Bitcoin.Review Podcast with NVK & Guests

Latest Episodes:

BR097 - Cove Wallet, Harbor, ecash, Sparrow, Liana, Bull Bitcoin, JoinMarket, Hardware Wallets, Coinbase Breach, BitLocker Vulnerability, Lightning Phoenixd, LSP Legality + MORE ft. Praveen, Ben, Paul Jun 05, 2025

Show notes

I’m joined by guests Praveen Perera, Future Paul & Ben Carman to go through the list.
Bitcoin
• Software Releases & Project Updates
(00:01:29) Cove Wallet
(00:18:14) Harbor.cash
(00:35:45) Sparrow Wallet
(00:37:05) BDK bdk_chain
(00:37:52) Liana
(00:38:24) Nunchuk Android
(00:39:02) Bull Bitcoin Mobile
(00:40:39) Blue Wallet
(00:41:00) Bitkey App
(00:43:21) FullyNoded
(00:44:03) Zaprite
(00:45:43) BoltzExchange
(00:45:46) Padawan Wallet
(00:46:23) Blockstream Green Android
(00:46:37) Samourai Dojo
(00:46:49) ESP-Miner
(00:46:51) NBXplorer
(00:47:12) Mempal
• Poject Spotlight
(00:47:23) DahLIAS
(00:48:25) Manna Bitcoin
(00:48:34) Darkwire
(00:48:44) Parasite Pool
(00:48:55) Blockpicker
(00:49:10) LOCK Protocol
(00:49:17) Sigbash
(00:49:38) Arkade OS
(00:50:09) Swift Bitcoin
(00:50:36) Pythia
(00:50:45) Arcana Seed Lodge
(00:50:54) BIP47 Message Verifier
(00:51:02) Traxe
(00:51:08) Censorship Resistant
(00:51:21) Bitcoin-4-All
Vulnerability Disclosures
(00:51:38) Coinbase data breach
(00:54:07) Ledger Donjon
(00:54:46) CVE-2023-21563
(00:55:59) Bitpixie
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(00:57:14) SimpleX
(00:57:15) NomadNet
(00:57:16) Sideband
(00:57:17) Mullvad VPN Loader
(00:58:17) Signal Desktop
(00:58:20) Have I Been Pwned
(00:58:22) KYCnot.me
• Poject Spotlight
(01:00:26) Oniux
Lightning + L2+
• Project Spotlight
(01:00:39) Routstr
(01:02:22) Lightning Blinder
(01:02:32) Phoenixd MCP Server
(01:03:27) Amboss Rails
(01:03:48) Sixty Nuts
(01:03:54) BTCNutServer
Boosts
(01:07:13) Shoutout to top boosters AVERAGE_GARY, hgw39, Rod Palmer, Chris, Hech, AVERAGE_GARY, Bob the Cow, Plunger & Homer Hodl.
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-97

BR096 - OP_RETURN Debate, Bitcoin Core Governance, Alternative Implementations, Future Soft Forks, CTV Prospects, Core Vulnerabilities, COLDCARD Hardware Design, Testnet vs Signet + MORE ft. Rob, Odell & Craig May 15, 2025

Show notes

I'm joined by guests Rob Hamilton, Craig Raw & Matt Odell to go through the list.
OP_RETURN Drama
(00:00:52) Odell's thoughts
(00:04:29) Craig's thoughts
(00:05:59) NVK's thoughts
(00:07:47) Rob's thoughts
Bitcoin
• Software Releases & Project Updates
(00:22:10) COLDCARD
(00:22:35) Cove Wallet
(00:24:03) BTCPay Server
(00:24:06) Nunchuk Android
(00:24:12) Bitcoin Keeper
(00:24:14) Bitcoin Safe
(00:24:18) Wasabi Wallet
(00:25:43) RoboSats
(00:25:46) Umbrel
(00:25:57) Zaprite
(00:26:22) Blockstream Satellite
(00:26:45) Stratum Work
(00:26:58) SeedHammer II
(00:27:11) ESP-Miner
• Project Spotlight
(00:27:34) Bitcoin Feature Matrix
(00:27:41) secp256k1lab
(00:28:00) GPGap
(00:28:16) NVK Validation Tweet
(00:28:54) BriberBrother
(00:29:11) Stack Math
Vulnerability Disclosures
(00:30:23) CVE-2024-52919
(00:33:02) CVE-2025-43707
(00:34:46) Hackers breach LockBit
Audience Questions
(00:35:12) What’s the difference between test net and signet? And what are the benefits of each?
(00:37:15) Can you explain, in simple terms, what OP_CHECKCONTRACTVERIFY does?
Nostr
• Software Releases & Project Updates
(00:46:55) Nostr Messaging Layer Security
(00:48:42) Primal
(00:48:43) Damus
Boosts
(01:01:58) Shoutout to top boosters Rod Palmer, AVERAGE_GARY, pink money, user4, Wartime & btconboard
Tech Tip of the Day
(01:03:51) A free online cryptography course repository by Alfred Menezes
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-96

