Announcements

Please join us for our next Socratic Seminar. A special thank you to our sponsors Chaincode Labs and Cake Wallet for food, refreshments and event space.

If you can’t make it to the main event please join us at PUBKEY around 9:30PM.

Follow New York BitDevs on:

• Twitter
• BlueSky
• nostr: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsup3hqs

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• A Post-Quantum Path for BIP 324
• Against Allowing Quantum Recovery of Bitcoin
• What if we let Quantum Hunters get Bitcoin rewards ?
• (BIP Draft) P2P UTXO Set Sharing
• (BIP-0054) 64-Byte Transactions and Potential Legitimate Uses
• Public disclosure of one high severity Bitcoin Core advisory (CVE-2024-52911)
• The Bitcoin Lost and Found
• Fly Client Proposal
• Post-Quantum BIP-86 Recovery via zk-STARK Proof of BIP-32 Seed Knowledge
• RFC: Two years of BIP Editing, time for some new faces?
• QR-based signing flow payloads in Miniscript context
• Deactivating ECDSA/Schnorr
• PQC - What is our Goal, Even?
• BIP-322: Add type prefix, change PoF serialization, PSBT-based signing
• Subject: Eltoo / LN-Symmetry on Inquisition Signet: BIP 118 + 3-Round State Chain (APO+CTV)
• Bitcoin Core v31.0 Released
• Benchmarking SLH-DSA STARK Aggregation
• In defense of a PQ output type
• Hornet Update: A declarative executable specification of Bitcoin consensus rules
• (BIP Draft) Blind Relay: Stateless Encrypted WebSocket Coordination for PSBTs
• (BIP Draft) Dust UTXO Disposal Protocol
• Formal verification of secp256k1 modular scalar multiplication
• BIP 54 active on Bitcoin Inquisition

Delving Bitcoin

• LIGHTNING ECONOMICS - The Bridge Between Bitcoin’s Two Identities
• Taproot-native prevout binding via sighash preimage decomposition
• Post Quantum Lightning: Layer by Layer
• Protocol for zero-conf transactions
• Cascading DLCs: Chaining Bitcoin Contracts with Oracle Attestation Scalars
• Post-Quantum Migrations via Commit-then-Reveal (ala BIP16) - An Alternative to Sunsetting
• Fingerprinting nodes: Possible Solutions
• Optimistic payout in BitVM implementations like Citrea?
• QR-based signing flow payloads in Miniscript context
• Simple off-chain future soft fork aware testing framework in go
• CRISP — memory-compressed subset-sum solver for large-n coin selection
• (Proposal) Public Fraud Proofs for Just-in-Time Channels
• Taproot DLC Atomic Swaps & Lending: Open Implementation + Live Demo (NexumBit)
• Introspection or Not? Why Ordinals Are the Ultimate L1 Battleground
• Binary Fuse filters as an alternative to BIP 158 GCS
• (BIP Draft) Witness Version 3: ML-DSA-65 Post-Quantum Key-Path Spending
• Commit-Reveal for PQ Migration
• Onion Message Jamming in the Lightning Network

Bitcoin Network Operations Collective

• Did the number of reachable nodes in residential ISPs increase since Bitcoin Core v30.0?
• Small getaddr responses from 897 nodes (/Satoshi:27.0.0/ on AS63949)
• Recovering pre-2015 Bitcoin stale blocks from merged-mined chains (revisiting Stifter et al. 2018)
• Block propagation and validation duration during slow-to-validate blocks on Signet
• /python-bitcoinlib:0.12.2/ client getting addr-ratelimited (since 2026-04-10)
• Solved: Many connections to bitproject.io nodes?

Meetings

• Bitcoin PR Review Club

• Bitcoin Core general developer meetings
  • April 16
  • April 23
  • April 30
• Lightning Specification meeting
  • Lightning Specification Meeting 2026/05/04

Optech

• Bitcoin Optech Newsletter #404
• Bitcoin Optech Newsletter #403 - Recap Podcast
• Bitcoin Optech Newsletter #402 - Recap Podcast
• Bitcoin Optech Newsletter #401 - Recap Podcast

