This was the week the security warnings became confirmed damage.
BTCPay confirmed an exploited bug cost real funds. Cuba's non-custodial lnp2pBot shut down indefinitely under sustained attack. A volunteer red team logged 7,958 findings across 501 projects.
And the payment layer kept shipping anyway: Wallet of Satoshi moved to self-custody, Blink added non-custodial BTCPay receiving, and everyday sats purchases widened across Africa.
The lesson holds — self-host, patch fast, hold your own keys.


Weekly Brief 2026/33
BTCPay confirmed an exploited vulnerability cost real funds, Cuba's lnp2pBot shut down under sustained attack, and a volunteer red team logged 7,95...

















