Price:

BITCOIN

Silent Payments shield Bitcoin from AI surveillance

Tuesday, May 26, 2026 · from 4 podcasts
  • BIP 352 Silent Payments in Sparrow Wallet eliminate address reuse, fixing a core Bitcoin privacy flaw.
  • US courts now treat privacy tools as criminal if used illicitly, threatening open-source developers.
  • AI enables both mass financial surveillance and new security exploits - forcing a privacy arms race.

Silent Payments are no longer a fringe idea. With Sparrow Wallet’s native integration of BIP 352, one-time addresses are now mainstream for Bitcoin power users. This upgrade closes a decades-old privacy gap: address reuse. When users share static QR codes, they expose their full transaction history to blockchain snoops. Now, senders generate unique destinations automatically - privacy by default.

Craig Raw, Sparrow’s lead developer, is driving adoption. The trade-off? Wallets must scan every block to detect incoming funds - a heavy lift for mobile devices. But as CoinJoin tools face regulatory heat, protocol-level fixes like Silent Payments become essential. They don’t rely on third parties. The goal: make Bitcoin as private as cash.

"Privacy isn't an abstract right - it's the ability to choose what you reveal."

- Max Hillebrand, BTC Sessions

The stakes are rising. On Ungovernable Misfits, hosts revealed the DOJ is demanding $2 million from Samourai Wallet co-founders Keone and Lauren, now incarcerated. The government treats their code as a criminal enterprise. Judges in the Roman Sterlingov appeal argued mixers are “legal in theory, but not in practice” once used illicitly - a precedent that could kill open-source privacy tools.

AI accelerates both sides of this war. It powers automated surveillance, making mass spying cheap. Stefan Molyneux noted on BTC Sessions that AI enables real-time social credit systems by linking financial and social data. But AI also drives exploits: Bisq lost 11.59 BTC in May to an AI-assisted manipulation of fee validation checks. In response, Spiral and Block launched Loop - an AI scanner that hunts vulnerabilities in open-source Bitcoin code.

"If the state or a criminal can't see your wealth, they can't take it."

- Max Hillebrand, Ungovernable Misfits

Zcash sees opportunity. Tushar Jain of Multicoin Capital argues public ledgers are liabilities in the AI era. Mert Mumtaz calls Zcash “private Bitcoin,” leveraging zero-knowledge proofs to strip history from value. While Bitcoin remains vulnerable to “Harvest Now, Decrypt Later” quantum attacks, Zcash claims to be “quantum recoverable” today, with full “quantum proof” status expected by summer via Project Tachyon. The race for private, future-proof money is on.

Source Intelligence

- Deep dive into what was said in the episodes

RABBIT HOLE RECAP #410: SILENT BITCOIN PAYMENTSMay 22

  • South Africa's treasury is using a revised 1930s law to impose strict KYC on Bitcoin transactions without parliamentary approval. Bitcoiners there are submitting public comments to build a legal challenge.
  • Sparrow Wallet 2.5.0 added native silent payments support, a privacy technology that eliminates address reuse by generating a unique destination for each payment.
Also from this episode: (9)

Protocol (4)

  • Iran launched the HermuzSafe platform, a Bitcoin-powered maritime insurance scheme for ships crossing the Strait of Hormuz. Matt and Marty argue this validates Bitcoin's censorship resistance on a global scale.
  • Iran's potential adoption poses a test for U.S. sanctions. Marty explains that Chinese mining pools control roughly 45% of global hash rate, making coordinated transaction censorship by the U.S. unlikely to succeed.
  • SpaceX holds nearly 19,000 Bitcoin, valued at $1.29 billion, according to its released financials. This makes it a top corporate treasury.
  • Hodl Hodl launched Lightning trading on mainnet, enabling non-custodial, no-KYC peer-to-peer Bitcoin purchases for small amounts, a significant product advancement.

AI & Tech (1)

  • GitHub disclosed a security breach where a poisoned VS Code extension led to the exfiltration of its internal repositories. The attackers claimed access to around 3,800 repositories.

Politics (4)

  • Donald Trump signed an executive order expanding Bank Secrecy Act requirements, framing it as a measure against illegal immigration. Matt notes this continues a trend of increased financial surveillance.
  • Thailand approved a 175 billion baht digital relief program tied to a state-controlled app. Funds are restricted to approved merchants and cannot be withdrawn as cash, deepening reliance on government payment infrastructure.
  • Marty notes that the 1970s Supreme Court justification for the Bank Secrecy Act's $10,000 threshold is outdated, as inflation has made that amount common, subjecting far more transactions to surveillance.
  • Matt highlights the political tactic of making populations poor and then offering small, controlled digital handouts as bribes to accept surveillance, as seen in Thailand and emerging in the U.S.