Network Data

-

CVEs and Research

Research

-

InfoSec

• We found a stable Firefox identifier linking all your private Tor identities

Pull Requests and repo updates

Bitcoin Core

• wallet: check the final BDB page LSN during migration
• doc: Add my key to SECURITY.md
• validation: correct lifetime of precomputed tx data
• Implement BIP 370 PSBTv2
• fuzz: compact block harness
• kernel: Expose CheckTransaction consensus validation function
• net: make m_nodes_mutex non-recursive
• wallet: Disallow wallet names that are paths including .. and . elements
• wallet: crash fix, handle non-writable db directories
• rpc, mempool: -deprecatedrpc fullrbf and bip125-replaceable from mempool RPCs
• Export embedded ASMap RPC
• kernel: expose btck_block_tree_entry_get_ancestor
• wallet: Add separate balance info for non-mempool wallet txs
• tor: limit torcontrol line size that is processed to prevent OOM
• coins,refactor: Reduce getblockstats RPC UTXO overhead estimation
• kernel: align height parameters to int32_t in btck API
• cli, rpc: add -rpcid option for custom request IDs
• rpc, refactor: gettxoutsetinfo race condition fix follow-ups
• wallet, test: Replace MockableDatabase with in-memory SQLiteDatabase
• Rollback for dumptxoutset without invalidating blocks
• kernel: add serialization method for btck_BlockHeader API
• validation: make CCoinsView a pure virtual interface
• Update secp256k1 subtree to latest master

BDK

• fix(electrum): do not pick unindexed outputs for history lookup
• Add SECURITY.md
• fix(bitcoind_rpc): emit invalidated heights when start_height is above agreement point
• fix: full_scan covers revealed range before applying stop_gap
• fix(electrum): verify txid of server-returned transactions
• fix(chain): prevent integer overflow in SpkIterator::new_with_range
• Add prev_blockhash validation to CheckPoint

HWI

• Add model id for Ledger Nano Gen5

rust-bitcoin

• p2p: Use V1MessageHeaderDecoder in V1NetworkMessageDecoder
• hashes: Add non-SIMD SHA256d for 64-byte input
• Add with_compressedness to LegacyPublicKey
• crypto: use constant-time equality for Poly1305 tags
• p2p: Wrap NetworkMessageDecoder to check payload len
• Introduce fuzz targets for Encode type roundtrips
• Delete the psbt module
• bitcoin: Witness constructor for P2WSH
• p2p: Compute checksum when decoding v1 messages
• hashes: Add 8-way AVX2
• hashes: Add 4-way SSE4.1 implementation for double-sha256 for 64-byte inputs
• taproot-primitives: Add crate externs for public API types
• taproot-primitives: Fix alloc feature gating and add hex feature
• p2p: Implement Consensus Encoding for V2NetworkMessage
• Split taproot types into new taproot-primitives crate
• Move ecdsa and parts of key and sighash to crypto crate
• Encoder/decoder improvements
• Add SerializedLegacyPublicKey
• primitives: Re-export all the public amount error types
• Add format traits for Target and Work
• io: Make error module public and re-export errors no-inline
• hashes: Add 2-way SHA-NI implementation for double-sha256 for 64-byte inputs
• consensus_encoding: Improve the API test
• hashes: split sha256 crypto into separate files
• Add arbitrary psbt fuzz target
• key: Improve secret key conversions
• p2p: add encoding trait impls to NetworkMessage encoder/decoder

libsecp

• musig: always clear out secret key in secp256k1_musig_nonce_gen_counter

dlcspecs

Core Lightning

• fix: use 330 sat dust limit for P2TR/P2WPKH change outputs
• Peer storage enhancements
• Fix injectpaymentonion fees
• opening: reject fundchannel_complete with unsigned non-segwit inputs
• Bolt quote improvements
• Splice-Script: Fix for when channel balances include msats
• ops: Emit opentelemetry traces via Unix Domain Socket
• Fix splice tx weight format
• cln-plugin: add support for structured logging dependencies
• crates: upgrade to 2024 edition and set and check MSRV of 1.85
• gossipd: don’t accept malformed channel_announcements with mis-ordered node-ids
• lightningd: --message-padding to allow users to disable padding altogether
• msggen: add splicein, spliceout and bkpr-report rpc methods

eclair

• Compute channel keys once on startup
• Add previous commitments to ChannelFundingConfirmed event
• Add liquidity ads metrics
• Add metrics on interactive-tx inputs and outputs
• Use official feature bit for option_simple_taproot
• Add support for the official splicing protocol
• More aggressive peer scorer idle channels management
• Keep our closing_complete in the simple close session
• Increase start-up ZMQ timeout
• Add threshold for disabling from_future_htlc
• Don’t load network graph twice on start-up
• Don’t try reconnecting automatically to mobile wallets
• Add delays when reading past payment events for stats

