🚨 CLN people:

X (formerly Twitter)

Murch (@murchandamus) on X

Looks like a severe Core Lightning (CLN) issue was discovered. It sounds like you should consider restarting your CLN node with `--offline` and be ...

Gm 🌞

Update your BTCPay Server instances again, as soon as you can:

X (formerly Twitter)

Uncle Rockstar Developer (@r0ckstardev) on X

The @BtcpayServer team has been working non stop based on the recent reports. If you're running an instance, please update.

(no nostr post)

Anyone seen the @Boltz - Non-Custodial Bitcoin Exchange statement on X? It isn't here on nostr for whatever reason. Smells a little but fishy, but who knows.

Anyone know stores selling stuff for Bitcoin with a BIP110 node backing their payment backend? I have some BIP110 LukeCoin to spend 🤑 (yes, aware of replay implications)

I don't think they understand how this works 😆

aaand the knotzis disappeared

p a i n

Zero announcement / advisory notice / blog post or any indication of the vulnerability on BTCPay Server's website other than the post on X. It has been 4 hours. If this is how they operate, I advise you all to just pull the plug and shut your BTCPay instances down.

Would be nice to understand the scope of the BTCPay vuln and if there are any logs to check to confirm if it was exploited or not prior to an upgrade.

Friendly reminder that even in 2013, RNG bugs had a response with much better user UX, often indicating that a new seed is required, and guiding users to migrate funds.

bitcoin.org

Android Security Vulnerability

Yes, with a hardware wallet this is slightly more complicated, but if something like Bitkey can handle seamless seed refreshes and fund migration (ex: the enhanced privacy upgrade) then others can. Every hardware signer should have some form of official companion app that can make these flows possible for the average non-technical user.

Any European resellers still have Coldcard Q stock? Looks like it was pulled from those I can find. Need to purchase one for some experiments.

Spun-up an Ark delegate:

Slothy.win