It's All So Tiresome | THE BITCOIN BRIEF 81May 20

  • The Samourai Wallet team, Keone and Lauren, face over $2 million in legal debt and a $250,000 fine from their federal conviction, urging community donations to cover these costs.
  • Keone highlights that Samourai Wallet served over 100,000 users and processed more than $2 billion through its open-source tools, which the government deemed criminal.
  • The community has donated 1.69 BTC, totaling $131,000, to Keone's appeal address, with the bulk coming from two 0.5 BTC transactions, demonstrating early support for his legal defense.
  • Bisq's v1 trade protocol was exploited on May 1, resulting in the drainage of 11.59 BTC from 10 users due to a missing validation check on taker-side fee values.
  • Bisq identified the exploit as likely AI-assisted, prompting a hotfix on May 16 and a reimbursement plan for affected users, with a DAO vote scheduled for May 25.
  • Roman Sterlingov's appeal hearing saw judges suggest mixers are "legal in theory, but not in practice" and questioned whether services must comply with all international licensing regimes.
  • The US Digital Asset Market Clarity Act passed the Senate Banking committee on May 15, integrating the Bank Secrecy Act 16 times and adding new Patriot Act special measures.
  • Lauren notes a carve-out in the Clarity Act's Section 604, rendering its protections for open-source developers against money transmitter liability ineffective due to an existing legal subsection (USC 1960).
  • Poland passed its EU MiCA-aligned crypto bill, coinciding with an investigation into the Zonda Crypto exchange's collapse, which caused $96 million in user losses and raised concerns about foreign influence.
  • Whirlpool.observer v1.0.1, a self-hostable blockchain reader by Vibrant BTC, launched to monitor Whirlpool activity, showing 89.25 BTC in the post-mixed pool and linking TXIDs to am.i.exposed for visualization.
  • Bull Bitcoin mobile has integrated Ledger hardware wallets and offers a new FSS hybrid storage strategy, CoinJoin privacy enhancements, and support for 11 additional languages.
  • JoinMarket NG v0.29 introduced a resume flag for tumbling plans, allowing users to pick up failed plans, and randomized fee points in dual offer splitting to enhance privacy.
  • Bolt's Backend v3.13.3 now supports full Arc (formerly Arcade) swaps and includes an EVM commitment swap lock-up flow, enabling swaps between Bitcoin and EVM chains using on-chain commitments.
Also from this episode: (7)

Protocol (2)

  • A Bitcoin Core use-after-free bug (CVE-2024-52911) affecting versions 0.14 through 28 was disclosed, having been quietly patched in version 29; a practical attack required significant proof of work.
  • Bitcoin Knots v29.3, released May 9, activated BIP 110 soft fork enforcement by default, prompting a public countdown by Jameson Lopp for its eventual fork-off from the main network.

Safety (1)

  • Blockstream's postmortem revealed the Bybit exploit that lost $1.5 billion leveraged malicious JavaScript injected into SAFE's multisig web front end, bypassing hardware wallet checks on complex Ethereum transactions.

AI & Tech (3)

  • A user recovered 5 BTC, worth $400,000, from an 11-year-old wallet after Claude (an LLM) found an older backup and identified/fixed a bug in the BTC Recover tool, which extracted the private keys.
  • Spiral and Block launched Loop, a free AI-powered vulnerability scanner for open-source Bitcoin projects, which uses LLMs to find code weaknesses and requires demonstrable test cases for all findings.
  • Umbrel released two mandatory security patches: v1.7.2 for CVE-2026-31431 (copy-fail) and v1.7.3 for a "dirty frag" vulnerability, both Linux kernel bugs potentially discovered by AI.

Lightning (1)

  • LDK server is a new API-first, fully functional Lightning node in daemon format built on LDK node, designed for easy integration into payment processors, wallets, and other applications.

