Price:

BITCOIN

Pollock argues seedless wallets shift self-custody from self-sabotage to systemic safety

Sunday, May 17, 2026 · from 3 podcasts
  • New vaults with biometrics and timelocks protect against physical coercion.
  • Wallet makers replace seed phrases with collaborative, fault-tolerant key systems.
  • Miniscript enables on-chain inheritance trusts with time-locked beneficiary keys.

The wrench attack problem has a technical solution. Jonathan Pollock told Danny Knowles that a 2-of-2 multisig vault with biometric scans and a configurable delay - days or weeks - makes kidnapping pointless. The aim is to outlast the attacker’s patience. BitKey’s system requires a second biometric scan to finalize a transaction, ensuring time is the ultimate defense.

"99% of documented attacks end within a week."

- Jonathan Pollock, What Bitcoin Did

Pollock is dismantling the seed phrase standard. He sees the exportable secret as an instant compromise vector. He argues hardware must keep its primary secret internal, gated by biometrics like a fingerprint. BitKey uses a collaborative 2-of-3 setup distributed between hardware, a phone app, and Block’s servers. This architecture shifts the burden from perfect user execution to fault-tolerant system design.

Miniscript solves the inheritance flaw. On Citadel Dispatch, Ben Kaufman detailed using absolute time locks to create self-executing trusts. An owner gives an heir a key inert for a predetermined period, like two years. If the owner doesn’t refresh the lock with an on-chain transaction, the heir’s key activates automatically. Kaufman said this removes the need for an attorney or a central vault.

"This system relies on absolute time locks. It essentially turns the Bitcoin protocol into a trust that executes itself based on time."

- Ben Kaufman, Citadel Dispatch

The industry consensus is clear. Technical risk from self-sabotage is dropping below the political risk of centralized custody. Tools like Bitcoin Keeper guide users from mobile hot wallets to geographically distributed multisig. The progression makes self-custody a graduated path rather than a leap. Kaufman also integrated Tether on Tron, viewing stablecoins as a pragmatic gateway for users in failing currency regimes.

The decision now is which catastrophic failure mode a holder prefers. Pollock frames it as a choice between trusting politicians or trusting yourself. With vaults, seedless recovery, and programmable inheritance, the tools are aligning with rational self-reliance.

Source Intelligence

- Deep dive into what was said in the episodes

Bitcoin Core v31 Release, Project Loupe Launches, Lightning Network's FutureMay 15

  • Steve believes the first app generating $1M in Bitcoin will launch by year-end 2026, citing mature developer tools and needing more people to take swings.
  • Steve pitches vibe coding or hypercoding to people between jobs as a better path than just studying Bitcoin.
  • Steve recounts a Slack message from a Block colleague wanting to license a PBJ clip for paid advertising, suggesting content licensing could help fund community treasuries.
  • Bitcoin Core v31 includes embedded ASMAP to diversify peer connections across Autonomous Systems, defending against eclipse attacks by ensuring nodes don't connect only to one cloud provider.
  • A new privacy feature in Core v31 creates ephemeral connections to Tor or I2P peers to broadcast transactions, obscuring the origin IP address from surveillance companies.
  • Cluster mempool in Core v31 groups related transactions for fee optimization and improves Lightning security, addressing historical ancestor limit issues for layer-two protocols.
  • Steve argues mining pools don't optimize fee selection algorithms because block rewards dominate revenue; fee optimization becomes relevant only in 10-20 years.
  • BNOC (Bitcoin Network Operations Center) provides public network data tools, including an OFAC censorship detector to identify if mining pools omit high-fee transactions.
  • Spiral's Project Loop is an open-source AI security scanner for Bitcoin repos that uses LLMs to find vulnerabilities, filters results, and funds the token costs.
  • Steve advocates for fusing Bitcoin payments with Loop to create a sustainable model where the community pays for scans, moving away from central Block funding.
  • LDK Server is a new binary daemon from Spiral that simplifies running a Lightning node or LSP, offering features like splicing and Bolt 12 ahead of LND.
  • Steve positions LDK as the purest public good Lightning implementation due to its open contribution model, public communication, and lack of commercial revenue pressure.
  • DK argues Nostr keys could improve PGP-based trust ceremonies for Bitcoin Core binaries, enabling a decentralized web of trust for software verification.
  • Cash App is the largest user of the Bitcoin blockchain, with Miles Suter stating it accounted for 4-8% of network activity at the 2023 Bitcoin Conference.
Also from this episode: (1)

AI & Tech (1)

  • Matt Belez built Babbel Agent, a tool that live translates podcast audio into any language using an LLM funded by Lightning payments.

