Announcements

Please join us for our next Socratic Seminar. A special thank you to our sponsors Chaincode Labs and Lava for food, refreshments and event space.

Please note the new start time! We will open doors at 6pm for socializing, and plan on starting the discussion around 7pm.

If you can’t make it to the main event please join us at PUBKEY around 9:30PM.

Follow New York BitDevs on:

• Twitter
• BlueSky
• nostr: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsup3hqs

Presentation

• Joost Jager: “Attributable failures in lightning”

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• Standard Unstructured Annex
• New Proposal：String Substring Search in Bitcoin Script - OP_ISSUBSTR
• Unbreaking testnet4
• Against Allowing Quantum Recovery of Bitcoin
• “Recursive covenant” with CTV and CSFS
• Hashed keys are actually fully quantum secure
• Time to add CSFS to Signet?
• Does anyone still need testnet3?
• Proposal: Unlocking Dust UTXOs as Miner Transaction Fees
• P2QRH / BIP-360 Update
• Bitcoin Knots 28.1.knots20250305 released
• Table for economic nodes: Covenants Support - Bitcoin Wiki
• ESSPI: ECDSA/Schnorr Signed Program Input for BitVMX
• Update on Transaction Relay V2
• Transaction Validation Optimization

Delving Bitcoin

• The Ark case for CTV
• OP_CHECKCONTRACTVERIFY and its amount semantic
• Fee-Based Spam Prevention For Lightning
• Post-Signature Cross-Input Scripting Using the Taproot Annex
• Question about OP_CTV and Non-Recursive Covenants
• LND’s Deadline-Aware Budget Sweeper
• CTV+CSFS: Can we reach consensus on a first step towards covenants?
• Revisiting pathfinding
• An Exposition of Pathfinding Strategies Within Lightning Network Clients
• Research Paper on B.R.A.I.N.: Bitcoin Recursive Autonomous Intelligence Network
• BIP-119 (OP_CHECKTEMPLATEVERIFY) (no activation)
• Disclosure: LND Excessive Failback Exploit
• Bitcoin node P2P traffic analysis
• AssumeUTXO and Bitcoin snapshots
• Antoine Poinsot on Bitcoin Core’s Priorities
• Best-(Worst-)Case MEVil Response
• Zero-fee commitments for mobile wallets

Meetings

• Bitcoin PR Review Club
  • #31405 Stricter internal handling of invalid blocks
  • Testing Bitcoin Core 29.0 Release Candidates
• Bitcoin Core general developer meetings
  • February 20
  • March 6
  • March 13
  • March 20
• Lightning Specification meeting
  • February 24
  • March 10
  • March 24

Optech

• Bitcoin Optech Newsletter #342
  • Recap Podcast
• Bitcoin Optech Newsletter #343
  • Recap Podcast
• Bitcoin Optech Newsletter #344
  • Recap Podcast
• Bitcoin Optech Newsletter #345
• Bitcoin Optech Newsletter #346

Network Data

• Babylon transactions flood mempool
• Bitcoin’s Duplicate Transactions
• Block mined with p2pool
• Invalid mining jobs by AntPool & friends during forks
• Public Pool mines its first block
• Significant UTXO set consolidation
• stratum.work adds historical data and precise timing data

CVEs and Research

Research

• BulletCT: Towards More Scalable Ring Confidential Transactions With Transparent Setup
• Clementine: A Collateral-Efficient, Trust-Minimized, and Scalable Bitcoin Bridge
• Constant-Time Code: The Pessimist Case
• CRP: A Cluster-Based Routing Protocol for Lightweight Nodes in Payment Channel Networks
• ESSPI: ECDSA/Schnorr Signed Program Input for BitVMX
• maxREE: Maximizing Flow by Replacing Exhausted Edges in Lightning Network
• Post Quantum Migration of Tor
• Solving Data Availability Limitations in Client-Side Validation with UTxO Binding

InfoSec

• LND’s Deadline-Aware Budget Sweeper
• LND: Excessive Failback Exploit
• New Telegram vulnerability, EvilLoader, discovered
• OSPEAD And The MAP Decoder Attack on Monero
• SafeWallet ByBit Hack Postmortem
• Taproot Denial of Service Bug
• Trezor Safe Vulnerability
• Undocumented commands found in Bluetooth chip used by a billion devices

