Announcements

Please join us for our next Socratic Seminar. A special thank you to our sponsors Chaincode Labs and Lava for food, refreshments and event space.

Please note the new start time! We will open doors at 6pm for socializing, and plan on starting the discussion around 7pm.

If you can’t make it to the main event please join us at PUBKEY around 9:30PM.

Follow New York BitDevs on:

• Twitter
• BlueSky
• nostr: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsup3hqs

Presentation

• Cake Wallet presents their PayJoin implementation.

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• Relax OP_RETURN standardness restrictions
• DahLIAS: Discrete Logarithm-Based Interactive Aggregate Signatures
• Bitcoin Core 29.0 Released
• Post Quantum Signatures and Scaling Bitcoin
• SwiftSync - smarter synchronization with hints
• secp256k1lab: a Python library for prototyping
• Consensus Cleanup BIP draft
• Unbreaking testnet4
• UTXO probing attack using payjoin

Delving Bitcoin

• A simple backup scheme for wallet accounts
• Evolving the Ark protocol using CTV and CSFS
• How CSFS+PAIRCOMMIT enables mass delegated introspection
• Hashing to remember forgotten seed words?
• How CTV+CSFS improves BitVM bridges
• Post Quantum Signatures and Scaling Bitcoin with STARKs
• SwiftSync – Speeding up IBD with pre-generated hints (PoC)
• Overflow handling in Script
• Cluster mempool partitioning attacks

Meetings

• Bitcoin PR Review Club
  • #29532 Refactor BnB tests
  • #31664 Add Fee rate Forecaster Manager
  • #31689 Benchmark Chainstate::ConnectBlock duration
• Bitcoin Core general developer meetings
  • March 27
  • April 3
  • April 10
  • April 17
• Lightning Specification meeting
  • April 7
  • April 21

Optech

• Bitcoin Optech Newsletter #347
  • Recap Podcast
• Bitcoin Optech Newsletter #348
  • Recap Podcast
• Bitcoin Optech Newsletter #349
• Bitcoin Optech Newsletter #350

Network Data

• 5 “proxy” pools blast ~5 templates per second for ~33 blocks
• “ancient” proto-inscriptions
• Ark transaction on mainnet
• Bitcoin Mining Centralization in 2025
• Bitcoin’s Duplicate Transactions
• Grid interactive block visualization tool
• Hashrate spikes to 1 zetahash for first time
• mempool.space visualization of taproot script paths
• New “Mining Squared” proxy pool finds multiple blocks
• New large solo miner mines block
• stratum.work visualization updates
• Up-to-date statistics about chain reorganizations

CVEs and Research

Research

• A Place for Everyone vs Everyone in its Place: Measuring and Attacking the Ethereum Global Network
• Breaking ECDSA with Two Affinely Related Nonces
• ColliderVM: Stateful Computation on Bitcoin without Fraud Proofs, video
• Cross-Input Signature Aggregation for Bitcoin
• Defeating AutoLock: From Simulation to Real-World Cache-Timing Exploits against TrustZone
• ECDSA Cracking Methods
• Round-Efficient Adaptively Secure Threshold Signatures with Rewinding
• Thunderbolt: A Formally Verified Protocol for Off-Chain Bitcoin Transfers

InfoSec

• ESP32 CVE does not effect Blockstream Jade, commentary
• Hackers are selling counterfeit phones with crypto-stealing malware
• Mempool Partitioning and Identifying Mining Nodes
• OpenSSH 10.0 makes the post-quantum ML-KEM hybrid mlkem768x25519-sha256 the default
• Taproot Denial of Service Bug

Pull Requests and repo updates

Bitcoin Core

• descriptor: Move filling of keys from DescriptorImpl::MakeScripts to PubkeyProvider::GetPubKey
• feefrac: avoid integer overflow in temporary
• torcontrol: Fix addrOnion outdated comment
• psbt: MuSig2 Fields
• Make TxGraph fuzz tests more deterministic
• (IBD) batch block reads/writes during AutoFile serialization
• Have createNewBlock() wait for tip, make rpc handle shutdown during long poll and wait methods
• miniscript: Correct off-by-one assert guards (#31727 follow-up)
• multiprocess: Add libmultiprocess git subtree
• miniscript: convert non-critical asserts to CHECK_NONFATAL
• net: Prevent accidental circuit sharing when using Tor stream isolation
• fuzz: Make p2p_headers_presync more deterministic
• wallet, migration: Fix empty wallet crash
• build: Switch to Qt 6
• coins: replace manual CDBBatch size estimation with LevelDB’s native ApproximateSize
• feefrac: add support for evaluating at given size
• TxGraph: Increase fuzz coverage
• fuzz: Make partially_downloaded_block more deterministic
• fuzz: coinselection: cover SetBumpFeeDiscount
• descriptors: Multipath/PR 22838 follow-ups
• Follow-ups for txgraph #31363

