Ready to start a new project

1/12🧵 A ~$89M Coldcard hack was, per Coinkite, likely found by AI reading the open-source firmware, while the vendor's own AI audit weeks earlier missed it. So we built OpenSourceCheck: a public, cryptographically-signed registry of AI security audits of Bitcoin open source. It records what was checked, by which model, and what came back, and never claims code is "safe." 3 real audits live, all verifiable offline. How it works 👇

GitHub

GitHub - TheIcarusWings/opensourcecheck: A public registry of signed, human-validated, reproducible LLM security audits for open-source (Bitcoin-first) projects. Born from the 2026 Coldcard hack.

A public registry of signed, human-validated, reproducible LLM security audits for open-source (Bitcoin-first) projects. Born from the 2026 Coldcar...

I wasn't affected. Not because I was smart. By pure chance. That's the only thing separating me from the people who lost everything this week. My mind is with all of them. People who did the right thing, took self-custody seriously, followed the guidance, and got wiped out anyway. This is fucking devastating. Coinkite is probably done, and honestly they should get all the blame for it. Five years of broken entropy is not a small mistake. If they want to pay something back, and nothing pays this back, they should MIT license the whole product and hand it to the community. It doesn't fix what was done. It's just the least they owe us.

Brick by Brick... The Bricks & Minifigs drama is secretly a Bitcoin lesson in a little LEGO hat. 🧱 Speedrun: family consigns a ~$200k collection. Store sells it, money's meant to flow back, franchise changes hands, new owners go "what bricks? 👀" and corporate goes "wasn't us, good luck!" Fair, someone will yell: "Bitcoin can't teleport plastic spaceships back to Oregon!" Correct. Custody of physical stuff is hard and no money fixes that. But this was never a LEGO problem. It was a money-flow problem in a LEGO costume. The seller never touched the payments. Every sale dumped cash into the middleman's pot, and you just had to pray whoever held it felt like sharing. They didn't. 🫠 Here's Bitcoin's flex: payment settles straight to the seller, instantly, with no mythical "we'll distribute it later." Multisig escrow means nobody walks off with the bag, because the bag needs more than one key to open. And when a new owner takes over? The keys to the sats were never theirs, so "the old guy kept your money" stops being a sentence that can exist. You can't always stop them sitting on your bricks. You CAN stop them sitting on your money, and here the money was the whole heist. The plastic was just the alibi. Brick by Brick, Sat by Sat. 🧱⚡

Hashden, the non-custodial marketplace of Bitcoin solo-mining dens Open alpha update. What works today: - Multi-tenant stratum + multi-output coinbase (PPLNS / solo / operator fee / dust). 200 fuzz cases, validated on a real Bitaxe. - Block reward → coinbase pays every member on-chain → Lightning fan-out for sub-dust → a NIP-57 zap receipt per payout. No platform balance, ever. Operators can't quietly skim. - Anonymous by default: no IP logs, npubs hidden unless you opt in per den, payout addresses redacted until a block actually lands. - Don't trust us, verify: a coinbase-verifier CLI you run on your own hardware confirms every job pays YOU before you hash. Every image is cosign-signed + SLSA-attested, prove hashden.app runs the public repo at /verify. Your Nostr key is your identity. No email, no KYC. GPL-3.0, all of it. Find a den, point your Bitaxe, chase blocks together →

Hashden

A directory of Bitcoin solo-mining dens. Nostr for identity, on-chain for payouts, anonymous by default — no IPs, no fingerprints, no platform ba...

Rented a car last week. Paid with Bitcoin, clean, final, no middleman, both sides certain. Then came the identity part. The clerk needed to know three things: I'm old enough, my license is valid, I'm the person who booked. To prove it, I handed over a document showing my name, address, document number, birthday, height, and much more... I basically doxed myself to rent a car. Three predicates, a dozen identifiers. Money got solved. Identity didn't. The pieces to fix it already exist, nobody's bothered to stack them. Zero-knowledge identity is sitting right there. Why isn't it built yet?

Is there any decent BIP about making Bitcoin more private?

⛏️ Hashden A marketplace of Bitcoin solo-mining dens. A den is a self-run mini-pool. Open one with your Nostr key, set a fee, share the link. Miners join by pointing their Bitaxe at it. Find a block → the coinbase pays every member directly, weighted by shares. Non-custodial: the platform never touches your sats. Every payout posts a NIP-57 receipt, so nobody can skim quietly. Anonymous by default. No IP logs, no KYC, your npub stays hidden unless you opt in. Open alpha →

Hashden

A directory of Bitcoin solo-mining dens. Nostr for identity, on-chain for payouts, anonymous by default — no IPs, no fingerprints, no platform ba...

