Announcements

Please join us for our next Socratic Seminar. A special thank you to our sponsors Chaincode Labs and Cake Wallet for food, refreshments and event space.

If you can’t make it to the main event please join us at PUBKEY around 9:30PM.

Follow New York BitDevs on:

• Twitter
• BlueSky
• nostr: npub1nydevscv0slx9eyr0chkkdgzqfhtp4guk039akhq6g9fnsrf6lcsup3hqs

🔥 Hot Stuff 🔥

Ledger Spy Implant Hack

• Tibane Labs: Ledger Nano X implant
• My spy-implanted Ledger came from Malaysia
• Ledger wallet-draining traced to $86M+ across chains

Mailing Lists, Meetings and Bitcoin Optech

Mailing Lists

bitcoin-dev

• Lichen: L2s In CHannels ENforced on bitcoin
• Flame: confidential transactions with Bitcoin proof-of-burn consensus
• RE BIP 300: 26% censoring attack
• BIP Draft v2: Co-signer Spending Policies
• LN-GAP : Lightning governed by arbitrary programs
• Getting BIP54 past the finish line
• MHFE: memory-hard encryption of BIP39 backups into 24 words — request for review
• Convention for tagged hash tags in BIPs
• QSAVE post-quantum solution for non-migrated coins

Delving Bitcoin

• Silent Payments for Multiparty Wallets
• From peer-to-peer cash to elite settlement layer: is the 21M cap building a new aristocracy?
• Open-source Bitcoin multisig coordinator: shared signing queue, hardware wallets, live signet demo
• (BIP Draft) Co-signer Spending Policies
• Cassis, a new simple scheme for generic multi-layer multi-hop HTLC routing
• Anchoring an SPV light client on another chain: checkpoint trust, retargeting and reorg handling
• Descriptor syntax for hash preimages
• Is the pre-finality double-spend race intrinsic to single-owner coins?
• Disclosure: DoS vulnerabilities fixed in Eclair v0.14.1
• Where should wallets explain the differences between on-chain Bitcoin and Lightning?
• Bitcoin-rs: an independent Bitcoin full node written in Rust
• Forwardable Peerswap Incentives, And Closing Surreptitious Communications Tunnels
• Disclosure: DoS vulnerabilities fixed in Eclair v0.14.0
• Softfork before GTA VI?
• Shielded Bitcoin: Private Transfers on the Bitcoin L1

Bitcoin Network Operations Collective

• Addrman health dashboard
• ViaBTC bitpeers sending the same block message multiple times during forks
• Invalid blocks catalogue

Meetings

• Bitcoin Core general developer meetings
  • September 24
  • October 1
  • October 8
• Lightning Specification meeting
  • September 21

Optech

• Bitcoin Optech Newsletter #427
• Bitcoin Optech Newsletter #426 - Recap Podcast
• Bitcoin Optech Newsletter #425 - Recap Podcast
• Bitcoin Optech Newsletter #424 - Recap Podcast

CVEs and Research

Research

• Claude reveals ECDSA curve origins
• Compact Shielded CSV: Post-Quantum, Private, Lightweight Client-Side Validation Blockchain
• GLASS COINS vs SHIELDED BITCOIN whiteboard session
• Argo: Leaking a Secret from an Invalid Groth16 Proof
• Garbling Groth16 with Native Group Operations

InfoSec

• Debian alert DSA-6528-1 (kernel)
• Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance

Pull Requests and repo updates

Bitcoin Core

• policy: sum package weight in int64_t
• mempool: Remove -persistmempoolv1 option
• wallet: fix crash on importdescriptors with a range ending at 2^31-1
• kernel: use struct-based logging and simplify logging interface
• ipc: support per-address max-connections options on -ipcbind
• BIP-352: fix P2PKH pubkey extraction from malleated scriptSig
• net: preserve anchors when network is disabled
• util: cap Sock::WaitMany timeout to fix -rpcclienttimeout=0 on macOS
• net: always complete all initial private broadcast connections
• test: add a tx_valid vector for CVE-2024-38365
• wallet: Prepare for future upgrades by recording versions of last client to open and decrypt
• p2p: Suspend ping timeout while downloading blocks from a peer
• cli: Improve empty-response and fix -rpcclienttimeout regression
• log: prevent user input from injecting fake log lines
• fees: fall back to block_policy and minor api change
• tools: Call SHA256AutoDetect in bitcoin-util, bitcoin-tx and bitcoin-wallet
• wallet: allow importprunedfunds for spending transactions
• Wallet: Add maxfeerate wallet startup option
• sign: skip signing SIGHASH_SINGLE inputs with no corresponding output
• i2p: update leaseset encryption types
• init: fee estimates can lag behind the chain after restart
• net: don’t discourage private broadcast peers
• wallet: don’t double discard output groups with avoidpartialspends
• mining: add block template manager
• Silent Payments: Implement bip352 (take 2)
• wallet: check descriptor cache xpub length before decoding
• wallet, rpc: Add listrawtransactions RPC
• test: rpc: add last block announcement time to getpeerinfo result
• wallet: make encryption state updates atomic

