I am excited to finally be able to announce it. 💥 My Bitcoin Market Structure Dashboard is now live! 📈

I built a tracker that notifies me anytime there is a wrench attack reported in the media. For France alone, there is one every. single. week. People are going to get killed over this.

Happy Release Day to myself! 📙 Digital Real Estate is finally out, and now also available on Amazon for international shipping. What a journey, and at times a struggle, it has been to bring this book to life. After more than three years of researching, writing, rewriting, and refining, it feels somewhat surreal to finally see it released. Thank you to everyone who supported me along the way. I’m looking forward to bringing the book and its thesis out into the world, and to seeing where the coming cycle takes these ideas. This is only the beginning. ⚡

This is awesome! Our @bitcoinpolicy interns out in the wild and proudly representing our little REU program. Great job, Connor (@CJABTC)! We need more of this. Support our little program so we can send more interns to conferences.

5× MONEY WARS (DAS ORIGINAL 😉) ZU GEWINNEN! 👉🏻 Markiert einfach jemanden, der Money Wars unbedingt gebrauchen könnte. Unter allen Kommentaren verlosen wir 5 Exemplare. ⏰ Teilnahmeschluss: 23.08. um 21:21 Uhr Danach entscheidet der Zufall. 🍀 Danke @Hodlcat21 für dieses wundervolle Postdesign 🥰

What a mess. Unfortunately this Trezor address leak will directly lead to an increase in targeted social engineering and potentially wrench attacks. Here are my recommendations for what to do if you were in this breach (or just want to protect yourself against the result of these breaches in the future). Social engineering protection Scammers will use the combination of having your personal information to both target you (phone, email) and convince you that they are legit (using your name and potentially home address as proof that they know you and are here to help). They will contact you via phone or email with targeted lies meant to scare you into talking to them and taking the actions they want you to, in the name of protecting your bitcoin. Ignore any communication from "Trezor" that doesn't come from their official domains (the @Trezor handle, trezor.io are the main ones I know of). You should also ignore communication from "Google" or "Apple" pretending like your email is compromised. They trick you into giving them your email credentials, and then once inside your inbox they can do all manner of things to trick you without Google's typical filters stopping them. Generally a company's support team will never call you on the phone without you contacting them. If they reach out proactively and are trying to get you to take any action to "remain safe" - refuse. Social engineers steal much more money on a regular basis than physical attackers. Most people worry about physical attack more because it sounds scarier, but the bigger risk of actual funds loss is social engineering. Get your suspicion antennae up. Phishing Phishing has a lot of overlap with social engineering. The main difference in my mind is that phishers put in less effort than social engineers. Social engineers may use phishing tools to help them. Phishers are just putting their nets out and trying to get you to make a mistake. Be very suspicious of emails directing you to go to Trezor's website or download a new Trezor app. Triple check the URL for Trezor or any hardware wallet website that you visit. Even if you Google Trezor, there are fake Trezor phishing apps running Google ads that will tell you to type in your seed phrase and then steal your money. Be very careful when downloading or using new wallet apps that you are getting the right one. Wrench attacks The one everyone worries about the most, even though it's the least common. Unfortunately since this breach includes physical addresses, it's possible we will see some wrench attack attempts come from it. Unless you are going to move, the best you can do is try to deter attackers and make sure that if it happens, they can't steal all your money. Distribute your keys and use a multisig to ensure that you don't have enough keys to spend bitcoin at your house. Then consider keeping a small-ish amount of BTC in a single sig wallet that you are willing to give up to make someone go away. We don't recommend the type of duress wallet that uses the same device/software as your main wallet, but when you type in a different PIN it brings up the fake wallet. It's too hard to remember the duress PIN when someone is beating you up, and too easy to give in when they ask you for more after you pay them from the duress wallet. You need to make it so you truly can't send them all your money. Casa recently built Guardian Mode to help protect against social engineering and wrench attacks. It requires the Casa key to sign for all transactions you send. We do a video verification call to make sure you are not being tricked or under duress before signing with our key. Available to Premium+ Casa members. You can also check out an old post we did about physical home security, which unfortunately we have to reshare every year or two: blog.casa.io/a-home-defense-… Very sorry to all the people who were caught up in this. Rough few weeks for bitcoin security. Reach out to us if you need assistance on any of these points.

🚨 Unpopuläre Meinung: Die Sparkasse wird in den nächsten Jahren mehr Menschen zu Bitcoin bringen als die meisten Bitcoin-Influencer. Warum? Weil Millionen Menschen ihrer Bank mehr vertrauen als jedem Experten auf X.

Denn das ist alles nur geklaut (eo eo)... Wenn ihr das Originalspiel sucht und nicht die Kopie, dann schaut doch lieber bei @Satoshiskidzz vorbei.