BR095 - OP_NEXT Recap, COLDCARD, Bitcoin Core, Ephemeral Dust, Ephemeral Anchors, Pay-to-Anchor outputs, Taplocks, Electrum, Cove Wallet, Mempool.space, Liana, Bitcoin Privacy Accounting, ESP32.Review + MORE ft. Rob & Rijndael Apr 23, 2025

Show notes

I'm joined by guests Rob Hamilton & Rijndael to go through the list.
Housekeeping
(00:01:09) OP_Next recap
Bitcoin
• Software Releases & Project Updates
(00:15:18) Coldcard
(00:42:53) Bitcoin Core
(00:47:21) BDK
(00:48:12) Coinswap
(00:48:56) Electrum Wallet
(00:52:45) BTCPay Server
(00:53:33) Nunchuk Android
(00:54:04) Liana
(00:54:51) The Mempool Open Source Project
(00:57:01) BoltzExchange boltz-web-app
(00:57:16) RoboSats
(00:57:21) Bitcoin Safe
(00:57:58) Blockstream Green
(00:58:08) Rust Payjoin
(01:01:15) Zaprite
(01:01:48) Krux
(01:02:29) Iris Wallet Desktop
(01:02:46) Bitcoin Core Config Generator
(01:02:52) UTXOracle
• Project Spotlight
(01:04:14) SwiftSync
(01:04:43) PrivatePond
(01:05:00) JoinMarket Fidelity Bond Simulator
(01:05:52) DahLIAS
(01:06:00) Satoshi Escrow
(01:06:12) Taplocks
(01:15:48) bitcoin.softforks.org
(01:15:52) CTV and CSFS Enabled Bitcoin Node
(01:16:03) UTXOscope
(01:16:13) Block Bitcoin Treasury
(01:16:47) Waye
(01:17:08) Sovereign Craft
(Not) a Vulnerability Disclosure
(01:17:17) Pay-to-Anchor outputs now exploited for blockchain spam
Audience Questions
(01:23:46) How do we use open time stamps for transfer of assets using two party integrity between holders?
(01:24:50) Does Cove have testnet4?
(01:25:15) Can you explain like I’m 5 what opcodes are, how they are used on the network, and the level of optionality that applies to them?
(01:26:49) Please discuss this idea: Block-based TOTP for bitcoin wallet passphrase validation.
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:28:48) Tor Browser
(01:28:51) TailsOS
(01:28:53) NymVPN
(01:28:55) MapleAI
Lightning + L2+
• Project Spotlight
(01:29:17) Misty Breez
(01:29:25) Sovereign Tools
(01:29:28) Silk Road on Lightning
(01:29:37) Cashu Token Decoder
• Software Releases & Project Updates
(01:29:48) Zeus
(01:29:49) LDK
(01:31:40) Minibits Wallet
(01:31:42) Hydrus
Nostr
• Project Spotlight
(01:31:44) Atomic Signature Swaps over Nostr
(01:31:51) Lantern
(01:31:59) Promenade
(01:32:09) Noauth-enclaved
(01:32:27) GM Swap
Boosts
(01:33:04) Shoutout to top boosters Rod Palmer Bugle News, pink monkey, btconboard, jespada, AVERAGE_GARY & larryoshi finkamoto
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-95

BR094 - COLDCARD KeyTeleport, Harbor, Ark, Cove Wallet, Zaprite, Bitcoin Core, OMEMO, Knots, Vibe Coding, Trezor Safe 3 Attack Vector, Coinbase Phishing Campaign, Bitcoin Business Software + MORE ft. Rob & Paul Apr 02, 2025