BDK

• fix(chain): skip coinbase txs with a last_seen in canonicalization
• fix(rpc): verify fetched mempool txids before caching and document trust assumption
• refactor(chain)!: remove Anchor::confirmation_height_upper_bound
• fix(electrum): refresh header cache with headers fetched for the chain update
• fix(chain,core): prevent serde from implicitly leaking std into no_std environments

rust-bitcoin

• Reject plus sign in U256 and hex integer strings
• units: make zero target convert to zero work
• params: Use 90% activation threshold for mainnet and signet
• p2p: preserve non-mapped IPv6 addresses in Address::socket_addr
• Remove IS_SIGNED from public interface
• bitcoin: Add TapScriptExt::is_immediately_valid
• feat(units): add saturating arithmetic methods to Weight
• chacha20: Add 8 block processing on x86 with AVX2
• bitcoin: introduce ScriptCode for sighash computation
• units: use sealed AmountOps trait for amount serde bounds
• feat(units): add saturating arithmetic methods to FeeRate
• primitives: Name script and witness decoder errors
• primitives: Export WitnessMerkleNode encoder and decoder types
• consensus_encoding: do not drop encoders with an empty first chunk
• internals: Restore T: Eq in ArrayVec Eq impl
• units: Make parse_int helper functions private
• units: fix serialization of optional amounts
• Fix regtest parameters to match Bitcoin Core
• units: drop PartialOrd and Ord from CompactTarget
• io: return WriteZero when write_all makes no progress
• io: Don’t read from inner reader when Take is exhausted
• Start formally proving parts of the crate with Creusot
• addresses: Add network conversion method to Address
• primitives: Bound aggregate size and weight while decoding
• bitcoin_bip158: Benchmark and Perf Improvments
• primitives: Use txid for coinbase ntxid
• primitives: Reject P2SH-wrapped SegWit v1+ programs
• units: serialize unsigned amounts as u64
• units: move policy fee rates to bitcoin::policy
• chacha20: Add 4 block processing on SSE2 x86
• p2p: reject internal-in-IPv6 addresses in addrv2 IPv6 decode
• bitcoin: handle OP_CODESEPARATOR in legacy
• Sanitize serde size hints before allocating
• Fix integer overflow in get_array
• units: fix work and target conversion for small values
• primitives: Fix Witness handling of oversized items
• Use try_fold instead of fold in Sum impl
• units: fix div_by_fee_rate_ceil precision
• P2p reexport types at root
• units: Reject malformed amount strings
• addresses: check witness version on spk
• chacha20: Accelerate apply_keystream on aarch64
• units: Bound input retained by hex parse errors
• units: Remove Into from Sum impl for amount types

libsecp

• silentpayments: perform tweak addition with actual scalars
• refactor: introduce ecmult_const_ge helper (preventing accidential gej leaks)
• Clear secret-dependent variables in _ecmult_const_xonly

secp256k1-zkp

• rangeproof: clear secrets on all rewind exit paths
• generator: fix variable-time addition in pedersen_commit

