04-02-2026Price:

The Frontier

Your signal. Your price.

BITCOIN

FROST hides Bitcoin multisig from surveillance and slashes fees

Thursday, April 2, 2026 · from 3 podcasts, 4 episodes
  • FROST cryptography masks multisig vaults as single-signature payments, blinding chain analysis.
  • The math eliminates the need for separate backup descriptors, simplifying recovery and inheritance.
  • Splicing merges Lightning channels into one, solving liquidity fragmentation and cutting fees in half.

Multisig Bitcoin security has traded user complexity for a massive privacy leak. Anyone can spot a vault’s spending conditions on-chain. Frostsnap founders Nick Farrow and Lloyd Fournier are replacing that clunky script with Flexible Round-Optimized Schnorr Threshold (FROST) signatures. On the blockchain, a transaction from a three-of-five wallet looks identical to one from a single key.

Lloyd Fournier, Ungovernable Misfits:

- With normal multi-sig, you have to keep around three keys on three different devices and you would have to keep a digital backup of the descriptor.

- If you have two out of the three keys but lose the third one, you actually lose the money.

This cryptographic shift solves two core problems: it hides security setups from surveillance, and it eliminates the catastrophic risk of losing a “descriptor” file. Recovery becomes a matter of gathering a threshold of physical keys, not reconstructing a digital artifact - a crucial improvement for inheritance.

Meanwhile, on the Lightning Network, a parallel simplification is underway. Splicing - now officially merged into the Lightning spec as Bolt 1160 - lets users resize channels on the fly. This collapses the mess of dozens of tiny channels into one unified balance. Phoenix Wallet has already used it to cut fees in half.

Dusty Daemon, Bitcoin Optech:

- Splicing at its core allows you to change the size of a Lightning channel.

- It is kind of like changing the size of the wings on a plane while it is flying.

The upgrades arrive as security threats evolve. Joe Kelly of Unchained argues the biggest risk remains social engineering, not technical failure. And the seizure of Samourai Wallet shows that even high-profile domains can fall to low-effort scams post-confiscation. The new tools offer stronger, quieter defenses, but they don’t eliminate the human element.

By the Numbers

  • 1160BOLT numbermetric
  • 50%fee reductionmetric
  • 8450PR numbermetric
  • 8856PR numbermetric
  • 8857PR numbermetric
  • 28.0.4Bitcoin Core versionmetric

Entities Mentioned

Adaptor signaturesProtocol
Bitcoin CoreProduct
Core LightningTool
EclairTool
EltooConcept
FROSTProtocol
Lightning Dev KitTool
LNDTool
PhoenixProduct
SegWitProtocol
TaprootConcept
UnchainedCompany

Source Intelligence

What each podcast actually said

Bitcoin Optech: Newsletter #398 RecapMar 31

  • Dusty Damon, a long-time contributor, confirmed that BOLT 1160, which merges the splicing protocol into the Lightning spec, has been ratified.
  • A Lightning spec is merged only after a feature is implemented and tested across multiple implementations, analogous to HTML features working on multiple browsers.
  • Splicing was merged into the Lightning spec after successful implementation and testing across three different Lightning implementations.
  • Dusty Damon is now working on ancillary features enabled by splicing, such as merging multiple transactions (splices, channel opens, on-chain payments) into a single transaction.
  • Merging transactions via splicing could enhance privacy, reduce transaction costs, and improve blockchain efficiency.
  • Z-Man suggested that focusing on swapping over splicing would have been more efficient due to swapping's smaller block space usage.
  • Dusty Damon acknowledged that 'batch splicing' is challenging, citing difficulties in establishing reputation and preventing malicious actors in multi-party transactions.
  • A multi-channel splice involves more than one Lightning channel, encompassing actions like cross-channel splices or directing funds to cold storage.
  • Mike explained that Bitcoin transactions are public and do not use encryption, which is specifically about hiding information.
  • Bitcoin relies on digital signatures (ECDSA and Schnorr) to authorize spends without revealing private keys, using cryptographic math distinct from encryption.
  • Pay-to-Script-Hash (P2SH) further extended commit-reveal by hashing spending conditions in the output and revealing the full script only at spend time.
  • Segwit and Taproot refined the commit-reveal approach, with Taproot being the most private by only revealing the specific script path used for spending.
  • Pay-to-Taproot (P2TR) multisig transactions reveal all public keys when spent via a script path due to the requirements of `OP_CHECKSIG` and `OP_CHECKSIGADD` opcodes.
  • For more private multisignatures, key-path spending in Taproot or emerging threshold signature schemes like FROST are viable alternatives.
  • `OP_CHECKSIGFROMSTACK` allows cross-UTXO signature reuse by signing an arbitrary message instead of binding to a specific transaction input.
  • This feature is foundational for rebindable transactions and advanced Layer 2 designs like LN-Symmetry, which could update channel states without old states becoming punishment vectors.