Pull Requests and repo updates

Bitcoin Core

• Benchmark Chainstate::ConnectBlock duration
• torcontrol: Limit reconnect timeout to max seconds and log delay in whole seconds
• doc: add guidance for RPC to developer notes
• refactor: Use std::span over Span
• test: avoid disk space warning for non-regtest
• descriptor: check whitespace in keys within fragments
• test: Check datadir cleanup after assumeutxo was successful
• Require sqlite when building the wallet
• consensus: Remove checkpoints (take 2)
• wallet: fix crash on double block disconnection
• Add waitNext() to BlockTemplate interface
• cmake: Set top-level target output locations
• validation, fix: Use wtxid instead of txid in CheckEphemeralSpends
• seeds: add signet/testnet4, update makeseeds regex, minblocks, fixed seeds
• doc: remove note about macOS self-signing
• guix: Notarize MacOS app bundle and codesign all MacOS and Windows binaries
• Add assumeutxo chainparams to release-process.md
• Add mainnet assumeutxo param at height 880,000
• wallet: abandon orphan coinbase txs, and their descendants, during startup
• tests: add functional test for miniscript decaying multisig
• random: Check GetRNDRRS is supported in InitHardwareRand to avoid infinite loop

BDK

• Introduce evicted-at/last-evicted timestamps
• Generalize add_recipient to accept Address
• docs: update CONTRIBUTING.md with section for new contributors
• Make full-scan/sync flow easier to reason about.
• bdk_electrum: Handle negative heights properly

rust-bitcoin

• Remove From<hash> for not-general-hash types
• Alloc-free (AKA zero-copy) control block
• Enable getting the network kind from an address
• Enforce MAX_MONEY invariant in amount types
• primitives: Increase test coverage in block.rs
• Fix BIP32 validation for private keys and master key constraints (#4195)
• feature: introduce MAX_BLOCK_SERIALIZED_SIZE to check limit
• primitives: Feature gate import
• Remove the GeneralHash trait
• Kill mutants in primitives and units
• Add Timestamp newtype
• Make hex in internals optional
• Improve weight
• Private key from slice fix
• hashes: Remove Clone trait bound from Tag
• primitives: Hide error internals
• Policy: Relax MIN_STANDARD_TX_NONWITNESS_SIZE to 65
• Add support for pay to anchor outputs
• Move taproot back to bitcoin crate
• Witness taproot fixes
• Script improvements
• Make transaction::Version field private
• chacha20: add benchmarks
• Properly deprecate Hash::from_slice
• locktimes: Remove PartialOrd and ArbitraryOrd
• hashes: Add Copy, Clone, and Debug imlps for Hkdf

libsecp

• include: remove WARN_UNUSED_RESULT for functions always returning 1
• Fix symbol visibility issues, add test for it
• Remove deprecated _ec_privkey_{negate,tweak_add,tweak_mul} aliases from API
• musig: Fix clearing of pubnonces
• Add _ge_set_all_gej and use it in musig for own public nonces
• Make static context const
• Verify compressed argument in secp256k1_eckey_pubkey_serialize
• use EXIT_ constants over magic numbers for indicating program execution status

Core Lightning

• opening: Do not forget zeroconf channels due to funding timeout
• BOLT catchups for 25.05
• Fix blinded path peer selection
• onchaind: fix crash if we enounter a tx with no witness.
• lightningd: fix crash in onchaind replay.
• offers: don’t send blinded path to neighbor for invoices.
• msggen: add missing InjectOnionMessage and channel_state_changed notification for v25.02
• xpay blinded path fix
• Unilateral lease close fixes
• setconfig: better handling of dynamic config vars, test if config file writable before trying.
• Update emergency.recover after every ‘commitment_revocation’ so that user can sweep funds by penalty transaction.
• add max_total_htlc_out to listpeerchannels
• xpay slow mode
• Support multiple cln-version in pyln-testing
• Fix –dev-dev-no-reconnect-private on restart
• xpay: reduce log entries on rpc_command hook
• pytest: address flakes from blinded paths in bolt12 offers