Core Lightning

• dualopend: handle tx_add_output with over MAX_MONEY
• lightningd: fix 209 “Payment failure reason unknown” for sendonion payments
• connectd: only charge gossip queries against the CPU budget
• bitcoin: don’t hash an elements challenge before pulling it
• hsmd: keep a passed client fd until lightningd has received it
• bitcoin: don’t dereference a NULL transaction from a truncated block
• Fix/connectd socket issue
• renepay: wait for in-flight HTLCs before failing route computation
• lightningd: treat disconnected peer as offline in routehints
• lightningd: delay dataloss error after channel_reestablish reply
• Stabilize test_grpc_wrong_auth, fix askrene node-bias hashing
• connectd: free individual listeners on shutdown
• lightningd: keep peer connected when rejecting a dead channel’s reestablish

eclair

• Retry publishing txs evicted by unconfirmed conflicts
• Keep unsigned settlements when rejecting commands
• Force-close again when a splice RBF sibling confirms
• Settle relayed on-the-fly upstreams on hash reuse
• Reject unpublishable splices
• Reject onion per-hop lengths exceeding packet
• Only relay on-the-fly payment on funded channel
• Use published commitment in PostRestartHtlcCleaner
• Remove spendfromchanneladdress nonce after one sig
• Validate remote closing script updates
• Harden interactive-tx funding against a malicious bitcoind
• Reject seed files with an invalid length
• Bound feerate of remote rbf when we contribute

LDK

• Release the event queue waker mutex before waking consumers
• Use feature bits 80/81 for option_simple_taproot
• Only prune the network graph after a fresh RGS sync
• Reject skipped revocation indices before overwriting stored secrets
• Apply a one-hop blinded path’s CLTV expiry delta
• Avoid overflow when averaging liquidity offsets in merge
• Stop logging derived payment preimage if hash doesn’t match
• Propagate fatal write errors when socket reads are paused
• Preserve ancestor history in reorg disconnect locators
• Propagate read errors instead of panicking during deserialization
• Reject message-content TLVs in dummy onion-message hops
• Add missing scid alias check against real channels
• Check invoice chain in pay_for_bolt12_invoice
• Keep the outbound SCID alias of closing channels on reload
• #4491 Persistent MonitorEvents follow-up
• Disable Nagle’s algorithm in net-tokio
• Reject acknowledged commitment rollbacks
• Fail held HTLC failures when force-closing
• Hold back HTLC monitor events while updates are in-flight
• Credit remote HTLC fulfills on remote HTLC adds
• Drop since-applied blocked monitor updates before the stale-channel check
• Fix some bugs the LSPS2 JIT flow
• Don’t track refused monitor updates as pending
• Always attempt SCID privacy negotiation
• Fix payment attribution edge cases and simplify claiming
• release utxos from failed splices
• Claim HTLC when preimage appears after queued fail-back
• Persistent MonitorEvents

lnd

• peer: retire cooperative closers without stranding callers
• (1/?) Local reputation: subsystem core, read only
• bolt12handler: add BOLT 12 invoice generation and signing
• lnwallet/chainfee: clamp web API fee estimates to a ceiling
• lnwallet+chanstate: reject unexpected revocations, make RemoteNextRevocation an fn.Option
• graph/db: keep KV graph records readable
• graph/db: normalize empty policy signatures
• lnwallet: clean up transient MuSig2 sessions
• lnwallet: reject commitments missing aux HTLC signatures
• offers: add a SQL-backed store for BOLT 12 offers
• lnwire: fix NodeAnnouncement2 address decoding
• blindedpath: avoid uint32 overflow in accumulated fee calc
• sqldb: close the Postgres migrate driver after use
• bolt12: finalize the codec package
• (1.5/3) aux revocation: allow maxFeeRatio above 1.0
• kvdb/sqlbase: cache nested bucket ids within a transaction
• htlcswitch: align forwarding response and circuit lifetimes
• multi: stop opening legacy channels
• lnwallet+contractcourt: skip trimmed HTLCs in legacy breach retribution
• zpay32: reject duplicate payment hash fields
• discovery: rotate failed historical syncers
• invoices: contain modifier errors and bypass interception for replays
• peer: answer every valid ping

BIPs

• BIP375: validate PSBT_OUT_SP_V0_LABEL length
• bip98: fix the third SKIP hash in the example proof
• bip174: add PSBT_IN_P2C_TWEAK to the type registry
• bip138: clarify key selection and apply exclusions across expressions
• bip138: binary encoding clarifications
• bip138: clarify receive-only descriptor set, 0 birth time, and BIP32 range
• BIP370: add Input Finalizer section; BIP371: remove finalizer clause from an output field
• BIP376: keep PSBT_IN_WITNESS_UTXO after finalization
• bip-0352: do not require the optional expected argument

New Releases

• Bitcoin Core 32.0rc4 is now available
• 32.0 Release Candidate Testing Guide

Miscellaneous

• Wavelength - Integrate Bitcoin in an afternoon
• LayerTree - A Bitcoin scaling design