Also from this episode:

Lightning (14)
  • Splicing allows users to change the size of a Lightning channel, which facilitates features like making on-chain payments directly from Lightning funds.
  • The Phoenix iPhone wallet uses splicing to manage a single channel per user, which resulted in a 50% reduction in fees and improved user experience.
  • Large Lightning routing nodes use splicing to balance channels and manage one-way payment flows, potentially more than doubling throughput capacity.
  • Core Lightning PR 8450 extends its scripting engine to support cross-channel splices, which involve moving funds between different Lightning channels.
  • Dusty Damon's splicing engine in Core Lightning solves dynamic fee calculation, a complex problem where adding inputs for fees increases transaction size, demanding more fees in a recursive loop.
  • The splicing engine aims to be a standalone library, minimizing dependencies on Core Lightning, and can manage complex channel states, ensuring correct fee rates and balances.
  • The engine prevents potential fund loss scenarios ('foot guns') by preventing users from incorrectly interacting with partially signed Bitcoin transactions (PSBTs) via online services.
  • Core Lightning PRs 8856 and 8857 introduce `splicein` and `spliceout` RPC commands, allowing users to add funds to or remove funds from channels directly.
  • `spliceout` will soon allow sending funds to any Bitcoin address, extending its current functionality of moving funds to an on-chain wallet or another channel.
  • Core Lightning 26.04 Release Candidate 1 includes new splicing capabilities and adds an option for 'fronting nodes' in Bolt 12 offers to specify preferred routing peers.
  • Eclair PR 3247 introduces an optional peer scoring system to track forwarding revenue and payment volume, allowing nodes to auto-fund profitable channels or close unproductive ones.
  • LDK PR 4472 fixes a potential fund loss by ensuring transaction signatures are not released until the counterparty's commitment signature is durably persisted, securing channel state.
  • LND PR 10602 adds a `DeleteAttempts` RPC to its `Switch` RPC subsystem, enabling external controllers to manage and remove payment attempt records.
  • LND PR 10481 adds a Bitcoin Core (`bitcoind`) miner backend to LND's integration test framework, allowing tests for Bitcoin Core-specific features like V3 transaction relay.
Adoption (7)
  • Bitcoin Core now includes encrypted transport for communication between nodes, encrypting peer-to-peer traffic that was previously in plain text.
  • Bitcoin script gradually evolved to a commit-reveal structure, starting from Satoshi's raw public key design to Pay-to-Public-Key-Hash (P2PKH).
  • Bitcoin Core version 28.0.4 is a maintenance release that backports bug fixes related to unnamed legacy wallet migration failures that affected version 30.
  • Luke Dash Jr.'s DNS seed was removed from Bitcoin Core (PR #33723) due to non-compliance with DNS seed requirements.
  • Bitcoin Core PR 33259 adds a 'Background Validation' field to the `getblockchaininfo` RPC response for assumed UTXO nodes, providing visibility into prior block validation progress.
  • Bitcoin Core PR 33414 enables Tor proof-of-work defenses for automatically created Onion services, requiring clients to perform work to connect, mitigating attacks.
  • Bitcoin Core PR 34846 adds new functions to the `libbitcoinkernel` C API to easily retrieve `nLockTime` and `nSequence` fields for checking BIP34 rules without manual deserialization.

Bitcoin Boomers: Joe Kelly on Scams, Security & Self-Custody in 2026Mar 30

  • Multi-signature setups, requiring multiple keys to move funds, defend against the single point of failure of a lost seed phrase.

Also from this episode:

Custody (6)
  • Joe Kelly says the biggest security threat is social engineering, not technical vulnerabilities.
  • Scammers use urgency and personal data to trigger victims into making mistakes, bypassing technical safeguards.
  • Kelly notes multi-signature allows a third party to help with recovery without gaining unilateral power to steal funds.
  • Holding your keys proves technical control but often lacks the documentation required for tax and probate court.
  • Institutions can provide the formal letterhead that bridges cryptographic ownership with the existing legal system.
  • While Bitcoin is harder to confiscate than gold if held privately, most users need regulated bridges to the broader economy.
Digital Sovereignty (1)
  • Larry Lepard argues self-sovereignty exists on a spectrum between total privacy and working within legal protections.
History (1)
  • Lepard cites Executive Order 6102, where the US government seized gold directly from bank vaults, as a risk of centralized custody.

New Frontiers with Frostsnap | FREEDOM TECH FRIDAY 35Mar 29

  • Traditional Bitcoin multisig requires a digital descriptor file that lists all participant public keys for recovery.
  • Nick Farrow and Lloyd Fournier say losing the descriptor file makes funds irrecoverable, even if you have the required number of keys.
  • FROST (Flexible Round-Optimized Schnorr Threshold signatures) moves multisig logic from Bitcoin script into the cryptography itself.
  • On-chain, a FROST transaction is indistinguishable from a standard single-signature Taproot payment.
  • Lloyd Fournier calls this 'invisible multisig,' hiding complex security setups from public blockchain analysis.
  • This approach expands the privacy set for users to include every standard Taproot user on the network.
  • FROST eliminates the need for a separate descriptor file, reducing recovery to simply meeting a threshold of physical devices.
  • Moving multisig coordination off-chain slashes transaction fees compared to on-chain script execution.
  • The trade-off is increased complexity in the coordination required between devices to generate a single distributed signature.

Also from this episode:

Custody (1)
  • Nick Farrow says this makes inheritance and emergency recovery simpler for non-technical family members.

Gotta Map Em All | THE BITCOIN BRIEF 78Mar 27

Also from this episode:

Custody (6)
  • The official samouraiwallet.com domain now hosts a low-effort affinity scam, post-FBI seizure, a security failure for a high-profile government action.
  • Max and Q warn the scam site, filled with bot-generated SEO slop, remains a threat to users seeking legacy wallet access or support.
  • Foundation Devices has shipped over 1,000 Passport Prime hardware wallets, clearing its backlog and moving into volume production.
  • Foundation's focus has shifted from shipping delays to user onboarding, answering 'how do I use NFC?' instead of 'where is my device?'
  • The company aims for next-day shipping and live support demos, moving hardware from a pre-order promise to a functional, integrated tool.
  • Keonne's wife, Lauren, detailed the human cost of the Samourai legal battle on What Bitcoin Did, a rare perspective while he remains incarcerated.