Show notes

I'm joined by guests Rob Hamilton & Future Paul to go through the list.
Housekeeping
(00:01:09) Nostr DVM Playground
(00:26:33) Bitcoin Security Guide
(00:27:23) TestFlight need more beta testers for Cove
(00:33:19) COLDCARD Key Teleport
Urgent Vulnerability Disclosures
(00:29:04) A new email phishing campaign targets Coinbase users
Bitcoin
• Software Releases & Project Updates
(00:44:33) Bitcoin Core
(00:45:52) Fulcrum
(00:46:06) Blue Wallet
(00:46:27) Bitcoin Safe
Interlude
(00:48:54) OMEMO
Bitcoin
• Software Releases & Project Updates (Cont.)
(00:53:28) Bitcoin Knots
(00:53:59) BoltzExchange
(00:54:01) Blockstream Green QT
(00:54:58) FullyNoded
(00:55:11) BullBitcoin Mobile
(00:55:19) RoboSats
(00:55:24) Bisq 2
(00:55:26) Zaprite
(00:56:38) Bitcoin Jungle App
(00:57:22) SRI
(00:57:57) Stratum.work
(00:58:46) Braiins OS
(00:58:50) Coinselect
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:18:13) Sideband
(01:18:23) Mullvad VPN
(01:18:33) NymVPN Noise Generating Mixnet technology
Vulnerability Disclosures
(01:18:42) Ledger Donjon conducts a security analysis of Trezor's hardware wallets
Interlude
(01:21:05) Coinbase is open-sourcing their multiparty computation cryptography library
(01:21:35) Mempool.space now supports address poisoning detection
Lightning + L2+
• Software Releases & Project Updates
(01:22:46) LDK
Boosts
(01:26:33) Shoutout to top boosters pink monkey, Anonymous, jespada, ., btconboard, AVERAGE_GARY & alanStacksSats.
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-94

BR093 - ECDSA Key Extraction, ESP32 Security Concerns, COLDCARD, Cove Wallet, Krux, Nunchuk, Invalid Mining Jobs, Javascript Injection Attack, CTV Back on the table? + MORE ft. Rob & Vivek Mar 13, 2025

Show notes

I'm joined by guests Rob Hamilton & Vivek to go through the list.
Housekeeping
(00:01:18) Unleashed.chat rebrands to dataMachine
Urgent Vulnerability Disclosures
(00:01:52) Private key leak via malformed ECDSA input
(00:09:12) ESP32 Security Concerns
(00:21:32) Coinos revokes NWC connection secrets
Vivek's Corner
(00:22:51) Invalid mining jobs by AntPool & friends during forks
Bitcoin
• Software Releases & Project Updates
(00:37:44) COLDCARD
(00:52:47) Sparrow Wallet
(00:54:33) Lark
(00:55:03) Krux
(00:56:37) Cove Wallet
(00:59:09) Nunchuk Desktop
(01:00:32) BTCPayServer
(01:00:44) Bitcoin Keeper
(01:01:25) BlueWallet
(01:02:08) Bitcoin Safe
(01:03:15) Bitkey App
(01:04:05) libwally-core
(01:06:00) Bisq2
(01:06:04) RoboSats
(01:06:08) Boltz Exchange
(01:06:10) Zaprite
(01:06:13) Blockstream Explorer API
(01:07:22) Mempal
(01:07:29) Iris Wallet desktop
(01:07:31) Utreexo
(01:07:34) ESP Miner
• Project Spotlight
(01:07:38) Reorg Calculator
(01:07:51) Bitcoin Core Config Generator
(01:09:05) Bitcoin Core Snapshots
(01:09:11) Boot Protocol
(01:09:18) multisig-backup
(01:09:58) Wallet backup
(01:10:04) regtest-in-a-pod
Vulnerability Disclosures
(01:11:56) JavaScript injection attack
(01:15:05) Malicious PyPI package 'set-utils' steals Ethereum private keys
(01:16:57) OpenSSH vulnerabilities expose clients and servers to attacks
(01:17:05) USB side-channel attacks
(01:17:37) Cellebrite
(01:17:49) Messengers vulnerabilities
(01:17:56) GitVenom
(01:18:10) Stablecoin payment firm Infini loses $50M in exploit
(01:18:18) Five dollar wrench attacks
Audience Questions
(01:20:00) Comment on a flaw in Bitcoin Core regarding mining pools and their vulnerability against block withholding attacks
Nostr
• Project spotlight
(01:22:32) 24242.io
(01:22:49) nostr.media
(01:22:58) Frostr
(01:23:33) nostr-double-ratchet
(01:23:44) DVMCP
(01:23:53) Samiz
(01:24:00) Welshman
(01:24:09) Norma
(01:24:20) Wallet Relay
(01:24:27) Nostr0
(01:24:35) nAuth Protocol
(01:24:43) Hostr
Boosts
(01:25:36) Shoutout to top boosters @sean, @pink monkey, @Anonymous, @martinbarilik, @Momo Tahmasbi & @jespada.
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-93

