Bitcoin Optech's avatar
Bitcoin Optech
_@bitcoinops.org
npub1hkuk...432p
We provide weekly newsletters, workshops, case studies, and research for the #Bitcoin community.
Bitcoin Optech newsletter #333 is here: - describes a vulnerability that allowed stealing from old versions of various LN implementations - announces a deanonymization vulnerability affecting Wasabi and related software - summarizes a post and discussion about LN channel depletion - links to a poll for opinions about selected covenant proposals - describes two types of incentive-based pseudo-covenants - references summaries of the periodic in-person Bitcoin Core developer meeting - recaps the "Track and use all potential peers for orphan resolution" PR Review Meeting - summarizes changes to services/client software - summarizes popular Q&A from Stack Exchange - Optech Newsletter #333 Recap on Riverside David Harding announced to Delving Bitcoin a vulnerability he had responsibly disclosed earlier in the year. Old versions of Eclair, LDK, and LND with default settings allowed the party who opened a channel to steal up to 98% of channel value... A developer of GingerWallet disclosed a method a coinjoin coordinator could use to prevent users from gaining any privacy during a coinjoin... René Pickhardt posted to Delving Bitcoin and participated, along with Christian Decker, in an Optech Deep Dive about his research into the mathematical foundations of payment channel networks... /dev/fd0 posted to the Bitcoin-Dev mailing list a link to a public poll of developer opinions about selected covenant proposals... Jeremy Rubin posted to the Bitcoin-Dev mailing list a link to a paper he authored about oracle-assisted covenants. The model involves two oracles: a covenant oracle and an integrity oracle... Many Bitcoin Core developers met in person in October, and several notes from the meeting have now been published... 'Track and use all potential peers for orphan resolution' is a PR by glozow that improves the reliability of orphan resolution by letting the node request missing ancestors from all peers instead of just the one that announced the orphan... Changes to services and client software: - Java-based HWI released - Saving Satoshi Bitcoin development education game announced - Neovim Bitcoin Script plugin - Proton Wallet adds RBF Selected Q&A from Bitcoin Stack Exchange: - How long does Bitcoin Core store forked chains? - What is the point of solo mining pools? - Is there a point to using P2TR over P2WSH if I only want to use the script path? Bitcoin Optech will host an audio recap discussion of this newsletter with special guests Dave Harding and /dev/fd0 on Riverside.fm Tuesday at 15:30 UTC. Join us to discuss or ask questions!
Bitcoin Optech newsletter #332 is here: - announces the disclosure of a transaction censorship vulnerability - summarizes discussion about the consensus cleanup soft fork proposal - Optech Newsletter #332 Recap on Riverside Antoine Riard posted to the Bitcoin-Dev mailing list about a method for preventing a node from broadcasting a transaction belonging to a connected wallet... Antoine Poinsot posted to the existing Delving Bitcoin thread about the consensus cleanup soft fork proposal. In addition to the already proposed fix for the classic time warp vulnerability, he proposed also including a fix for the recently discovered Zawy-Murch time warp... Bitcoin Optech will host an audio recap discussion of this newsletter with special guest Antoine Poinsot on Riverside.fm Tuesday at 15:30 UTC. Join us to discuss or ask questions!
Bitcoin Optech newsletter #331 is here: - summarizes several recent discussions about a Lisp dialect for Bitcoin scripting - adds a Basic Bitcoin Lisp Language topic - summarizes popular Q&A from Stack Exchange - Optech Newsletter #331 Recap on Riverside Anthony Towns made several posts about a continuation of his work on creating a Lisp dialect for Bitcoin that could be added to Bitcoin in a soft fork... Basic Bitcoin Lisp language (bll) is a proposed scripting language that could be added to Bitcoin in a soft fork... Selected Q&A from Bitcoin Stack Exchange: - How does ColliderScript improve Bitcoin? - Why do standardness rules limit tx weight? - Is the scriptSig spending a P2A output expected to be empty? - What happens to the unused P2As? - Why doesn’t Bitcoin’s PoW algorithm use a chain of hashes? - Clarification on false value in Script - What is this micro tx? - Are there any UTXOs that cant be spent? - Why wasnt BIP34 implemented in the coinbase tx’s locktime or nSequence? Bitcoin Optech will host an audio recap discussion of this newsletter with special guest AJ Towns on Riverside.fm Tuesday at 20:30 UTC. Join us to discuss or ask questions!
