Blockstream pursues hacker keeping 600 Bitcoin

Protocol (1)

• Security researcher Cali publicly claimed Blockstream could have avoided the Liquid exploit by answering red team emails. Keon criticizes this as clout-chasing influencer behavior, arguing that effective security work must be conducted quietly.

Adoption (1)

• Natalia highlighted Silent Link and Natada as non-KYC Bitcoin eSIM options for exiting fiat systems. Silent Link offers data plans for $9 using Lightning and Bitcoin, while Natada provides rented phone numbers and VPN services.

Lightning (1)

• Keon warns that Lightning sender privacy is only perfect when running a non-custodial node that constructs its own routes. Custodial systems, Strike, and Lightning Service Providers doing route construction can observe transaction details.

Europe (2)

• The European Union Cyber Resilience Act will require digital product providers to report security vulnerabilities and dependency updates to governments within 24 to 72 hours. Keon criticizes the law as a heavy-handed regulatory burden that will drive developers out of Europe.
• The Rhysida cybercrime group hacked the Berlin Department of Public Works and Department of Transportation, accessing data on 4 million residents. They published 1.4 million files on the dark web after the city refused a 30 Bitcoin ransom.

Safety (1)

• An Anthropic researcher resigned after six months, warning that competition is driving companies to build self-improving AI models. He estimates a greater than 10% chance that AI will cause human extinction within the next decade.

Coding (1)

• Keon argues that AI models are not yet hands-free and are regressing on programming tasks. However, some companies are using LLMs to maintain multiple codebases, which can double their overall code attack surface.

Nostr (1)

• Albi released version 1.9 of the Nostr Wallet Connect ecosystem map. Keon explains that NWC leverages Nostr relays as public turn servers, providing a highly efficient method for connecting external web apps to Lightning wallets.

V4V (1)

• Stacker News experienced a major Zap War after a user promoted a shitcoin project. Keon and other users spent nearly 500,000 sats downzapping the post, sparking a debate on whether financial moderation models fail when users prioritize fee revenue over platform policing.

Open Source (1)

• An open-source developer forked the Stacker News codebase on GitHub to create a version of the platform that swaps out Bitcoin for Monero.

Privacy (1)

• Den questioned whether anyone can successfully launder stolen Bitcoin. Keon notes the cold card hacker attempted to launder funds through CoinJoin, ThorChain, and Ethereum swaps, but the efficacy of maintaining unlinkability across these protocols remains highly uncertain.

Education (1)

• Jason B developed Little Victoria, an educational, Sim City-style city-building game set in the Victorian era. The game teaches players historical events while using Victorian-era art and classical music.

Protocol (1)

• The Liquid exploit exposed structural risks in federated sidechains, where members blindly run software updates without auditing the code. The attacker bypassed security controls by exiting through Sideswap, a federation member that lacked KYC or transaction velocity controls.

Safety (1)

• An Anthropic employee's public exit over existential AI risk was an orchestrated media campaign designed to trigger regulatory capture. David Sachs argues that coordinated media coverage and political reactions aim to build regulatory barriers that protect closed labs while stifling open-source models.

Open Source (1)

• Attempts to restrict open-source AI development in the United States fail to account for China's pro-technology momentum. David Sachs points to data showing 83 percent of China's population holds a positive sentiment toward AI, viewing it as an economic tool rather than an existential threat.

Models (1)

• Ramez Naam demonstrated that OpenAI's technological lead has collapsed from 20 months in 2022 to just five months. This rapid convergence shows that AI development is heading toward a plurality of models rather than a single monopolistic winner.

Agents (1)

• Open protocols are essential to prevent vendor lock-in as autonomous AI agents proliferate. Builders at the summit highlighted open-source memory protocols as a critical mechanism to let users export their local context and memory across different models.

AI Infrastructure (1)

• Vora revealed its local AI hardware device featuring a mid-century wooden aesthetic and 64 gigabytes of RAM. The device serves as a local security membrane, allowing users to store memory and context locally while securely managing API calls to external cloud models.

Protocol (1)

• The Liquid exploit targeted a validation shortcut in the Elements software cache. The cache verified range proofs without validating asset types or spending conditions, allowing the attacker to bypass cryptographic checks with an invalid output that matched a cached description.