BR092 - Nostr Wallet Connect, DeepSeek, AI Coding, Sparrow, Bitcoin Keeper, Maple AI, Calculating Tx Sizes + MORE ft. Future Paul Feb 11, 2025

Show notes

I'm joined by guest Future Paul to go through the list.
Prelude to the list
(00:01:00) Conversation on AI and building with AI
Housekeeping
(00:22:02) New Coldcard Q tutorial by Loïc Morel
(00:22:10) Looking for bitcoin builders to come on the show
(00:23:13) Unleashed.Chat Update
(00:23:19) NWC and Olas/Primal
Urgent Vulnerability Disclosures
(00:37:17) Replacement Cycling Attacks on Bitcoin Miners Block Templates
Bitcoin
• Software Releases & Project Updates
(00:37:34) Sparrow Wallet
(00:41:08) BDK
(00:41:35) Bitcoin Keeper
(00:42:40) Wasabi Wallet
(00:42:43) Blockstream
(00:43:06) Electrs
(00:43:44) Umbrel
(00:44:29) Bisq
(00:44:40) Bisq2
(00:44:51) Zaprite
(00:45:54) Mempal
(00:46:04) Bitcoin Safe
(00:48:50) ESP Miner
• Project Spotlight
(00:49:02) cbip32
(00:49:15) StackStates
(00:49:21) Instamouse bitcoin
(00:50:24) Iris Wallet Desktop
(00:50:43) Explorer.timechainindex
(00:50:54) txTree
(00:50:58) HurriCash
(00:51:29) The Bitcoin Trail
(00:51:41) Bitcoin Laws
(00:51:50) CoinMarketCrap
Vulnerability Disclosures
(00:54:19) Researchers uncover two security flawsin Apple's A and M-series chips
(00:54:33) Kaspersky identifies malware in both Google Play and Apple's App Store
(00:54:40) Exploit targets users on adult sites via Phantom or Trust Wallet browser
(00:56:30) Lazarus Group deploys electron-based malware to steal cryptocurrency data
(00:56:36) Coinbase users lose millions to social engineering scams amid security failures
(00:56:57) Phemex suffers $85 million hack
(00:57:56) NoOnes suffers $8 million exploit due to Solana bridge vulnerability
(00:58:40) Deepseek exposes over a million plaintext chat records
(00:58:16) Five dollars wrench attacks
Audience Questions
(01:00:55) Why, when you sign a transaction on the COLDCARD, does it generate 2 files?
(01:01:50) P1: What's the maximum number of outputs there can be for a bitcoin transaction?
(01:03:43) P2: Is there any way to estimate what the size that a transaction will be depending on it's number of outputs?
(01:04:13) Does using a passphrase offer any protection against a malicious hardware wallet?
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:06:10) Maple AI
(01:06:20) SimpleX
(01:11:00) TailsOS
(01:13:24) Reticulum MeshChat
(01:25:26) Mullvad VPN
Lightning + L2+
• Project spotlight
(01:26:17) Ark Wallet SDK
Boosts
(01:26:35) Shoutout to top boosters Anonymous & AVERAGE_GARY
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-92

BR091 - AnchorWatch Trident Vault, Ledger Co-founder Kidnapped, Blue Wallet, M17, The Case for Multi-vendor Setups, Tails removes HWW Support + MORE ft. Craig & Rob Jan 24, 2025