BDK

• feat(chain): Add method for constructing TxGraph from a ChangeSet

rust-bitcoin

• Add ControlBlock constructor that takes a hex string
• Accessing XOnlyPublicKey from bitcoin::taproot
• Deserialize witness from a list of hex strings
• Use InputWeightPrediction to calculate effective_value
• units: Implement privacy boundaries
• Remove Option return from minimal_non_dust
• primitives: Make hex optional
• Add push_relative_lock_time() and deprecate push_sequence()
• Return ControlBlock from Witness::taproot_control_block

Core Lightning

• cln-grpc Expose NotificationStream
• Enforce minimum witness program length for fallback addresses in BOLT11 parsing
• Update Release Dates for May 2025
• wallet: don’t debug spam every output script as we rescan blocks.
• Fix missing p2wpkh for mutual close with old peers.
• lightningd: don’t spam logs on dangling outgoing HTLCs.
• lightningd: fix anchorspend HTLC deadline logic.
• lightningd: allow bitcoind_getrawblockbyheight callback to free call struct
• trace: minimal fix to avoid crash when > 128 traces active.
• common: fix crash when we have a localmod with unrepresentable fee values
• docs: Update Security Information on Doc Portal

eclair

• Remove support for claiming remote anchor output
• ChannelKeyManager: add optional list of spent outputs to sign() methods
• Relay non-blinded failure from wallet nodes
• Use package relay for anchor force-close

LDK

• (2/3) Add Enum for HTLCHandlingFailed Reasons
• Add ChannelContext::get_commitment_stats
• Remove data dependency on OnchainTxHandler from onchain claims
• (RFC) Implement a way to do BOLT 12 Proof of Payment
• Batch commitment_signed messages for splicing
• Fix long route failure attribution
• Attributable failures
• Dual funding extension: begin_interactive_funding_tx_construction
• Do not track HTLC IDs as separate MPP parts which need claiming
• Replace use of HolderSignedTx with HolderCommitment
• Static invoice server prefactor
• Handle receiving payments via Trampoline

lnd

• accessman: add logging to new sub-system
• Improve logging when fetching invoices and payments
• Change RPC call order for the btcd notifier
• walletrpc: allow custom lock ID and duration in FundPsbt
• scripts+GitHub: use bitcoind v29.0
• Aux bandwidth manager: also pass HTLC blob to ShouldHandleTraffic
• Fix inaccurate locked_balance
• AuxTrafficShaper.PaymentBandwidth uses HTLC view
• chainntnfs: increase logging of the subsystems
• scripts: use LND status to determine when a node is ready for RPC calls
• Patch htlc attempt hash for legacy payments
• multi: downgrade to legacy coop close for taproot channels
• lnrpc+rpcserver: add custom channel data for closed channels
• Sweep inputs even the budget cannot be covered

BOLTs

• BOLT 4: fix broken link
• Make payment_secret mandatory and ASSUMED

New Releases

• Android CTV Playground
• bitcoin_payment_instructions
• Fuzzamoto: Holistic Fuzzing for Bitcoin Protocol Implementations
• Open source ESP32 firmware for BitAxe
• PrivatePond PayJoin implementation, context

Events and Podcasts

• Shinobi and darosier on the Great Consensus Cleanup
• Shinobi and Gloria Zhao on the mempool
• MIT Bitcoin Expo - Day 1, Day 2
• OPNEXT - Day 1, Day 2

Mining

• Bitcoin Mining Centralization in 2025 by 0xB10C
• Bitcoin Mining Industry Report: March 2025 - Monthly Operational Updates
• Braiins open sources the Bitcoin Control Board
• The environmental burden of the United States’ bitcoin mining boom

Miscellaneous

• 256Foundation Mining Grants
• Bitcoin Address Poisoning Attacks
• BitScript Sandbox
• BitVM Activation on Clementine & Core Protocol Upgrades
• BitVM meets Consensus Cleanup over 64-byte transactions
• Clementine: A Collateral-Efficient, Trust-Minimized, and Scalable Bitcoin Bridge
• Critical Wallet Bugs Expose Users to Silent Crypto Drains
• Crypto crime is legal
• Delbrag
• DOJ Ends Crypto Enforcement Unit and Regulation by Prosecution
• Human Rights Foundation Grants 10 BTC to 23 Bitcoin Projects Worldwide
• Opensats - Fourth Wave of Education Grants, Advancements in Lightning Infrastructure -Phoenix wallets returns to the US
• Soft fork research database
• Spiral grant - l0rinc
• Taplocks: Verifiable but unspendable tapleafs
• The Evolution of Payjoin: From Two-Party Protocol to Multiparty Framework
• The Timewarp Attack
• Trump signs bill to nullify expanded IRS crypto broker rule
• Try Ark on signet
• Uncle Sam kills funding for CVE program
• Vinteum renews grant for Lima