Announcements

Please join us for our next Socratic Seminar. A special thank you to our sponsors Chaincode Labs and Lava for food, refreshments and event space.

Please note the start time! We will open doors at 6pm for socializing, and plan on starting the discussion around 7pm.

If you can’t make it to the main event please join us at PUBKEY around 9:30PM.

Follow New York BitDevs on:

• Twitter
• BlueSky
• nostr: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsup3hqs

Presentation

• Dr. Clara Shikhelman presents Bitcoin and Quantum Computing: Current Status and Future Directions

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• BIP39 Extension for Manual Seed Phrase Creation
• Proposal to solve the spam war: configurable data blob relay policy
• jpeg resistance of various post-quantum signature schemes
• Public disclosure of one vulnerability affecting Bitcoin Core <29.0
• (Proposal) 64-bit arithmetic in Script
• The Tragic Tale of BIP30
• Re: (bitcoin-dev) [Opt-in full-RBF] Zero-conf apps in immediate danger
• Graftleaf: Program Composition and Generic Delegation
• ColliderVM protocol for computation and L2 bridges
• Introducing Hourglass
• BIP Proposal: Define Bitcoin Subunits as Satoshis/Sats
• Removing checkpoints in Bitcoin Core v30
• (meta) moving conceptual discussion for policy changes
• The Future of Bitcoin Testnet
• Standard Unstructured Annex

Delving Bitcoin

• Latency and Privacy in Lightning
• vExtraTxnForCompact Considered Useful
• Dust Expiry: Clean the UTXO set from spam
• On the possibility of evil covenants and implications for soft fork proposals
• Addressing community concerns and objections regarding my recent proposal to relax Bitcoin Core’s standardness limits on OP_RETURN outputs
• Bitcointap: an strace-like tool for bitcoin ebpf USDT tracepoints
• The Spam problem of Bitcoin and Unpermissioned Broadcast Networks in general
• A Comprehensive OP_RETURN Limits Q&A Resource to Combat Misinformation
• Path Queries: Addressing Payment Reliability and Routing limitations
• Withdrawing OP_VAULT (BIP-345)
• Graftleaf: Program Composition and Generic Delegation
• ColliderVM protocol for computation and L2 bridges
• A simple approach to allowing recursive covenants by enabling quines
• Behind the OP_RETURN Drama
• OP_RETURN limits: Pros and Cons
• Avoiding xpub+derivation reuse across wallets, in a UX-friendly manner

Meetings

• Bitcoin PR Review Club
  • #31981 Add checkBlock() to Mining interface
  • #31444 Cluster mempool: add txgraph diagrams/mining/eviction
  • #32317 Separate UTXO set access from validation functions
  • #31375 Add bitcoin wrapper executable
• Bitcoin Core general developer meetings
  • April 24
  • April 1
  • May 8
  • May 15
  • May 22
• Lightning Specification meeting
  • April 21
  • May 5
  • May 19

Optech

• Bitcoin Optech Newsletter #351
  • Recap Podcast
• Bitcoin Optech Newsletter #352
  • Recap Podcast
• Bitcoin Optech Newsletter #353
  • Recap Podcast
• Bitcoin Optech Newsletter #354
  • Recap Podcast
• Bitcoin Optech Newsletter #355

Network Data

• 2024 OP_RETURN data pie chart
• 42 Bitcoin in OP_RETURN outputs
• First use of taproot annex, second
• Has f2pool dropped their min relay fee?
• LNBig routing fee stats
• MARA mines block with odd 980kb tx with op_returns
• Non-Standard Bitcoin Transaction Dataset
• Odd behavior during antpool f2pool block race
• UTXO Set Report
• Wallet of Satoshi has significant adoption in Japanese lighting wallet market

CVEs and Research

Research

• A Novel Off-Chain Transaction Framework for Channel Cooperation
• Ark: A UTXO-based Transaction Batching Protocol
• Bitcoin and Quantum Computing: Current Status and Future Directions
• Clementine: A Collateral-Efficient, Trust-Minimized, and Scalable Bitcoin Bridge
• Enforcing arbitrary constraints on Bitcoin transactions
• KeyJoin: Privacy-Focused CoinJoin Protocol for Bitcoin
• Model Checking the Security of the Lightning Network
• Moneros Decentralized P2P Exchanges: Functionality, Adoption, and Privacy Risks
• MProve-Nova: A Privacy-Preserving Proof of Reserves Protocol for Monero
• On the Adaptive Security of Key-Unique Threshold Signatures
• Starfish: Rebalancing Multi-Party Off-Chain Payment Channels
• TOOP: A transfer of ownership protocol over Bitcoin

InfoSec

• Bitcoin Core CVE-2024-52919 - Remote crash due to addr message spam (part 2)
• Coinbase Data Breach effects 70,000 customers
• DDoS attack targeting Monero nodes
• NBitcoin fails to process coinbase transaction
• rust-mininscript CVE-2025-43707: out-of-bounds read
• Supply chain attack hits npm package rand-user-agent