Show notes

I'm joined by guests Craig Raw and Rob Hamilton to go through the list.
Housekeeping
(00:01:11) Ross Ulbricht receives a pardon from President Trump
(00:03:44) New Marketing Manager opening at Coinkite
(00:03:48) Exchanges added to BitcoinSecurity.guide
(00:04:15) Olas - new nostr app
(00:04:48) Call for guests
Urgent Vulnerability Disclosures
(00:05:58) Ledger co-founder David Balland released after kidnapping
(00:12:28) AxeOS CSRF Vulnerability
Bitcoin
• Software Releases & Project Updates
(00:12:58) AnchorWatch
(00:47:28) Bitcoin Core
(00:48:10) Wasabi Wallet
(00:48:15) BDK
(00:48:27) Nunchuk Android
(00:48:37) Specter Desktop
(00:49:02) Bitcoin Keeper
(00:49:18) Blue Wallet
(00:50:32) BTC Pay Server
(00:55:39) Liana
(00:55:58) Blockstream Green QT
(00:57:58) BoltzExchange
(00:58:00) Live Wallet
(00:58:11) Kyoto
(00:58:19) ESP-Miner
(00:58:21) Bitcoin Safe
(00:58:40) BTC Map
• Project Spotlight
(00:58:44) Bitaxe Touch
(00:58:51) Coinswap
(00:59:20) Scure
(00:59:28) Bitcoin Is Data
(00:59:43) Qoinstr
(00:59:53) TollGate
Vulnerability Disclosures
(01:01:27) 0-click deanonymization attack targets Cloudflare-backed apps
(01:02:00) UEFI secure boot vulnerability allows malicious bootkit deployment
(01:02:23) Google Ad directs users to malicious homebrew clone
(01:03:01) Critical rsync vulnerability on Linux and Unix systems
(01:03:31) January 2025 Patch Tuesday
(01:03:48) Unsecured tunneling protocols expose 4.2 million hosts
(01:03:58) Apple's CUPS printing system vulnerable to spoofing attacks
(01:04:11) Thomas Roth demonstrates code execution on Apple's ACE3 USB-C controller
(01:05:32) Five dollar wrench attacks
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:07:17) Tails
(01:09:52) Module_17
Boosts
(01:12:29) Shoutout to top boosters Anonymous, manbyt, agichoote & btconboard
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-91

BR090 - COLDCARD, BullBitcoin, Bitcoin Safe, miningpool-observer, Zero Fee/P2PK Playgrounds, Tangem Private Keys Exposed, Proton Wallet Vuln, Signatures Explained, "Not Enough UTXOs!" + MORE ft. Rob Jan 03, 2025

Show notes

I'm joined by guest Rob Hamilton to go through the list.
Housekeeping
(00:01:37) Verify-address over NFC using a Coldcard Q and BDK iOS example wallet
Vulnerability Disclosures
(00:18:57) New fake Ledger data breach emails try to steal crypto wallets
(00:20:51) Cryptocurrency hardware wallet Tangem fixes app bug
(00:26:03) Irrevocable fees—stealing from LN using revoked commitment transactions
(00:27:13) Zellic identified a vulnerability in Proton Wallet's preview version
Bitcoin
• Software Releases & Project Updates
(00:28:29) Coldcard Edge
(00:33:00) BLOCKCLOCK
(00:33:36) BDK
(00:33:50) Nunchuk
(00:34:19) BullBitcoin Mobile
(00:36:59) Bitcoin Keeper
(00:37:21) Electrs
(00:39:20) BTCPayServer
(00:39:36) rust-payjoin
(00:39:45) Krux installer
(00:39:55) Frostsnap
(00:40:42) Bitcoin Safe
(00:42:03) Blockstream Satellite
(00:42:28) Raspiblitz
(00:42:39) Ashigaru
(00:45:02) BoltzExchange
(00:45:04) Mempal
(00:45:11) Zaprite
(00:45:13) ESP-Miner
• Project Spotlight
(00:45:18) Satoshi
(00:45:28) Joinstr
(00:45:33) miningpool-observer
(00:46:51) Dojo Bay
(00:46:56) Nightly Bitcoin Core Tests
(00:47:04) Nigiri
(00:47:15) Run Litd
(00:47:28) bllsh
(00:48:05) Btceed
(00:48:12) Zero Fee Playground
(00:49:17) P2PK Playground
(00:50:51) Bitcoin Testnet4 Faucet
(00:50:58) Hashteroids
(00:51:07) Community Hub by My First Bitcoin
Major/Urgent Vulnerability Disclosures
(00:51:39) Oasis discovers a critical flaw in Microsoft's Multi-Factor Authentication system
(00:51:53) Five dollar wrench attacks
(00:52:40) Two men fall victim to phishing scams, in May 2024
(00:55:28) Apache MINA's CVE-2024-52046 flaw
(00:55:37) WPA3 vulnerability
(00:56:07) Hackers compromise 16 Chrome extensions
(00:56:54) Symlink exploit
Audience Questions
(00:57:32) Can you explain how signatures work for spending Bitcoin?
(01:01:04) When people say "there's not enough UTXOs for everyone to have one". How do you quantify that?
(01:06:20) I have a legacy address that starts with 1 wirh some BTC Should I be worried about CC?
(01:07:16) Why should anyone, except maybe millionaires, self custody?
(01:10:20) If BTC must be essentially be held in custody, then why use BTC over gold?
Boosts
(01:13:47) Shoutout to top boosters @Ape Mithrandir, @shadowysuperbadger, @user40113771, @btconboard, @Leurico8 & @Juan.
News & Noteworthy
• Encryption
(01:16:45) NIST proposes to standardize wider variant of AES
• Funding
(01:17:40) OpenSats Ninth Wave of Nostr Grants
(01:17:47) Spiral renews its grant to BTCPayServer
(01:17:49) HFR donates 7 bitcoin to fund Bitcoin development and projects
(01:17:53) Btrust its Q4 2024 Btrust grant recipients
• Mining
(01:18:12) GreenpeaceUSA's campaign to modify Bitcoin's proof-of-work likely ended
• Privacy
(01:18:29) Samourai Wallet pretrial hearing postponed to March 12, 2025
(01:19:59) Russian government directs ISPs to identify users accessing blocked content via VPNs
• Government & Political
(01:20:14) Craig Wright is handed a one-year suspended sentence in the UK
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-90