#bitcoin #nostr #bitaxe #mining

Hashden: a marketplace of Bitcoin solo-mining dens. ⚒️ Join a den, point your Bitaxe (or rented hashpower) at it, and if the den hits a block the reward goes straight to miners through the coinbase, no pool wallet, no IOUs, no "we'll settle later." Non-custodial by design. Nostr login, no email/KYC. Sub-dust shares get fanned out over Lightning. Open alpha →

Hashden

A directory of Bitcoin solo-mining dens. Nostr for identity, on-chain for payouts, anonymous by default — no IPs, no fingerprints, no platform ba...

Hashden’s been rock solid so far. The node is really the only thing that could give you trouble, but you can always plug in your own via RPC.

Mining is centralized. We can push back together. Hashden, a directory of Bitcoin solo-mining dens for small communities. Non-custodial. Anonymous by default. Open alpha →

Hashden

A directory of Bitcoin solo-mining dens. Nostr for identity, on-chain for payouts, anonymous by default — no IPs, no fingerprints, no platform ba...

#bitcoin #bitaxe

Nostreon is non-custodial. When someone subscribes to a creator, the payment goes straight from the subscriber's wallet to the creator's wallet. We never touch it. No escrow. No payout delays. No platform wallet sitting on weeks of creator revenue waiting to be paid out. Below $1,000 of monthly revenue, creators keep 100%. Above that, the platform fee is 5%, settled at the moment of the transaction. The only thing between a creator and their income is their own wallet.

Wrote up a concrete walkthrough of what NIP-42 auth looks like against our gated relay. Copy-pasteable code for anyone building or extending a Nostr client to support cross-client subscription reading. View article → Anyone with a NIP-42-aware client and a valid Nostreon subscription can read premium content from any other Nostr client. No Nostreon SDK. #nip42 #nip63 #nostrdev

Shipped the first production NIP-42 + NIP-63 gated relay for subscription-gated content on Nostr. Validated cross-client in Damus, Yakihonne, and Coracle. Subscribers can read premium content from any NIP-42-aware Nostr client that speaks the spec. Dedicated indexer-partner integration path: Phase 1 is a service-account NIP-42 credential that lets a partner's indexer pull premium events, gated at the client UI layer by NIP-63 kind 1163 memberships. ~10 lines on the partner side. DM'd @miljan today to propose Primal as the first integration. Would love ecosystem eyes on the NIP-11 access_control proposal while it's in review:

GitHub

nip-11: add access_control field for gated relay discovery by TheIcarusWings · Pull Request #2318 · nostr-protocol/nips

Adds an optional access_control field to NIP-11 so relays that gate access (subscriptions, token holdings, group membership, allowlists, etc.) can ...

Live reference: curl -H "Accept: application/nostr+json" https://premium.nostreon.com/ cc @miljan @fiatjaf @Vitor Pamplona @hodlbod

I’ve been using Nostr for a while now, and the one thing that kept bugging me was this: creators here have the best audience on the internet. People who actually care about sovereignty, who run their own nodes and relays, who show up because they believe in this. And there’s no real way to support them beyond zaps. Zaps are great for tips. They’re terrible for recurring income and building a dedicated audience. So I’ve been working on something. It’s called Nostreon. Paid subscriptions for Nostr, built on Lightning, with subscription state living on-protocol as NIP-63 and NIP-88 events. Creators set up tiers, publish free and premium content, and get paid the moment someone subscribes. But the part I’m most excited about is the infrastructure side. I built a public API so that Primal, Damus, Amethyst, any client, can offer subscriptions natively inside their app. The client earns a revenue share. The creator gets paid instantly. The subscriber never has to leave the app they already use. I didn’t want to build another Patreon. I wanted to build the Stripe that makes subscriptions work everywhere on Nostr. Not launched yet. Still heads down. Here’s what’s already working: • Multiple subscription tiers with Lightning payments and instant settlement • Support for posts, long-form articles, video, audio, photo galleries, and live streams • Gated content relay so only paying subscribers can access premium stuff • Public API for any Nostr client to offer subscriptions natively with revenue share • Hosted checkout (like Stripe Checkout) so clients don’t have to build payment UI • Subscription state on-protocol via NIP-63/NIP-88, readable by any client • Creator dashboard with earnings, subscriber analytics, and tier management What I want to know is: what else would you need? Creators, what would make you actually move your paid content here? Client devs, what’s missing from that API list that would make integration a no-brainer?

Ross should now build the biggest ecommerce website(Amazon like) based on bitcoin payment system! I would buy there!

Is there any slack like client for nostr?