Reminder: I'll be speaking at OP_NEXT this Thursday on Oblivious Signing and following up with a Coin Based OP_NEXT wrapup at Pubkey - hope to see you all there! (Somehow in the time in between I'll be putting the finishing touches on our SDK, ETA to public launch in Two Weeks ™️)

What if we used Taproot and MuSig2 to make MPC obsolete 👉💖👈

My hope is that we look back on the way we as an industry currently handle signing transactions - single-sig, multisig, hot and cold wallets alike - the same way we look back on HTTP before @Edward Snowden taught us why we all needed to move to HTTPS.

The cat's out of the bag with the newest episode of TFTC - announcing here first on Nostr: Sigbash v2 is live! We've switched to a new approach that I've decided to call Oblivious Signing: thanks to the power of MuSig2, WebAssembly, and zero knowledge proofs, our signer never sees your signing key *or* the transactions you want us to sign. instead, when you register a key, first you commit to a signing policy (anything - input and output amounts, destination addresses, time windows allowed for signing, you name it) - and we'll only sign transactions that match your policy. Policies are as complex as you need and as private as we could possibly make them. Our beta is live on signet now at https://www.sigbash.com!

first thought on waking up: i am not un-bullish. gm

The Mythical LLM Month

designing an SDK right now and it just hit me that the main 'users' will be LLMs.

maybe you can ask Claude to write the code for you but that doesn't mean you can ask Claude to understand the code for you

Currently watching Claude Code churn through my codebase, refactoring and adding docstring comments to it, file-by-file. Absolutely absurd.

I heard you can just do things? So I wrote a book on the political economy - the 'who gets what and why', to use Susan Strange's definition - of Internet protocols, and decided to self-publish it. Find it at

Grand Decentral

Something More Profound: The Political Economy Of Network Protocols

Something More Profound: The Political Economy Of Network Protocols

in HTML and PDF format. Free as in beer, enjoy!

Watched the U.S. presidential debate last week between Trump and Biden. Watching the Iranian presidential debate between Pezeshkian and Jalili now. All the "this is fine" dog in burning house memes ever made aren't enough to convey what I'm feeling.

I just run realized Van Morrison has two songs about the exact same thing - 'Dancing In The Moonlight' and also 'Moondance' - and they're both absolute bangers gm

Putting the finishing touches on a new Sigbash release based on all the feedback I've gotten over the past month. Definitely announcing all the changes here first instead of Xitter. (Maybe I can just screenshot the note and post it there?)

Wrapping this up now. Excellent framing, contrasting Tim May's vision of crypto anarchy with Julian Assange's idea of 'crypto justice', exploring what 'privacy for the weak, transparency for the powerful' means in practice.

gm, Chainalysis is astrology for spooks

"Nearly all threshold ECDSA based TSS implementations are vulnerable to key extraction attacks despite having undergone multiple security audits." TL,DR: Most MPC implementations appear to be vulnerable. Bitcoin users unaffected.

No Bullshit Bitcoin

Verichains Discovers Critical Key Extraction Attacks in TSS for MPC Wallets and Digital Asset Custody: Native Bitcoin MultiSig Not Affected

Verichains announced that it discovered critical Key Extraction Attacks in many popular Threshold Signature Scheme (TSS) implementations, a Multi-P...