Your signal. Your price.
Ezra Regreira reports that Blockstream refused to pay a 10% ransom to hackers who exploited the Liquid Network federation wallet. The hackers initially withdrew 4,000 Bitcoin but returned 3,400 after Blockstream patched the affected bridge nodes.
Ashigaru Desktop deliberately excludes spend functionality to keep the attack surface small. Jordan advises users to handle spending on mobile via Ashigaru Mobile or alongside Sparrow Wallet.
New wallets created on Ashigaru Desktop require a passphrase. To prevent weak password creation, the wallet features a guided dice-rolling tool utilizing the Electronic Frontier Foundation wordlist.
Users without a personal Electrum server can discover alternative trusted nodes. The app connects to the Dojo Bay reference instance over Tor to locate available Electrum servers.
Whirlpool mixes on Ashigaru Desktop operate in 0.025 BTC and 0.25 BTC pools. Change that falls below these minimums goes to the bad bank, which cannot be mixed.
The Mix To feature allows users to route coins automatically to a hardware wallet, such as Passport Prime, once they reach a specified mix count. This process uses watch-only output descriptors.
Ashigaru Desktop supports concurrent mixing for multiple wallets. Users can lock the application interface with a password while the background mixing processes continue to run securely.
Blockstream Liquid was hacked for 4,000 BTC after an attacker exploited an inflation vulnerability. The exploit resulted from a flawed code patch released on September 1, 2024, which attempted to fix an older 2018 range proof vulnerability.
Adam Back announced the Liquid network peg will remain one-for-one. Blockstream and its partners are plugging the remaining 600 BTC deficit after the hacker returned 3,400 BTC through encrypted OP_RETURN negotiations, keeping 15 percent as an unsolicited bounty.
Trezor and BitBox warned users of phishing emails sent via compromised third-party newsletter services. The fraudulent security alerts falsely claimed devices suffered from an entropy vulnerability.
Nacho Pauls points out that tax and regulatory requirements in Canada and Finland mandate corporate miners to use FPPS pools. This constraint prevents many institutional mining operations from adopting Ocean's non-custodial payout structure.
Coin Corner launched an insured multisig Bitcoin custody vault with partner Anchor Watch. David Bennett argues that wrapping custody in complex multisig structures risks isolating Bitcoin from its original purpose as accessible peer-to-peer cash.
Jack Dorsey's payment company Block filed an application with the Office of the Comptroller of the Currency to launch Builders Bank and Trust. The proposed national trust bank will offer Bitcoin and stablecoin custody without accepting commercial deposits.
To manage cash flow volatility, Chris Drzyzga designs a three-bucket treasury strategy. Short-term operational cash sits in fiat, intermediate reserves fund upcoming capital expenditures, and strategic capital held longer than eighteen months goes into cold-storage Bitcoin.
Mexican prosecutors charged two suspects with a quadruple homicide targeting a rock musician's family during an attempted cold wallet robbery. David Bennett warns Bitcoin holders to practice strict operational security, avoid branded merchandise, and keep their digital wealth entirely private.
The 40-year era of falling interest rates has ended, returning global markets to a sovereign debt crisis reminiscent of the 1940s. Lyn Alden advises investors to pivot away from paper assets toward scarce, self-custodied alternatives like gold, precious metals, and Bitcoin.
An attacker drained nearly 4,000 Bitcoin from the Liquid Network after exploiting a software bug that accepted fake liquid Bitcoin as valid. Side swap accepted the coins, and the federation processed a peg-out of roughly 3,996 Bitcoin to the attacker.
The Liquid federation's 11-of-15 multi-sig custody structure failed to stop the exploit because the underlying software validated the fake coins first. Since all signers ran the same faulty Elements code, they reached the same incorrect validation conclusion.
The attacker communicated with Blockstream via on-chain OP_RETURN and PGP-encrypted messages, claiming they would return the funds once all nodes are patched. Max remains skeptical of a return, while q and a expects the attacker to comply.
Foundation released KeyOS 1.4 for Passport Prime, enabling app sideloading verified by developer certificates. The update allows custom security profiles, with plans for a whitelisted and vetted Foundation App Store to aid less technical users.
Chilean exchange OrionX halted withdrawals after a forensic audit revealed $7 million in customer crypto was missing. Founding partners are accused of conducting unauthorized speculative trading with user funds without operating licenses between 2018 and 2021.
CoinDesk reports that the Bitcoin-backed mortgage product offered by Better and Coinbase allows the lender to rehypothecate borrower collateral. This gives Better the right to reuse the pledged Bitcoin in secondary financial agreements, introducing additional counterparty risk.
Trezor's shipping partner, ShipMonk, leaked customer records of approximately 67,000 US customers, bringing the total exposed to 80,000. The leak included names, physical addresses, phone numbers, and email addresses, highlighting shipping data risks.
The hacker responsible for the Wave 3 Coldcard exploit moved roughly 20.5 Bitcoin into Ethereum via Thorchain swaps. This constitutes slightly over 1 percent of the total 1,789 Bitcoin stolen during the exploit.
Cake Wallet 6.4.4 added native Trezor support for cold storage, while Nunchuk added BitBox02 Bluetooth connectivity. Additionally, RoboSats Alpha 0.87 added three new coordinators and encrypted image uploads through Noster Blossom servers.
Alleged white-hat hackers moved 4,000 Bitcoin out of Blockstream’s Liquid sidechain, representing roughly 95% of the total pegged-in funds. Marty Bent and John Arnold emphasize that while the situation remains active, it has not yet resulted in a permanent loss of funds.
Zack Voell warns that governments could attempt digital asset confiscation in the future. He draws a historical parallel to President Franklin Roosevelt outlawing private gold ownership in 1933.
Zack Voell explains that Bitcoin shifts systemic trust to the individual, making the user their own single point of failure. This responsibility requires a sober, voluntary mental adjustment.
Stacker News integrated Lightspark's Spark Wallet to lower the onboarding barrier for non-technical users. Keyon defends the integration against custodial critics, noting that training wheels are essential to scale Bitcoin adoption beyond the developer community.
Max Tannahill explains that the federal seizure of Samurai Wallet's centralized servers two and a half years ago instantly shut down Dojo, Whirlpool, and OXT. This left many non-node-running users unable to view balances or transact.