"Privacy Is NOT a Right" – But It Is Your Best Defense | Molyneux & HillebrandMay 19

  • Stefan Molyneux argues privacy is a consequence of property rights, not an inherent right, and believes robust property defenses foster a private society.
  • Molyneux contends that governments use AI to overcome human limitations on totalitarianism, enabling pervasive surveillance and social credit scores through automated data gathering.
  • Molyneux suggests governments tolerate Bitcoin because banning it exposes fiat currency's inevitable decline, while full adoption undermines their ability to fund deficit spending.
  • Max Hillebrand defines privacy as the selective revelation of oneself, proposing that zero-knowledge proofs can verify information, like age, without disclosing unnecessary personal details.
  • Hillebrand highlights privacy's role in physical and financial security by disrupting an adversary's observation phase in the OODA loop, making criminal attacks less profitable due to uncertainty.
  • Molyneux argues that privacy has a market cost, as individuals refusing to share information (e.g., credit history) may incur higher premiums or less favorable terms from service providers.
  • Molyneux suggests personal data is individual property that can be sold for benefits like targeted ads, which he views as a legitimate, time-saving free market transaction.
  • Hillebrand cites Wasabi Wallet as a model for funding open-source projects: it offers free software, earning revenue from a 0.3% transaction fee, which supports its 40 engineers.
Also from this episode: (3)

Society (2)

  • Max Hillebrand argues that intellectual property is a form of theft because ideas are non-scarce, and IP enforcement reintroduces artificial scarcity while violating others' property rights over physical media.
  • Molyneux questions how artists would be compensated for high-risk, high-reward creative work without IP, noting the arts disproportionately reward a tiny percentage of creators.

Open Source (1)

  • Hillebrand states that open-source software, which runs most of the modern world, demonstrates that intellectual property is unnecessary and potentially harmful to innovation.

"Crypto Without Privacy Isn't Crypto" - The Zcash Bull Case | Tushar Jain & Mert MumtazMay 19

  • Mert Mumtaz, disillusioned by crypto's institutionalization focusing on "APIs for the dollar," sees privacy as the "last PVE" (player-vs-environment) challenge to reorient crypto back to its cypherpunk ideals. He believes there are "a thousand days to win back freedom" for privacy.
  • Mert Mumtaz identifies institutionalization, AI's ability to deanonymize, global trends towards wealth taxation, and the two-and-a-half-year maturity of functional ZK technology as converging factors boosting Zcash. Zcash pioneered SNARKs but suffered from early tech immaturity.
  • Mert Mumtaz argues Zcash's SNARK-based "trustless shielded pool" offers stronger, cryptographically provable privacy compared to Monero's ring signatures and decoy architecture, which are vulnerable to AI-enhanced deanonymization. He compares Monero's criminal niche to Tron's usage due to first-mover advantage, not superior tech.
  • Tushar Jain states Zcash's brand is "privacy for the normal person," making it more palatable for institutions than Monero, while Mert Mumtaz calls it "private Bitcoin." Its transparent mode acts as a "Trojan horse" to draw institutional attention, potentially converting users to its shielded pool.
  • Mert Mumtaz emphasizes that privacy enables true fungibility, an essential property for a store of value, where digital assets lack traceable history and cannot be "tainted." Satoshi Nakamoto, he notes, wanted privacy for Bitcoin but lacked the necessary ZK technology.
  • Tushar Jain counters the bear case that "nobody cares about privacy" by citing 18 months of data showing a market segment does care about private store of value. Mert Mumtaz adds Zcash offers the best risk-adjusted opportunity, targeting 10% of Bitcoin's market cap.
  • Tushar Jain warns that ubiquitous on-chain transaction visibility gives governments power to track financial history without warrants, making privacy a critical defense of individual rights. Mert Mumtaz highlights Peter Thiel's concern over the FBI's preference for transparent chains, suggesting a misalignment with crypto ideals.
  • Zcash, released around 2013, mirrors Bitcoin's 21 million hard cap and proof-of-work halving schedule, with an added fee mechanism for token holder-voted funding. Tushar Jain notes Zcash was long "hugely inflationary" and "left for dead" due to poor usability and marketing.
  • Mert Mumtaz states Zcash is "quantum recoverable" now, protecting shielded coins from quantum attacks, and will be fully "quantum proof" by mid to late summer via Project Tachyon. Zcash's sealed shielded transactions prevent "Harvest Now Decrypt Later" attacks, a vulnerability for other privacy coins.
  • Mert Mumtaz highlights several Zcash catalysts: Ledger's planned support for shielded ZEC (currently 31-32% of total supply), the Paradigm and Andreessen Horowitz-backed Zodal wallet, and block time reduction from 75 to 25 seconds, enhancing transaction speed and ecosystem growth.
Also from this episode: (1)

VC (1)

  • Tushar Jain's firm, Multicoin Capital, made a sizable investment in Zcash after observing its narrative build, community support, and price strength endure a significant pullback and macro bear market.