eclair

• Keep track on which side initiated a mutual close
• use File.toURI for more stable URI creation
• Support p2tr bitcoin wallet
• Improve Bolt12 offer APIs
• Eclair v0.12.0 release
• Remove spurious interactive-tx commit_sig retransmission
• Gate new splice tlvs for channel_reestablish on remote support for splicing
• Offers without extra plugin
• Use confirmed inputs for anchor transactions
• Use channel_reestablish tlv when sending channel_ready
• Add path finding for blinded routes
• Add advanced api control methods
• Sort amounts in the balance check
• Allow override peer storage write delay
• Add support for using last_funding_locked tlv in channel_reestablish
• Prioritize remote commitment instead of local one
• Add scripts for taproot channels
• Allow recipient to pay for blinded route fees
• Make wallet resolution independent of wake-up config in NodeRelay
• Better handling of invalid public keys in codecs
• Use default confirmations for single-funded channel

LDK

• Add BOLT12 support to bLIP-51 / LSPS1
• lightning-invoice: explicitly enforce a 7089 B max length on BOLT11 invoice deser
• Decrypt Trampoline error onions
• Require LengthLimitedRead for structs that always drain reader
• (Custom Transactions) Provide Built Counterparty Commitment Transactions To ChannelMonitor
• Attributable failures prefactor
• (Splicing) Partial, handle splice_init & splice_ack messages
• Require counterparty_node_id TLV for ChannelMonitor
• Parse inbound Trampoline onions
• Introduce Padding for Payment and Message Blinded Tlvs
• Correct and update confirmation target constant definitions
• Support scalar tweak to rotate holder funding key during splicing
• Don’t enforce owned values be written in legacy TLV writing
• Allow ElectrumSyncClient to reuse a preexisting client
• Unify common message handler traits into one trait
• allow functional tests to be used externally with a dynamic signer factory
• Log cases where an onion failure cannot be attributed or interpreted
• Reject channels serialized with version <= 2
• Fix Channel being left in indeterminite state from 9f9a7a92e1c15cad
• Avoid accessing legacy TLV fields after the TLV-stream read
• Introduce RouteParametersConfig
• Fix overflow in historical scoring model point count summation
• Define anchor channel reserve requirements
• Tweak htlc dust exposure due to excess fees
• Implement quiescence protocol
• Allow to override config defaults for inbound channels on a per-channel basis

lnd

• Fix inaccurate listunspent result
• lnd: pass through neutrino MaxPeers config
• macaroons: ip range constraint
• routing: don’t set custom amount if manager isn’t handling
• contractcourt: fix rebase issue with removed variadic option
• lntest: wait for ChanUpdate req to be fully processed before sending another
• routerrpc: fix estimateroutefee for public route hints
• Allow coop closing a channel with HTLCs on it via lncli
• sweep: start tracking input spending status in the fee bumper
• graph: Restrict interface to update channel proof instead of entire channel

BIPs

• BIP32 amendment: base58chk-encoded extended keys are always 111 chars
• Reject BIP-0060 (three years inactivity)
• (BIP-119) language overhaul & cleanup
• BIP-0094: add default p2p port for testnet4
• BIP374: Add message to rand computation
• BIP75: fix BIP70 extensions url and clarify text
• BIP 94: Move status to Final
• BIP329: add optional data fields, fix a JSON type
• BIP3: Address follow-ups from #1712
• BIP3: Updated BIP Process

BOLTs

• Check for preimage before failing back missing HTLCs
• Fix typo in peer storage spec, update tools/extract-formats.py

New Releases

• fuzzamoto - Holistic Fuzzing for Bitcoin Protocol Implementations

Mining

• Against Allowing Quantum Recovery of Bitcoin
• DEMAND Pool Announces Stratum v2 Launch
• Understanding SLICE (PPLNS+JD)

Miscellaneous

• Capitalized Bitcoin Fork for National Strategic Reserve
• CISA Research Paper
• Fun with CSFS I
• LDK: Announcing Versioned Storage Service (VSS)
• Open Sats - Let a Thousand Flowers Bloom, Tenth Wave of Bitcoin Grants
• Tropic Square auditble secure element
• Try Ark on Signet
• Verifying a proof of representation onchain
• Versioned Storage Service (VSS)