Bitcoin Optech newsletter #330 is here: - summarizes a proposed change to the LN spec to allow pluggable channel factories - links to a report and a new website for examining transactions on the default signet that use proposed soft forks - describes an update to the LNHANCE multi-part soft fork proposal - discusses a paper about covenants based on grinding rather than consensus changes - summarizes changes to services/client software - #330 Recap on Twitter Spaces ZmnSCPxj posted to Delving Bitcoin a proposal to make a small set of changes to the BOLT specification to allow existing LN software to manage LN-Penalty payment channels within a channel factory using a software plugin... Anthony Towns posted to Delving Bitcoin a summary of activity on the default signet related to proposed soft forks available through Bitcoin Inquisition... Moonsettler posted to Delving Bitcoin and also the Bitcoin-Dev mailing list a proposal for a new opcode, OP_PAIRCOMMIT, to be added to the LNHANCE soft fork proposal... Ethan Heilman posted to the Bitcoin-Dev mailing list the summary of a paper he coauthored with Victor Kolobov, Avihu Levy, and Andrew Poelstra. The paper describes how covenants can be created easily without consensus changes... Changes to services and client software: - Spark layer two protocol announced - Unify wallet announced - bitcoinutils.dev launches - Great Restored Script Interpreter available Bitcoin Optech will host an audio recap discussion of this newsletter with special guests Vojtěch Strnad, Moonsettler, Brandon Black, Ethan Heilman, and Dusty Daemon on Twitter Spaces Tuesday at 15:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1OyKAZQdWWnGb
Bitcoin Optech newsletter #329 is here: - summarizes a new offchain payment resolution protocol - links to papers about potential IP-layer tracking and censorship of LN payments - BTCPay Server security fixes - adds an LN-Penalty topic - adds a Timeout trees topic - Optech Newsletter #329 Recap on Twitter Spaces John Law posted to Delving Bitcoin the description of a micropayment protocol that requires both participants to contribute funds to a bond that can be effectively destroyed at any time by either participant... Charmaine Ndolo posted to Delving Bitcoin summaries of two recent papers about reducing the privacy of LN payments and potentially censoring them... BTCPay Server 2.0.3 and 1.13.7 are maintenance releases that include security critical fixes for users of certain plugins and features... LN-Penalty is a state protocol that penalizes a party who publishes a past state by allowing their funds to be seized by their counterparty... Timeout trees are a type of trustless contract protocol that produces a tree of offchain transactions that only remain safe against counterparty theft for a limited period of time (i.e., they time out)... Bitcoin Optech will host an audio recap discussion of this newsletter on Twitter Spaces Tuesday at 15:30 UTC. Join us to discuss or ask questions! https://x.com/i/spaces/1lDxLlkMpnvxm
Bitcoin Optech newsletter #328 is here: - describes a vulnerability affecting old versions of Bitcoin Core - recaps the "Ephemeral Dust" PR Review Meeting - Optech Newsletter #328 Recap on Twitter Spaces Antoine Poinsot announced to the Bitcoin-Dev mailing list the final vulnerability disclosure predating Bitcoin Core’s new disclosure policy... Ephemeral Dust is a PR by instagibbs that makes transactions with ephemeral dust standard, improving the usability of both keyed as well as unkeyed (P2A) anchors... Bitcoin Optech will host an audio recap discussion of this newsletter on Twitter Spaces Tuesday at 15:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1YqGovmrydQKv
Bitcoin Optech newsletter #327 is here: - describes a proposal for timeout tree channel factories - summarizes a draft BIP for proofs of discrete log equivalence to be used when generating silent payments - adds a discrete log equivalency (DLEQ) topic - adds a duplex micropayment channels topic - Optech Newsletter #327 Recap on Twitter Spaces ZmnSCPxj posted to Delving Bitcoin and discussed with Optech contributors a proposal for a new multi-layer channel factory design named SuperScalar... Andrew Toth posted to the Bitcoin-Dev mailing list a draft BIP and a link to an implementation for generating and verifying proofs of discrete log equality (DLEQ) for the elliptic curve used by Bitcoin (secp256k1)... Discrete log equivalency (DLEQ) or proofs of discrete log equivalency (PODLE) is the ability to prove two points on an elliptic curve were both derived from the same private value (such as a private key)... Duplex micropayment channels are bi-directional micropayment channels that use deincrementing relative time locks to ensure the latest state is the first that can be confirmed. Bitcoin Optech will host an audio recap discussion of this newsletter with special guest Andrew Toth on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://x.com/i/spaces/1lDxLlkZXaMxm