BR089 - Lark, Security Tradeoffs Masterclass, Bitcoin Quantum Risks, WabiSabi Deanonymization, Core Txn Broadcast, Better Wallet Migration, Scaling Bitcoin, Bullish Sentiments + MORE ft. Craig & Rob Dec 13, 2024

Show notes

I'm joined by guests Craig Raw and Rob Hamilton to go through the list.
Major/Urgent Vulnerability Disclosures
(00:01:18) Transaction-Relay Throughput Overflow Attacks against Off-Chain Protocols
(00:01:53) Vulnerability in WabiSabi coinjoin protocol
Bitcoin
• Software Releases & Project Updates
(00:19:59) Rust Payjoin
(00:32:48) Lark
(01:12:40) Bitcoin Keeper
(01:13:23) Blue Wallet
(01:13:33) Floresta
(01:13:44) Labelbase
(01:14:17) BDK
(01:14:26) FullyNoded
(01:14:43) BTCPay Server
(01:14:52) Zaprite
(01:14:54) Peach
(01:14:55) Boltz boltz-web-app
(01:14:56) ESP-Miner
(01:14:58) Clams remote
(01:14:59) Mempal
(01:15:07) Kyoto
(01:15:20) LifPay
• Project Spotlight
(01:16:09) Specter Shield Lite
(01:16:17) Covenants support
(01:18:08) Kibo
(01:18:20) Saving Satoshi
(01:18:28) Fully Noded Server
(01:18:30) Timestamp
(01:18:49) Satoshee
(01:19:06) hass-miner
(01:19:12) Entropy
(01:19:20) PlebDev Starter Course
Major/Urgent Vulnerability Disclosures
(01:19:29) Droidbot targets banking and crypto apps in Europe
(01:19:36) SD Express Card vulnerability exposes memory access risks
(01:19:47) Malicious Solana web3.js exposes private keys
Audience Questions
(01:24:05) How do NVK and the guests feel about Google's Willow quantum chip
(01:30:01) Can NVK and the guests comment on James OB's recent Tweet
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-89

BR088 - AnchorWatch, Bitkey, Krux, Primal, Proton Wallet, Kagi, Debifi, Namecheap $73M bitcoin revenue + MORE ft. Livera, Rijndael & Ben Nov 27, 2024