Lieber @marcfriedrich , ich habe AUCH ein Spiel entwickelt, das dich finanziell schlauer macht. Sogar mit denselben vier Eigenschaften. In derselben Reihenfolge. Und demselben Namen. Meins ist von 2023. Deins hab ich bestellt. Bin gespannt. 😅🤡 Leider blockiert von M.F. ;(

COLDCARD HACK FALLOUT WORSENS AS BITCOIN RED TEAM FINDS CRITICAL BUGS ACROSS ECOSYSTEM @glxyresearch estimates at least 15 different attackers are now exploiting the COLDCARD vulnerability, with new theft clusters still being identified. If your funds were stolen, report it to Galaxy’s @intangiblecoins. Even small victim reports help identify new attackers. One report involving less than 1 BTC led researchers to uncover a previously unknown attack that siphoned 12 BTC from 126 addresses. Meanwhile, Bitcoin developer @callebtc says an emergency Bitcoin Red Team is reviewing wallets, crypto libraries, and infrastructure, finding roughly one critical vulnerability per person per hour. The effort is burning through ~$10,000/day in AI tokens and compute, with funding provided by @OpenSats

Knowledge is a privilege. The countries with the highest Bitcoin adoption are not the wealthy, tech-savvy ones. They are some of the most economically destroyed places on earth. Nigeria — 33 million people with no bank account. Venezuela — about 30% of the population uses it because currency lost 99% of its value. People were converting their salaries to Bitcoin within minutes of getting paid not because of blockchain but because their money was worthless the second they touched it Pakistan — #3 globally. Millions of workers sending money home, Western Union takes 5-10% and Bitcoin takes almost nothing. Ethiopia — One of the poorest countries on the planet. War, inflation, no banking infrastructure… Yemen — A country under active bombardment with a collapsed banking system. People receiving money from family abroad when no bank will operate. Should i continue? Cuba, Argentina… but i think you get the point. Understanding Bitcoin is a privilege but needing Bitcoin is not. The people debating this from their laptops already have a stable currency, a bank account, a credit card, and the luxury of time to learn. The people in these countries didn't have the privilege of not needing to figure it out. So yeah it would be the perfect world for everybody to understand the “lingo”, but that doesnt mean its the reality. There are people out there that NEED bitcoin, its not a choice or an option. So i disagree with everyone needing to understand every single term

Doing the important work. 🎉 🧡

@OpenAI help, need to change my org id for cyber program

Who died and made @Rob1Ham Bitcoin CEO?

I have spent over $10,000 scanning 100+ bitcoin ecosystem related libraries looking for vulnerabilities with Kimi K3 running as quarterback. Myself and a small "Red Team" have found multiple serious vulnerabilities impacting the ecosystem. They vary in scope severity, but this is a call to action. For any critical tier vulnerability that was identified if I was able to immediately demonstrate a POC (proof of concept), I have already responsibly disclosed to the maintainers. HERE IS HOW YOU CAN HELP ME IF YOU ARE NOT TECHNICAL: - please share with me any repository that is on github that I can scan, we want to cast a wide net. It takes a few moments for you to link github accounts, we'll take it from there - if that project does not have a SECURITY.md make an issue asking the dev to list one IF YOU ARE TECHNICAL: - If you are a maintainer or contributor to a project, I may have already scanned your repo, hit me up I'll share the results, if not I'll add your project to the list. - If I can trust you to do larger review to start looking through this stuff to give me more eyes let me know. AI Has forever changed software development. Tomorrow marks 1 week of Kimi k3 being live in open weights. We are going to accelerate.

The commits (code changes) that introduced Coldcard's low entropy bug, changed around 2500 lines of code. These were changes to the most important parts of their codebase, ensuring that the seeds have enough entropy so that.... your coins don't get stolen. The code comments for all these changes? "runs" and "x" Hard to believe, but true.

in 2019, i locked myself out of a hardware wallet by using a silly long passphrase I lost 0.3 BTC and seriously considered giving up on bitcoin i was in my mid 20s, I'd just got out of debt and put my savings into bitcoin please know that things can and will get better

The only Coldcards that are not affected by the fiasco are the ones that are still running the original Trezor code on them

This is worse than any previous Bitcoin exchange hack. It is arguably one of the worst things that could happen. The popular hardware wallet COLDCARD has a faulty random number generator (RNG). Funds are being drained from ordinary users’ hardware wallets as you read this. Users first reported to Block less than 24 hours ago that funds were moving out of their wallets. The exploit was most likely discovered with the help of AI. Block has confirmed that the RNG is broken. You know what that means. There are likely already multiple attackers competing for the affected BTC. Many more will join very soon. Nobody knows how much BTC is affected. Nobody knows how many users are affected. This attack has only just begun, and it will continue until all affected BTC has been drained unless users secure their funds first. Inevitably, many Bitcoiners will not hear about the incident early enough to respond in time. I am truly saddened for everyone affected, especially those who may have just lost their life savings. The worst part is that they did everything right.

My new favorite Bitcoin book.