Bitcoin Optech newsletter #326 is here: - summarizes updates to a proposal for new LN channel announcements - describes a BIP for sending silent payments with PSBTs - summarizes popular Q&A from Stack Exchange - Optech Newsletter #326 Recap on Twitter Spaces Elle Mouton posted to Delving Bitcoin a description of several proposed changes to the new channel announcements protocol that will support advertising simple taproot channels... Andrew Toth posted to the Bitcoin-Dev mailing list a draft BIP for allowing wallets and signing devices to use PSBTs to coordinate the creation of a silent payment... Selected Q&A from Bitcoin Stack Exchange: - Duplicate blocks in blk*.dat files? - How was the structure of pay-to-anchor decided? - What are the benefits of BIP324 decoy packets? - Why is the opcode limit 201? - Will my node relay a tx below my minimum tx relay fee? - Why doesn’t the Bitcoin Core wallet support BIP69? - How can I enable testnet4 in Bitcoin Core 28.0? - What are the risks of broadcasting a transaction that reveals a scriptPubKey using a low-entropy key? Bitcoin Optech will host an audio recap discussion of this newsletter with special guests Elle Mouton and Andrew Toth on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://x.com/i/spaces/1ZkKzRERMDvKv
Bitcoin Optech newsletter #325 is here: - looks at summaries of some of the topics discussed at a recent LN developer meeting - summarizes changes to services/client software - Optech Newsletter #325 Recap on Twitter Spaces Olaoluwa Osuntokun posted to Delving Bitcoin a summary of his notes (with additional commentary) from a recent LN developer conference... Changes to services and client software: - Coinbase adds taproot send support - Dana wallet released - Kyoto BIP157/158 light client released - DLC Markets launches on mainnet - Ashigaru wallet announced - DATUM protocol announced - Bark Ark implementation announced - Phoenix v2.4.0 and phoenixd v0.4.0 released Bitcoin Optech will host an audio recap discussion of this newsletter with special guest Steven Roose on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://x.com/i/spaces/1lPKqORVVgZJb
Bitcoin Optech newsletter #324 is here: - newsletter announces three vulnerabilities affecting old versions of the Bitcoin Core full node - announces a separate vulnerability affecting old versions of the btcd full node - links to a contributed Optech guide describing how to use multiple new P2P network features added in Bitcoin Core 28.0 - recaps the "Add getorphantxs" PR Review Meeting - Optech Newsletter #324 Recap on Twitter Spaces Niklas Gögge posted to the Bitcoin-Dev mailing list links to the announcements of three vulnerabilities affecting versions of Bitcoin Core that have been past their end of life since at least April 2024... Antoine Poinsot and Niklas Gögge disclosed a consensus failure vulnerability affecting the btcd full node... Gregory Sanders has written a guide for Optech aimed at developers of wallets and other software that uses Bitcoin Core to create or broadcast transactions. The guide walks through the use of several of the features and describes how the features can be useful for multiple protocols, including simple payments and RBF fee bumping, LN commitments and HTLCs, Ark, and LN splicing... Add getorphantxs is a PR by tdb3 that adds a new experimental RPC method named getorphantxs... Bitcoin Optech will host an audio recap discussion of this newsletter on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1OwxWNrEWZZJQ
Bitcoin Core 28.0 includes a number of new P2P and mempool policy features that may be useful for businesses and users. In this blog post, Gregory Sanders summarizes the feature set and how they can be used individually or together. The guide explains and provides command line samples for: - One Parent One Child (1P1C) Relay - TRUC Transactions - 1P1C-topology Package RBF - Pay To Anchor (P2A) as well as describing common wallet patterns that can benefit: simple payments, coinjoins, LN, Ark, LN splicing