Coding (1)

• Orange Surf reports that the vulnerability was publicly exposed when a patch pull request sat open starting September 1. The attacker likely identified the unmerged bug fix and immediately exploited the live network.

Custody (4)

• Foundation released KeyOS 1.4 for Passport Prime, enabling app sideloading verified by developer certificates. The update allows custom security profiles, with plans for a whitelisted and vetted Foundation App Store to aid less technical users.
• Chilean exchange OrionX halted withdrawals after a forensic audit revealed $7 million in customer crypto was missing. Founding partners are accused of conducting unauthorized speculative trading with user funds without operating licenses between 2018 and 2021.
• The hacker responsible for the Wave 3 Coldcard exploit moved roughly 20.5 Bitcoin into Ethereum via Thorchain swaps. This constitutes slightly over 1 percent of the total 1,789 Bitcoin stolen during the exploit.
• Cake Wallet 6.4.4 added native Trezor support for cold storage, while Nunchuk added BitBox02 Bluetooth connectivity. Additionally, RoboSats Alpha 0.87 added three new coordinators and encrypted image uploads through Noster Blossom servers.

BTC Markets (1)

• CoinDesk reports that the Bitcoin-backed mortgage product offered by Better and Coinbase allows the lender to rehypothecate borrower collateral. This gives Better the right to reuse the pledged Bitcoin in secondary financial agreements, introducing additional counterparty risk.

Privacy (2)

• Trezor's shipping partner, ShipMonk, leaked customer records of approximately 67,000 US customers, bringing the total exposed to 80,000. The leak included names, physical addresses, phone numbers, and email addresses, highlighting shipping data risks.
• Pocket Bitcoin suffered a support system breach that exposed compliance records for 291 EU customers and bank transfer details for over 5,000 users. This breach directly links real-world identity data to public Bitcoin transaction histories.

Stablecoins (1)

• Two Thai businessmen are suing Tether for freezing $42.4 million in USDT across ten Ethereum addresses. The plaintiffs allege Tether executed the freeze based on an informal verbal request from Homeland Security, months before a warrant was issued.

Regulation (1)

• The US House canceled its late September voting sessions, narrowing the window to pass the Clarity Act before the midterm recess. A critical procedural vote requiring 60 votes to advance the regulatory bill is set for September 15.

BTC Markets (1)

• Jack Mallers reports Bitcoin is trading at $79,130 with a $1.59 trillion market cap, down 37.2 percent from its all-time high of $126,080 set on October 6, 2025.

Middle East (1)

• US Treasury Secretary Scott Bessent claims the Strait of Hormuz will be a worthless waterway in two years due to bypass pipelines. Jack Mallers argues this geopolitical de-risking and reshoring of supply chains is inherently inflationary.

Macro (1)

• Jack Mallers highlights that the 10-year US Treasury yield is near a three-year high at just under 4.8 percent. Yields rose from below 4 percent since the United States began military actions against Iran in February.

Fed (1)

• Jack Mallers argues that Washington cannot cut its largest expenses, which include Health and Human Services, Social Security, and Defense. Consequently, the government will inevitably resort to yield curve control or rate cuts to manage its debt interest.

Protocol (4)

• Blockstream's 2014 white paper proposed sidechains to test features like confidential transactions without modifying Bitcoin. Jack Mallers notes this allows experimental layers to fail safely without jeopardizing Bitcoin's core monetary rules.
• Liquid uses range proofs to ensure transactions do not use negative numbers to print tokens out of thin air. To save computing power, nodes use caching, which remembers previously verified transaction data via unique cache keys.
• A 2026 software update to Liquid created a concatenation error in the caching mechanism. This bug allowed an attacker to bypass the negative number check by submitting an invalid transaction that mapped to an already-approved cache key.
• Satoshi Nakamoto warned in 2010 that secondary implementations of Bitcoin would menace the network. Jack Mallers highlights Satoshi's philosophy that complexity is the enemy of security, which is why Bitcoin's core design remains set in stone.

Open Source (1)

• Jack Mallers asserts that open-source code does not guarantee security, as smaller projects lack the developer attention needed to review code. Mallers notes that even open-source projects like Coldcard and Liquid suffered undetected multi-year vulnerabilities.