Good Morning, Bitcoin - Thursday, December 12th, 2024

'Good Morning, Bitcoin' is your daily news roundup delivering key stories, project updates, new releases, guides, research, and all things related to Bitcoin and freedom tech.

Good Morning, Bitcoin - Thursday, December 12th, 2024

What's new

  • Fran Finney joins Nostr, earns over 1 million sats. Fran Finney, the wife of Bitcoin legend Hal Finney—the first Bitcoin transaction recipient—has joined Nostr and earned over 1 million sats.
  • Vulnerability disclosure: Irrevocable fees on the Lightning network. Eclair v0.9.0 and older, LDK v0.0.122 and older, and LND v0.18.2-beta and older with default settings (and Core Lightning with non-default settings) would accept a series of operations that could allow a miner to steal up to 98% of a channel’s funds. Core Lightning remains vulnerable to the worst-case scenario if the --ignore-fee-limits configuration setting is enabled.
  • Vulnerability disclosure: Transaction-relay jamming attack against off-chain protocols. Antoine Riard posted to the Bitcoin Dev mailing list to disclose a new transaction-relay jamming attack against off-chain protocols by exploiting the transaction selection, announcement, and propagation mechanisms of base-layer full nodes.
    • The vulnerability report recommends mitigation strategies such as randomized transaction rebroadcast and increased transaction-relay throughput. However, it underscores the need for a more comprehensive and robust solution integrated into Bitcoin's base protocol to effectively address the vulnerability.
"Mitigations at the base-layer directly in the transaction-relay stack were not seriously considered during the embargo period. In my personal opinion, a robust mitigation against transaction-relay throughput attacks could be more efficient at the base-layer, rather than at the lightning / contracting protocols levels," said the developer.
  • FinCEN appeals the Corporate Transparency Act ruling. The agency has filed a notice of appeal with the United States Court of Appeals for the Fifth Circuit regarding a ruling on the Corporate Transparency Act. It also stated it will comply with the order from the U.S. District Court for the Eastern District of Texas as long as it remains in effect, adding that reporting companies may continue to voluntarily submit beneficial ownership information reports.
  • Digital Currency Group is splitting Foundry's mining business into two entities. Digital Currency Group (DCG) is splitting Foundry’s mining operations into two separate entities, reports Blockspace Media. The newly formed Fortitude Mining will take over Foundry’s former self-mining operations and physical infrastructure, while Foundry will continue to manage its pool operations and other Bitcoin mining service lines.
  • Breez partners with Klever. The companies will work to integrate Lightning payments into the wallet using the Breez SDK. Klever is a self-custody multicoin wallet that reportedly has over 100,000 monthly active users.
  • Strike announces USDT deposits and withdrawals. The Lightning payments app now supports USDT deposits and withdrawals via the TRON network for eligible customers in Argentina, Brazil, El Salvador, India, Kenya, Mexico, Nigeria, Togo, and Vietnam.
  • Africa Bitcoin Conference 2024 recordings. The event took place on December 9-11 in Nairobi, Kenya. Full schedule for the talks is available here.

Use the tools

  • BDK v1.0.0-beta.6 is the final test release before a final bdk_wallet 1.0.0 version.
  • Ark v0.4.1 is a patch release that adds support for absolute locktimes encoded in the VTXO script with CLTV.
  • Fountain v1.1.10 introduces payment UX improvements and faster boosts.
  • Citrine v0.5.8, a local Nostr relay for Android devices, fixes connection count issues, moves the database to a new screen, and implements performance improvements when deleting events.
  • Amber v3.0.2, a Nostr event signer for Android, delivers onboarding improvements along with UI enhancements for offline usage.
  • Noscrypt v0.1.6, a Nostr-specific cryptography library written in C, includes updated dependencies, extensive automated testing and memory leak checks, and some requirements and build changes.
  • Servus v0.1.4, a minimalist social media server, has been released with a theme switcher and improved Nostr filters.
  • Saving Satoshi v1.10.3 is a hotfix release that addresses a Python indentation error, an issue with a missing translation key, and a regression on some chapter 7 buttons.

Other stuff

  • Athena Alpha wrote a simple guide to Bitcoin Minsicript.
  • Mullvad VPN published its 2024 security audit of the app.