Bitcoin Optech newsletter #323 is here: - announces a planned security disclosure - Bitcoin Core 28.0 - Optech Newsletter #323 Recap on Twitter Spaces Antoine Poinsot posted to Delving Bitcoin to announce the planned disclosure on October 10th of a consensus bug affecting the btcd full node... Bitcoin Core 28.0 is the latest major release of the predominant full node implementation. It’s the first release to include support for testnet4, opportunistic one-parent-one-child (1p1c) package relay, default relay of opt-in topologically restricted until confirmation (TRUC) transactions, default relay of pay-to-anchor transactions, limited package RBF relay, default full-RBF, and default parameters for assumeUTXO... Bitcoin Optech will host an audio recap discussion of this newsletter with special guest Bastien Teinturier on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1YpKklenRXyGj
Bitcoin Optech newsletter #322 is here: - announces a fixed vulnerability affecting older versions of Bitcoin Core - provides an update on hybrid channel jamming mitigation - summarizes a paper about more efficient and private client-side validation - announces a proposal to update the BIP process - summarizes popular Q&A from Stack Exchange - Optech Newsletter #322 Recap on Twitter Spaces Antoine Poinsot posted to the Bitcoin-Dev mailing list a link to the announcement of a vulnerability affecting versions of Bitcoin Core that have been past their end of life since at least December 2023... Carla Kirk-Cohen posted to Delving Bitcoin details about various attempts to defeat an implementation of the mitigation for channel jamming attacks originally proposed by Clara Shikhelman and Sergei Tikhomirov... Jonas Nick, Liam Eagen, and Robin Linus posted to the Bitcoin-Dev mailing list a paper about a new client-side validation protocol. Shielded CSV uses zero-knowledge proofs to allow verification with a fixed amount of resources and without revealing previous transfers... Mark “Murch” Erhardt posted to the Bitcoin-Dev mailing list to announce the availability of a pull request for a draft BIP that describes an updated process for the BIP repository... Selected Q&A from Bitcoin Stack Exchange: - What specific verifications are done on a fresh Bitcoin TX and in what order? - Why is my bitcoin directory larger than my pruning data limit setting? - What do I need to have set up to have getblocktemplate work? - Can a silent payment address body be brute forced? - Why does a tx fail testmempoolaccept BIP125 replacement but is accepted by submitpackage? - How does the ban score algorithm calculate a ban score for a peer? Bitcoin Optech will host an audio recap discussion of this newsletter with special guests Jon Atack, Gloria Zhao, and Jonas Nick on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1mrGmMbAAdBGy
Bitcoin Optech newsletter #321 is here: - links to a proof-of-concept implementation for proving in zero-knowledge that an output is part of the UTXO set - describes one new and two previous proposals for allowing offline LN payments - summarizes research about DNS seeding for non-IP network addresses - summarizes changes to services/client software - Optech Newsletter #321 Recap on Twitter Spaces Johan Halseth posted to Delving Bitcoin to announce a proof-of-concept tool that allows someone to prove that they control one of the outputs in the current UTXO set without revealing which output... Andy Schroder posted to Delving Bitcoin to sketch a communication process an LN wallet could use to generate tokens that could be provided to an internet-connected wallet in order to pay it... Virtu posted to Delving Bitcoin a survey of the availability of seed nodes on anonymity networks and discussed methods for allowing new nodes that exclusively use those networks to learn about peers through DNS seeders... Changes to services and client software: - Strike adds BOLT12 support - BitBox02 adds silent payment support - The Mempool Open Source Project v3.0.0 released - ZEUS v0.9.0 released - Live Wallet adds consolidation support - Bisq adds Lightning support Bitcoin Optech will host an audio recap discussion of this newsletter on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1RDGlywwRREJL
Bitcoin Optech newsletter #319 is here: - summarizes a proposal for allowing Stratum v2 pool miners to receive compensation for the transaction fees contained in the block templates they turn into shares - announces a research fund investigating the proposed OP_CAT opcode - describes a discussion about mitigating merkle tree vulnerabilities with or without a soft fork - Bitcoin Core 28.0rc1 - Core Lightning 24.08 - Optech Newsletter #319 Recap on Twitter Spaces Filippo Merli posted to Delving Bitcoin about an extension to Stratum v2 that will allow tracking the amount of fees included in shares when the shares contain transactions selected by an individual miner... Victor Kolobov posted to the Bitcoin-Dev mailing list to announce a $1 million fund for research into