Pull Requests and repo updates

Bitcoin Core

• wallet, rpc, doc: various legacy wallet removal cleanups in RPCs
• checkqueue: make the queue non-optional for CCheckQueueControl and drop legacy locking macro usage
• random: Use modern Windows randomness functions
• qt: drop unused watch-only functionality
• psbt: add non-default sighash types to PSBTs and unify sighash type match checking
• Wallet: Fix Non-Ranged Descriptors with Range (0,0) Trigger Unexpected Wallet Errors in AddWalletDescriptor
• Reintroduce external signer support for Windows
• wallet: Ensure best block matches wallet scan state
• rpc: Undeprecate rpcuser/rpcpassword, store all credentials hashed in memory
• Update leveldb subtree to latest upstream
• Update minisketch subtree
• init: drop -upnp
• qt, wallet: Convert uint256 to Txid
• miner: timelock the coinbase to the mined block’s height
• test: add test for decoding PSBT with MuSig2 PSBT key types (BIP 373)
• fees: document non-monotonic estimation edge case
• cluster mempool: add txgraph diagrams/mining/eviction
• Update secp256k1 subtree to latest master
• test: refactor: negate signature-s using libsecp256k1
• Remove the legacy wallet and BDB dependency
• subprocess: Backport upstream changes
• validation: write chainstate to disk every hour
• wallet: refactor: various master key encryption cleanups
• Bugfix: Miner: Don’t reuse block_reserved_weight for “block is full enough to give up” weight delta
• net: Use GetAdaptersAddresses to get local addresses on Windows
• validation: log which peer sent us a header
• wallet: Disable creating and loading legacy wallets
• validation: set BLOCK_FAILED_CHILD correctly
• rpc: Allow fullrbf fee bump in (psbt)bumpfee

BDK

• fix(chain): persist first_seen
• Add is_empty methods to TxUpdate and {}_Response types
• feat!(chain): implement first_seen tracking
• Release bdk_chain v0.22.0
• Introduce canonicalization parameters
• Canonicalization should handle transactions that spend from two conflicting transactions

rust-bitcoin

• fix error grater to greater array_vec.rs
• Add trait to InputWeightDescription
• BREAKING: Change Psbt serde implementations
• feat(p2p): add AddrV2 <> IpAddr conversions
• Fix FeeRate::checked_add/sub
• Use / to divide fee by weight
• units: Kill mutants found in weekly mutation testing
• psbt: replace the fee rate magic numbers with named constants in tests
• feat(p2p): add AddrV2 <> SocketAddr conversions
• Improve chacha20 cipher performance

• [Implementing Div<NonZeroU64

  I64> for Amount, SignedAmount, FeeRate, and and Weight](https://github.com/rust-bitcoin/rust-bitcoin/pull/4461)

• Add Builder::with_capacity()
• primitives: Add an API test module
• Do lock time renames
• locktimes: replace MtpAndHeight type with pair of BlockMtp and BlockHeight
• Wrap secp256k1::XOnlyPublicKey to improve error handling
• Set deprecation to released date of to_inner
• bitcoin: remove torv2 support
• Add as_inner method to TweakedKeypair
• primitives: Add regression tests for Display implementations
• bip32: overhaul error types and add a “maximum depth exceeded” error
• Add ControlBlock constructor that takes a hex string
• test: push minimality check for zero(empty)
• Introduce and use test_hex_unwrap macro in internals
• controlblock::decode unused variant
• primitives: replace error propagation with expect
• Implement FromIterator for Witness
• Accessing XOnlyPublicKey from bitcoin::taproot
• Deserialize witness from a list of hex strings

libsecp

• Assert field magnitude at control-flow join
• bench_ecmult: add benchmark for ecmult_const_xonly

Core Lightning

• 25.05rc1
• wallet: fix incorrect channel_htlcs id migration.
• Peer storage enable
• common/bolt11: validate public keys in routing hints
• msggen: add signmessagewithkey
• psbt: unused code path could leak
• splice: Eclair Interop — reestablish corner case
• Reckless: Add an update command
• askrene: fix integer overflow for dummy channels
• askrene-inform-channel: change order of operations
• Sendonion: add total amount
• Splice: Interop Final (probably) with Eclair
• Signmessage
• Workaround for LND to cause a force-close on our channel
• bcli: don’t try asking non-full nodes for blocks.
• gossipd: don’t try to connect to ourselves if we need more peers.
• Fix fee calculations
• pyln-client: Adding disableoffer, enableoffer, fetchinvoice, listoffers and offer commands
• pyln-client: reimplement NodeVersion, simply.
• Handle closed channels better.
• listhtlcs pagination

eclair

• Stricter batching of commit_sig messages on the wire
• Add low-level taproot helpers
• Attributable failures
• Add an option to specify a custom signet tx to check
• Increase default revocation timeout
• Remove LegacyClaimHtlcSuccess transaction class
• Remove duplication around skipping dust transactions
• Simplify channel keys management