Show notes

I'm joined by guests Stephan Livera, Rijndael & Ben Carman to go through the list.
Housekeeping
(00:05:29) Bitcoin Black Friday
(00:06:05) AnchorWatch gains Lloyd's of London Coverholder status
Major/Urgent Vulnerability Disclosures
(00:10:25) Krux releases security fix for AES-CBC encryption flaw
Bitcoin
• Software Releases & Project Updates
(00:16:05) Bitcoin-script-hints
(00:17:14) BDK
(00:17:38) BTCPay Server
(00:19:53) Nunchuk Desktop
(00:20:20) Proton Wallet
(00:23:58) Bitcoin Keeper
(00:24:40) Nix Bitcoin
(00:25:09) Krux
(00:26:49) RoboSats
(00:26:57) Bitkey App
(00:31:07) RewindBitcoin
(00:35:15) Umbrel
(00:35:32) ESP-Miner
(00:35:36) Boltz web-app
• Project Spotlight
(00:35:43) Wallet Dev Kit
(00:35:51) ScriptLab
(00:36:04) Mempal
(00:36:44) Debifi
(00:37:41) Dart-bip85 package
(00:37:45) Descriptors Go
(00:37:47) Tick-tock-tui App
(00:37:56) Awesome-Bitcoin-guide
(00:38:30) BitAxe HAS Dashboard
(00:38:39) Radpool
(00:38:43) Satadelica
Vulnerability Disclosures
(00:39:16) Nearest neighbor attack - Exploiting nearby Wi-Fi for covert access
(00:39:27) New Ghost Tap attack exploits NFC mobile payments
(00:39:38) Graykey partially unlocks iPhones with iOS 18/18.0.1, from iPhone 12 to 16 series
(00:40:38) OverSecured finds seven flaws in Android and Google Pixel, affecting millions of users
(00:41:03) Apple urgently patches vulnerabilities affecting macOS and iOS
(00:41:32) Decades-old security flaws in Ubuntu's Needrestart Package
(00:41:48) Chinese man arrested in Bangkok for operating from a van-based SMS blaster
(00:42:28) Five dollar wrench attack
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(00:42:53) SimpleX
(00:43:06) Signal
• Project Spotlight
(00:43:28) DeFlock
Lightning & L2(+)
• Project Spotlight
(00:43:56) Phoenix Server Lightning Wallet
(00:44:32) Cashu Brrr
(00:45:08) SING4SATS
• Software Releases & Project Updates
(00:45:44) Primal
(00:47:27) LND
(00:48:05) CDK Cashu Development Kit
(00:48:36) Phoenix Wallet
(00:48:47) Zeus
(00:49:56) Nutstash
(00:49:59) Nutshell
(00:50:07) Fountain
(00:50:10) Breez SDK
(00:50:14) Lnp2pBot
(00:50:17) BoardWalk
(00:50:19) Geyser
(00:50:20) Aqua Wallet
(00:50:47) Clams Remote
Nostr
• Project spotlight
(00:50:52) NDK Mobile
(00:50:55) Olas
(00:51:26) Knox
(00:51:32) Nostraut
(00:51:35) Ezdvm
(00:51:40) Futr
(00:51:45) Nosey
(00:51:49) Nos2x for Firefox
• Software Releases & Project Updates
(00:52:00) GifBuddy
Boosts
(00:52:30) Shoutout to top boosters Chris, podconf & btconboard
News & Noteworthy
• Bitcoin
(00:55:05) Chaincode Labs launches the 2025 BOSS program
• Nostr
(00:55:49) Kagi HQ joins Nostr
• Business & Finance
(00:57:06) Block, Inc. unveils Proto
(00:57:11) Casa introduces Casa Enterprise
(00:57:30) Swan Bitcoin sues former law firm for conflict of interest in Tether case
• Tradfi
(00:57:46) Revolut X expands to 30 European countries
(00:57:58) Newmarket Capital, launches Battery Finance
• Funding
(00:58:06) OpenSats announces long term support and educational grants
• Mining
(00:58:12) Russia bans winter digital currency mining in Siberia
• Privacy
(00:58:40) U.S. Congress critiques Tornado Cash and urges for stricter regulations
(00:58:44) Chinese government employees are selling citizen data for profit
(00:59:20) Mullvad VPN cancels remaining PayPal subscriptions and aligns with privacy-focused policy
• Cryptography
(01:00:59) Two mathematicians break an 18-year record with an elliptic curve of rank 29
• Events
(01:01:22) SATS'N'FACTS, Bitcoin Technical Unconference
(01:01:26) Hackalajara, Guadalajara's first Bitcoin-focused hackathon
(01:01:39) Bengaluru BitDevs Summit
Reads:
(01:01:46) Here's a list of our top recently published reads
Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-88

Our TOPPODCAST Picks

Follow Us

Stay Connected

Bitcoin.Review Podcast with NVK & Guests

Related Podcasts

Links

Stay Connected