a proposed soft fork to add an OP_CAT opcode... Eric Voskuil posted to the Delving Bitcoin discussion thread about the consensus cleanup soft fork proposal a request for an update given recent discussion on the Bitcoin-Dev mailing list. In particular, he saw “no justification for the proposed invalidation of 64 byte transactions”... Bitcoin Core 28.0rc1 is a release candidate for the next major version of the predominant full node implementation. A testing guide is available... Core Lightning 24.08 is a major release of this popular LN node implementation containing new features and bug fixes. Bitcoin Optech will host an audio recap discussion of this newsletter with special guest Filippo Merli on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1rmxPoBjMRVJN
Bitcoin Optech newsletter #318 is here: - announces a new mailing list to discuss Bitcoin mining - summarizes popular Q&A from Stack Exchange - Bitcoin Core 28.0rc1 release candidate - Optech Newsletter #318 Recap on Twitter Spaces Jay Beddict announced a new mailing list to “discuss emerging Bitcoin mining technology updates as well as the impacts of Bitcoin-related software or protocol changes on mining.” Selected Q&A from Bitcoin Stack Exchange: - Can a BIP152 compact block be sent before validation by a node that doesn’t know all transactions? - Did Segwit (BIP141) eliminate all txid malleability issues listed in BIP62? - Why are the checkpoints still in the codebase? - Bulletproof++ as generic ZKP ala SNARKs? - How can OP_CAT be used to implement covenants? - Why do some bech32 bitcoin addresses contain a large number of ‘q’s? - How does a 0-conf signature bond work? Bitcoin Core 28.0rc1 is a release candidate for the next major version of the predominant full node implementation. A testing guide is being prepared... Bitcoin Optech will host an audio recap discussion of this newsletter on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1ZkKzRQBYgvKv
Bitcoin Optech newsletter #317 is here: - summarizes discussion about an anti-exfiltration protocol that only requires one round trip of communication between a wallet and a signing device - summarizes changes to services/client software - Optech Newsletter #317 Recap on Twitter Spaces Moonsettler posted to Delving Bitcoin to describe an anti-exfiltration protocol. The protocol uses the sign-to-contract protocol to allow a software wallet to contribute entropy to the nonce selected by a hardware signing device in a way that allows the software wallet to later verify the entropy was used... Changes to services and client software: - Proton Wallet announced - CPUNet testnet announced - Lightning.Pub launches - Taproot Assets v0.4.0-alpha released - Stratum v2 benchmarking tool released - STARK verification PoC on signet - SeedSigner 0.8.0 released - Floresta 0.6.0 released Bitcoin Optech will host an audio recap discussion of this newsletter on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1LyGBgmeNjkJN
Bitcoin Optech newsletter #316 is here: - describes a new time warp that’s particularly consequential for the new testnet4 - summarizes proposed mitigations for onion message denial-of-service concerns - seeks feedback on a proposal to allow LN payers to identify themselves - announces a major change to Bitcoin Core’s build system that could affect developers and integrators - adds Inbound forwarding fees, Merkle tree vulnerabilities topics - Optech #316 Recap Mark “Murch” Erhardt posted to Delving Bitcoin to describe an attack discovered by developer Zawy for exploiting testnet4’s new difficulty adjustment algorithm... Gijs van Dam posted to Delving Bitcoin to discuss a recent paper by researchers Amin Bashiri and Majid Khabbazian about onion messages... Bastien Teinturier posted to Delving Bitcoin to propose methods for allowing spenders to optionally include extra data with their payments that would allow receivers to identify those payments as having come from a known contact... Cory Fields posted to the Bitcoin-Dev mailing list to announce Bitcoin Core’s impending switch from the GNU autotools build system to the CMake build system... Inbound forwarding fees are fees charged by an LN node for accepting a payment for forwarding. The original LN protocol only specifies charging forwarding fees when a node relays the payment to its next hop... Merkle tree vulnerabilities are a class of problems in the design of the merkle tree used by the Bitcoin consensus protocol... Bitcoin Optech will host an audio recap discussion of this newsletter with special guest Bastien Teinturier on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions! https://twitter.com/i/spaces/1vOGwrmXkNLKB