LDK

• Do not dip into the funder’s reserve to cover the two anchors
• Introduce interactive signing state flags for funded states.
• Add a simple test of upgrading from LDK 0.1 and correct in_flight_monitor_updates on upgrade
• Pass supported_protocols to LSPS0 (fix ListProtocols support)
• Expose inner field of LSPSDateTime constructor
• Store Feature flags in line rather than on the heap by default (without increasing their size)
• Drop background processor futures feature
• Sweeper async change destination source fetching
• Do not fail to load ChannelManager when we see claiming payments
• Disallow dual-sync-async persistence without restarting
• Log which hop in a path was the most limiting in capacity
• (RFC) move the bolt12 invoice inside HTLCSource::OutboundRoute
• Use LocalHTLCFailureReason in Onion Processing
• Expand PaymentClaimable to include all inbound channel IDs for a payment
• Make generate_test_routes deterministic based on its seed
• Use floor when computing max value of a path, not ceil
• (3/3) Add Failure Reason to HTLCHandlingFailed
• avoid panic when truncating payer_note in UTF-8 code point
• Add idempotency check to prevent duplicate InvoiceReceived events
• Fix spurious MPP pathfinding failure
• lightning-liquidity: Introduce EventQueue notifier and wake BP for message processing

lnd

• graph/db: init SQLStore caches and batch schedulers
• feat(lncli): Add –route_hints flag to sendpayment and queryroutes
• lnwire: add lnwire.OpaqueAddr case in WriteElement for channel back-ups
• (graph-work-side-branch): side branch for graph work
• peer+lnd: add new CLI option to control if we D/C on slow pongs
• graph/db: remove ChannelGraph cacheMu
• graph/db: synchronous topology client subscriptions/cancellations
• bimodal pathfinding probability improvements
• multi: use updated TLV SizeFunc signature
• lncli: establish connection after parsing of mc data for loadmc
• lncli: add loadmc command
• routing+migration: fix mission control migration with nil failure msg
• sweep: return all inputs in PendingSweeps
• lnwallet: fix InternalKeyForAddr for imported addr
• lnrpc+rpcperms: add ctx metadata pairs to RPCMiddlewareRequest
• htlcswitch+routing: add funding blob to PaymentBandwidth
• lnwallet: no need to consult the aux unit for legacy channels
• mulit: increase logprogress time

BIPs

• BIP 53: Disallow 64-byte transactions
• bip-0331: correct size of version field in sendpackages
• BIP 443: OP_CHECKCONTRACTVERIFY
• BIP-345: withdraw
• BIP48: Add P2SH-P2WSH and P2TR mainnet examples
• BIP172: Define Bitcoin Subunits as Satoshis
• BIP177: Redefine Bitcoin’s Base Unit
• BIP48: Add p2tr script type derivation
• BIP 54: Consensus Cleanup
• BIP 321: URI Scheme (Replace BIP 21 with a new BIP containing information about more modern usage of it)
• BTCPay Server and NBitcoin supporting BIP388

BLIPs

• fix: link to Torv3 hidden service specification

BOLTs

• Require minimally-encoded features in BOLT 11 invoices

Events and Podcasts

• bitcoin++ livestream main stage - day 1, day 2, day 3

Mining

• Cambridge Digital Mining Industry Report
• Leveraging Surplus Electricity: Profitability of Bitcoin Mining as a National Strategy in South Korea
• Parasite Pool: Igniting the Mining Insurrection
• SLICE: Making PPLNS Work for Demand Response
• Trusting the Trustless: How Public P2Pool Nodes Worked for Bitcoin Miners

Miscellaneous

• Arkade: A Virtual Execution Layer for Bitcoin-Native Applications
• Another explanation of how Ark works
• Broly – Trust-minimized Bitcoin inscriptions directly from your Starknet wallet
• Coinbase: Standing Up to Extortionists
• Crypto Investor Charged With Kidnapping and Torturing Man for Weeks
• Liquidity requirements for Lightning payments: Ark servers and LSPs compared
• Maelstrom Fund writes grant for Ben Allen
• Optimal off-chain rebalancing scheme to mitigate channel depletion
• On relay policy and recent OP_RETURN drama
• OpenSats - Eleventh Wave of Bitcoin Grants
• Removing Bitcoin’s Guardrails
• Spiral grants - dangould, joschianbtc, mauricepoirrier
• Tangerine Upgrade: BitVM Activation on Clementine & Core Protocol Upgrades
• The 2015 Spam Attacks
• The MEVil of Relay Policy
• Trump’s stablecoin chosen for $2 billion Abu Dhabi investment in Binance
• Wallet of Satoshi launching non-custodial wallet in the US