Announcements
Please join us for our next Socratic Seminar. A special thank you to our host Primal Burger, for the event space. Please support them by buying their delicious food or a beverage.
If you can't make it to the main event please join us at Lutz Tavern around 9PM here.
Special Thanks | Mentions
- Thank you to everyone who shows up each month!
Rules
Requests
- A guest speaker for October 2026
Schedule
- 6:30pm - 7:00pm: Arrive, socialize, and grab some food.
- 7:00pm - 8:30pm: Developer Topics and Discussion
Bitcoin Dev News
- Entropy Lab
- Bitcoin Core #36176: Avoid a crash when creating a wallet with
-nosettings
- Reported and fixed by Rob1Ham after hitting it on Bitcoin-Qt 31.1 (Apple silicon)
- Settings write threw an uncaught exception when dynamic settings were disabled
- Bitcoin Core #36048: Keep wallet names literal in notification commands
- On non-Windows builds,
-walletnotify substitutes %w with the shell-escaped wallet name
std::regex_replace() treated $' in a wallet name as a special pattern, breaking the escaping- An authenticated RPC user able to create wallets could inject shell commands run as the node's account
- Not reachable over P2P or without RPC auth
- BIP Proposal: rawtr() Output Script Descriptors
rawtr() has been in Bitcoin Core since 24.0 but was never specified in a BIP- BIP 390 already depends on it (allows
musig() inside rawtr(), uses it in test vectors)
- Draft BIP scoped to
rawtr(KEY) only, modeled on BIPs 384 and 385
- Liquid Reserves Drained for 4,000 BTC
- Inflation bug in confidential transaction validation caching
- L-BTC now backed by only ~4.7% real BTC
- What Was Actually Exploited
- 2019: Range proof cache key "simplified", dropping asset + script fields (Bug A)
- 2026-09-01: Bug A "fixed" by adding asset + script to the key, but fields concatenated with no separators or lengths (Bug B)
- Stretch the proof, shrink the script: different outputs produce the same cache key
- Primer txs cached a valid proof; exploit tx reused the key with an invalid proof and a large negative OP_RETURN amount
- 2026-09-06: Bug B exploited, reserves drained, chain split
- Nodes on official releases rejected the block and stalled at height 4050335
- Elements #1593: Fix RPC return errors for PSBT and invalid rangeproofs
- Rangeproof and PSBT failures now return errors instead of hitting asserts
- PAK enforcement on confidential pegout assets
- Pubkey validity check in
tweakfedpegscript
- Liquid Messages OP_RETURN Journal
- OP_RETURN Messenger: The Liquid Saga, Live
- On-chain OP_RETURN conversation between the attacker and Blockstream Security
- Blockstream messages PGP-verified; attacker messages spend from the address holding the stolen coins
- Live L-BTC reserve coverage tracker
- Whitehats Move Coldcard BTC to Trust
- 52.37 BTC Consolidated to a Recovery Trust
- Coins from Wave 2 and Footprints AA, AU, AX moved to a fresh address in block 967,948
- OP_RETURN points owners to a claim process with a crypto recovery trust
- Roughly 2.8% of the Coldcard exploit
LN Dev News
- Core Lightning CVE Patch Release
- Core Lightning Dropping Dual Funded UTXOs
Bitcoin General News
Tech News