LDK

• Error if the calculated reserve would be greater than the channel value
• Allow cancellation of pending splice funding negotiations
• Expose probe status in recent payments
• Include failure context in splice events
• Strip Unicode Cf characters in PrintableString
• Include interactive funding candidates on broadcast
• Roll back composite sub-handlers when one rejects peer_connected
• Fix StaticInvoice::is_offer_expired to check the offer’s expiry
• Switch chacha
• Release OutputSweeper::pending_sweep flag on future drop
• Validate Esplora merkle proof against the block header’s merkle root
• Free pending_query_count slot when DNS proof build fails
• Count zero-fee-commitments channels in anchor reserve check
• Fix signed comparison in ElectrumClient
• Add AvailableBalances::next_splice_out_maximum_sat
• Expose current dust exposure in ChannelDetails
• Fix stale pre-splice announcement_signatures during reestablish
• Exit quiescence when splice_init and tx_init_rbf are rejected
• Add FilesystemStoreV2Error for v1 data detection
• Introduce FundingContributionBuilder API
• Enforce minimum RBF feerate on counterparty tx_init_rbf
• Expose inner ProbabilisticScorer accessors on CombinedScorer
• Prefactor for Trampoline MPP accumulation
• Correct blinded path forwarding CLTV expiry check
• Switch 0FC to production feature bit
• Apply MPP receive timeout to keysend payments
• Use saturating_mul when multiplying feerates by the fee spike buf
• Avoid Vec::with_capacity(huge) on empty Routes

lnd

• kvdb/sqlbase: fix non-constant format strings
• channeldb: tombstone closed channels on KV-SQL backends
• multi: add new rbf coop close actor for RPC server fee bumps
• contractcourt: make breach retribution final-taproot aware
• scripts+GitHub: use bitcoind v30.0
• multi: fix SIMPLE_TAPROOT_FINAL acceptor and overlay RBF auto-enable
• onionmessage: drop onion messages cycling back to the sending peer
• onionmessage+peer: rate-limit incoming onion messages per-peer and globally
• funding: add quick path for handling channel_ready messages
• multi: implement awareness of the final/production taproot channel variant

BIPs

• BIP-0322: clarify motivation/purpose, add prefix, clarify Proof of Funds format, describe PSBT based signing
• BIP451: Dust UTXO Disposal Protocol
• BIP-0329: Add spscan label type for labelling silent payments wallets
• BIP391: Binary Output Descriptors
• Corrections to BIP-0361 on rescue protocols
• BIP375: Add test vectors + validator
• BIP174: Deduplicate type definitions by introducing registry file
• BIP361: Post Quantum Migration and Legacy Signature Sunset

BOLTs

• Zero-fee commitments using v3 transactions (feature 40/41)
• BOLT 7: add reader requirement on canonical node id ordering.
• BOLT 7: port zero always bad.
• extension-bolt: simple taproot channels (feature 80/81)
• Change RBF feerate bump rule to ensure BIP125 relay conformance

New Releases

• Floresta 0.9.1 is out, fixing two potential DoS vectors

Events and Podcasts

-

Mining

-

Miscellaneous

• Drift Protocol - Rekt
• Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
• Litecoin MWEB Security Incident Postmortem
• Copy Fail is a straight-line logic flaw
• Dirty Frag: Universal Linux LPE
• Fountain Codes: Pruned nodes can support bootstrapping peers
• Roulette in a Bitcoin Payment Channel
• The U.S. Military Is Running a Bitcoin Node, Admiral Paparo Reveals
• Tennessee Becomes Second State to Outlaw Bitcoin, Crypto ATMs
• Researcher breaks 15-bit elliptic curve key in ‘largest quantum attack,’ wins 1 bitcoin bounty from Project Eleven
• Iran Scammers Demand Bitcoin, USDT for Transit Through Strait of Hormuz: Report
• LDK Server
• Tezos Tests Post-Quantum Privacy as Founder Slams ‘Half-Baked’ Bitcoin Quantum Theories