Max Tannahill decentralizes Dojo Bay after server seizures
- Max Tannahill decentralized the Dojo Bay directory to prevent wallet blackouts during server seizures.
- Bit47 cryptographic signatures prevent malicious node operators from spying on user financial histories.
- Volunteer-run nodes across five continents route privacy wallet data without central failure points.
Centralized privacy backends died in seconds.
When federal authorities seized Samourai Wallet's primary servers in September 2026, thousands of mobile Bitcoin users lost their transaction histories and wallet balances overnight. The shutdown exposed how fragile self-custodial software remains when relying on single corporate backends.
On Ungovernable Misfits, developer Max Tannahill outlined a structural fix: Dojo Bay. Rather than routing wallet traffic through single corporate servers, the open-source directory connects users directly to volunteer-run public nodes distributed across international jurisdictions. Spreading active backends across Mexico, Spain, and the United Kingdom fragments legal liability and prevents court orders from crippling the network.
"No single court order can take down twenty independent servers running across five continents."
- Max Tannahill, Ungovernable Misfits
Running full Bitcoin nodes remains out of reach for average mobile users who lack dedicated hardware or networking skills. Dojo Bay fills this gap by publishing verified public endpoints. Users can point mobile wallets to offshore nodes, diluting regional surveillance risks while preserving lightweight client usability.
Connecting to untrusted public nodes usually carries severe privacy trade-offs. Standard node queries require users to share extended public keys, allowing server operators to map complete wallet balances and financial histories. To prevent surveillance, Tannahill re-architected Dojo Bay around mandatory cryptographic verification.
Server operators must sign pairing credentials with Bit47 payment codes before joining the directory. Wallet software can then cryptographically verify the pairing codes against the operator's digital signature. Any host-level tampering instantly fails the signature check, preventing rogue nodes from harvesting user metadata.
The administrative infrastructure operates without cloud databases, corporate accounts, or domain registries. Directory maintainers authenticate through Auth47 challenges, while the full directory toolset mirrors natively over Tor onion routing. Users can clone the complete repository directly from active nodes with a single terminal command.
Integration with mobile wallets like Sentinel enables automated node selection. Instead of requiring users to manually configure backend IP addresses, wallet software can automatically poll signed directory feeds to maintain uptime during server takedowns.
Math replaces administrative trust.