Add an example of doing I/O to encode/decode
• io: Add traits
• io: Allow setting position bigger than inner buffer
• Add BIP324 V2 p2p network message support
• Introduce an API surface test file
• primitives: Add core re-exports
• Implement serde modules for FeeRate
• Move script hash types to primitives
• Change SignedAmount MAX and MIN to equal +/- MAX_MONEY
• Support serde serializing Amount as string
• primitives: Reduce alloc requirements
• Range check against SignedAmount::MAX instead of i64::MAX

libsecp

secp256k1-zkp

dlcspecs

Core Lightning

• doc: Add newly added bkpr RPCs in documentation
• docs: Remove lightning- prefix from all RPCs
• Fix askrene 0 amount crash (and hopefully stop xpay calling that!) and over capacity crash
• gpg: Add gpg public key for cln@blockstream.com
• xpay maxdelay parameter
• Hash Table API change
• Add testnet4 entry in chainparams
• Xpay more compatibility
• xpay unannounced chan fix
• xpay: more accurately reflect pay when xpay-handle-pay is set.
• xpay: emulate maxfeepercent and exemptfee when xpay-handle-pay used
• xpay: populate destination and amount_msat fields for listpays/listsendpays.
• lightning-cli: fix malformed response bug

eclair

• Rework channel announcement signatures handling
• Add liquidity griefing protection for liquidity ads
• Validate offers format
• Get ready for storing partial commit signatures
• Increase min-depth for funding transactions
• Reestablish partially signed splice with current remote_commitment_number
• Add support for taproot outputs to our “input info” class
• OutgoingNodeId in a blinded path may not be a wallet
• Delay considering a channel closed when seeing an on-chain spend
• Peer storage

LDK

• Fail HTLC backwards before upstream claims on-chain
• RawBolt11Invoice serialization utilities
• OutputSweeper: Delay pruning until monitors have likely been archived
• Enable decoding HTLC onions when fully committed
• Fix outbound payments memory leak on buggy router
• Fix min relay fee to be 1s/vB
• Fix package splitting logic
• Fix max-value overflows in set_max_path_length
• Support Bolt12Invoice::payment_paths in bindings
• Allow uppercase bech32 HRP (main)
• Tweak historical scoring model PDF and default penalties
• Reintroduce cfg(dual_funding) for handling of open_channel2 messages
• Handle fallible per commitment point in channel establishment
• Authenticate blinded payment paths
• Fix incorrect logging during RBF or rebroadcast
• Remove deprecated send_payment_with_route API and friends
• Fix premature claims broadcast
• Include counterparty node ids in PaymentForwarded
• Batch on-chain claims more aggressively per channel
• Ensure monitors are not archived if they have a preimage we need
• Support Trampoline flag in BOLT12 invoices

lnd

• chanbackup: archive old channel backup files
• invoices: migrate KV invoices to native SQL for users of KV SQL backends
• multi: fix inconsistent state in gossip syncer
• routerrpc: add a default value for timeout_seconds in SendPaymentV2
• Enhance lncli listchannels command with the chan_id and short_chan_id (human readable format)
• The sweeper subsystem uses now also the configured budget values for HTLCs
• Implement blockbeat
• fix check node1Err !=nil but return a nil value error err
• htlcswitch+routing: handle nil pointer dereference properly
• fn: add synchronous write file
• contractcourt: include custom records on replayed htlc
• chainntnfs: fix TestHistoricalConfDetailsTxIndex
• routing: fix mc blinded path behaviour.
• Add a deep copy generic harness to the internal fn package

BIPs

• BIP78: Allow mixed inputs Redux
• Fix BIP 78 & BIP 174 Conflict: Keep input utxo data through input finalization
• BIP375: Sending Silent Payments in PSBTs
• BIP345: fix OP_SUCCESS188 hex value
• BIP341: Explain the 64-byte signature format
• BIP-374: add generated test vector .csv files
• bip-0374: fix challenge generation, use correct generator point
• BIP374: Discrete Log Equality Proofs (DLEQ)
• (BIP-0349) Add Re-Keying explanation to OP_INTERNALKEY
• BIP-340: fix lift_x calls in test vector generation script
• 388: Add support for musig in descriptor templates

BLIPs

• Add bLIP 52: JIT Channel Negotiation (LSPS2)
• Add bLIP 51: Channel Requests (LSPS1)
• Add bLIP 50: LSP Spec Transport Layer (LSPS0)

BOLTs

• Peer storage for nodes to distribute small encrypted blobs.
• BOLT 12: fix BIP 353 spec typos
• Remove explicit 6-blocks delay for announcement_signatures

New Releases

-

Events and Podcasts

-

Mining

-

Miscellaneous

• Mara pool mines 3.97 MB image inscription filling entire block with a single transaction
• A Pokemon Battle Game, Written in Zig and Executed with BitVMX
• US court overturns Tornado Cash sanctions
• Dogecoin critical remote crash vulnerability