CD203: HERMANN AND CAREL - ATTACK ON BITCOIN IN SOUTH AFRICAMay 15

  • Coinbase is rebranding its wallet app as 'Base,' positioning it as a Web3 super app akin to WeChat that will include a shitcoin wallet, a social feed, games, and USDC payments.
  • Spectre Wallet launched in 2020 to simplify multisig by connecting directly to Bitcoin Core, eliminating the need for an Electrum server. Ben Kaufman notes the ecosystem now includes many alternatives like Sparrow, Nunchuk, and Kasu.
  • Bitcoin Keeper is a mobile app that guides users from a single-sig hot wallet up to long-term, multisig cold storage and inheritance planning. It supports ten major hardware wallets via QR, file, NFC, or a companion desktop app for USB connections.
  • Bitcoin Keeper's multisig setup uses encrypted 'magic links' stored briefly on its servers for collaboration. Users can share keys, wallet descriptors, or partially signed transactions via these links, QR codes, or files.
  • Ben Kaufman argues multisig provides superior security and fault tolerance for life savings or corporate treasuries, while a single-sig hardware wallet with a passphrase offers simpler plausible deniability for most users.
  • Ben Kaufman says major hardware wallet theft is rare; the primary risk is users mishandling seed backups or falling for social engineering scams that panic them into entering seeds online.
  • Bitcoin Keeper uses Miniscript for inheritance, allowing users to add a time-locked 'inheritance key' that activates after a set period, turning a 2-of-3 multisig into a 2-of-4 or enabling a single-key emergency spend.
  • Ben Kaufman explains Bitcoin Keeper's inheritance uses absolute time locks set to a future date, not relative locks. Users must create an on-chain transaction to renew the time lock, which the app automates but requires a backup update.
  • Bitcoin Keeper monetizes via a subscription tier model: a free tier offers core features, while paid tiers start at $15/month for automated backups, Miniscript, inheritance planning, and a server-key option with spending limits.
  • Bitcoin Keeper supports USDT on Tron, using a BIP85 child seed from the user's main backup and a service called 'gasfree' to pay fees in USDT. The team plans to add swap functionality and support more chains based on demand.
  • Odell notes Argentina's black market has dollarized into Tether on Tron, and Trust Wallet dominates globally due to its Tether support, creating an opportunity for Bitcoin Keeper to attract international users with strong Bitcoin features.
  • Bitcoin Keeper omits Lightning support to focus on long-term savings, reasoning users should separate spending and storage wallets. Ben Kaufman has not deeply explored self-custody Lightning solutions like Spark or Arc.
  • Ben Kaufman observes Bitcoin's financialization is shifting culture toward paper Bitcoin and away from hardcore self-custody, though absolute user numbers for freedom money are still rising and tools are improving.
  • Bitcoin Keeper is building a contacts feature to enable in-app messaging for collaboration and future social recovery. Ben Kaufman views its current Miniscript inheritance as a form of social recovery where trusted parties hold time-locked keys.
What Bitcoin Did
What Bitcoin Did

Danny Knowles

The Future of Owning Bitcoin | Jonathan PollockMay 11

  • Jonathan Pollack argues that wrench attacks exploit a structural flaw in self-custody: when something more valuable than Bitcoin is threatened with violence, security collapses because keys can be coerced.
  • Pollack criticizes duress pins and decoy wallets as flawed solutions, noting they rely on deception and don't end the attack - they merely shift the threat location or potentially escalate the attacker's anger.
  • Pollack proposes the wrench attack test: industry solutions should protect Bitcoin even when an attacker knows your setup and you are fully compliant. He believes seedless architectures and transaction-based exit mechanisms offer more protection than instant-compromise seed phrases.
  • BitKey is a seedless multisig wallet with three keys. Pollack explains users hold two keys: one on the hardware and an encrypted app key uploaded to cloud storage, while Block holds a third key that cannot view transactions due to chaincode delegation.
  • Pollack states BitKey's new hardware wallet features a screen to verify all system actions, including transactions, security settings, and recovery configurations, moving beyond simple transaction signing.
  • Pollack argues self-custody products must balance security, recovery, privacy, and ease of use, noting the biggest threat to Bitcoin is often user error rather than external adversaries.
  • Pollack critiques conflating self-reliance as a virtue with lacking good products. His ethos is to enable permissionless money access through safer, easier solutions rather than DIY complexity.
  • Pollack outlines BitKey's proposed wrench attack vault solution: a two-of-two door requiring biometric checks and a configurable time delay, and a self-custody door unlocked after a preset period like two years.
  • Pollack and Danny Knowles discuss a potential final vault destination for stolen keys, suggesting a KYC exchange address might be optimal despite being custodial, as institutions are not susceptible to physical coercion.
  • Pollack believes ETFs offer permissioned price exposure, not permissionless money utility. He argues users must choose between self-custody key risks and political/business risks like forced conversion, custodial fraud, or market restrictions.
  • Pollack views quantum computing as a supply shock risk rather than an existential threat to Bitcoin, preferring a price crash over protocol changes that confiscate coins and break property rights.
  • Pollack defines a hardware wallet as a system needing internet connectivity for wallet functions, not just an air-gapped signing device. He advocates evaluating self-custody as a holistic system covering security, recovery, privacy, and usability.
  • Pollack argues comparing BitKey's full system to a standalone hardware signer like Coldcard is incomplete; one must include the DIY multisig, recovery, and inheritance setups, which BitKey integrates elegantly.
  • Danny Knowles mentions a wrench attack statistic: approximately 50 attacks per week in France this year, citing a friend's report of a London attack where a significant amount was stolen from an exchange.
  • Pollack references James Lopp's GitHub data on wrench attacks: extending the attack duration beyond one week reduces incidents to 1% of listed cases, and no attacks lasted longer than a month.