@wizardsardine CEO πͺπ. β¬π¨ Working on @lianabitcoin, self custody done right. Organized Breaking Bitcoin, BoB and @btcazores technical bitcoin confs.
Azores, Portugal
- Tweets 18,080
- Following 805
- Followers 11,879
- Likes 26,420
Pinned Tweet
Liana users:
65%
i don't use Liana
7%
Liana Connect
11%
connected to Core
17%
connected to Electrum
202 votes β’ Final results
3
4
10
7,971
I'm genuinely wondering if the human ingenuity we got until 2025 just halted, and will only be repurposed and malleated through AI, without anyone truly ever spending years working on thinks through truly novel approaches from now on.
Design, games, architecture, music...
2
2
29
1,922
I have never been to @tabconf . Yet.
I'll attend it this year π«‘
1
3
19
1,252
Kevin Loaec π§ββοΈπ retweeted
We're adding multi-language support to@lianabitcoin , expected in the next release. Which language would you like us to prioritize?
1
3
7
618
We are here, we are ready.
foundation.xyz/app-showcase/β¦
2
3
17
825
Kevin Loaec π§ββοΈπ retweeted
We can finally share this! Weβre bringing Bitcoin Red Team together with @LuganoPlanB on 22 October, right here in our home city.
Super excited & looking forward to getting Bitcoin developers and security researchers in the same room to talk through how AI can help with security reviews, what still needs expert judgment, and what we can learn from recent incidents.
Joining us are @Rob1Ham , @danielabrozzoni, @KLoaec, @MrKukks and @giacomozucco , alongside Federico N. and @suhanprabhu from Prem AI.
If you build, maintain or review Bitcoin software, weβd love to have you there. Bring your questions and experiences.
22 October Β· 15:30β18:30 CEST
@pow_space, Lugano Β· Sessions in English
Request an invitation through the post below. Space is limited, and the hosts will review requests and confirm places.
What scares Bitcoin security experts right now? Not FUD actual threats they lose sleep over.
Listen to the experts on the front line @KLoaec, @mrkukks, @Rob1Ham, @danielabrozzoni, @giacomozucco, @suhanprabhu and others together on Oct 22, 15:30 β 18:30 at @pow_space.
What threat keeps you up?
Powered by @PremAI_io
Learn more β planbweek.com/events/red-teaβ¦
2
8
19
1,681
We might be interested to build our own firmware, if funding were to follow.
COLDCARD is yours to verify, modify, and run. π¨βπ»
Learn how to change the open-source firmware, test it in the simulator, build a development-key DFU for Mk4/Mk5 or Q, and install it on a dedicated device.
blog.coinkite.com/build-run-β¦
21
15
124
20,968
So if I understand correctly, today is when @Moto reveals what will be the next @GrapheneOS officially supported device.
Looking forward to that!
2
4
64
3,675
Kevin Loaec π§ββοΈπ retweeted
Liana users:
65%
i don't use Liana
7%
Liana Connect
11%
connected to Core
17%
connected to Electrum
202 votes β’ Final results
3
4
10
7,971
ah, that's why Opus was being retarded this morning. Every single time they make the "old one" dumber instead of the new one better.
Introducing Claude Opus 5.5, the first model in our new Claude 5.5 family.
It performs at the level of Claude Fable 5.1 for most tasks, and costs 40% less to run than Opus 5.
5
3
34
3,667
Liana users:
65%
i don't use Liana
7%
Liana Connect
11%
connected to Core
17%
connected to Electrum
202 votes β’ Final results
3
4
10
7,971
Kevin Loaec π§ββοΈπ retweeted
BIP138: Compact Encryption Scheme for Non-seed Wallet Data
was merged to the BIPs repository.
github.com/bitcoin/bips/pullβ¦
5
10
87
10,123
Kevin Loaec π§ββοΈπ retweeted
Coruna / DarkSword is being used in the wild.
Attackers socially engineer a Safari click, then walk the full chain: WebKit/JSC memory corruption β PAC bypass β sandbox escape β kernel/root. From there they pull Keychain + wallet data and drain seeds / private keys.
In plaintext, you visit a website and lose your crypto.
If your seed lives on an iPhone, treat this as a wake-up.
Get a hardware wallet. (and update iOS).
Urgent security advisory for iOS users!
Install the latest iOS update immediately. Security researchers report that financially motivated attackers are now using a complete, in-the-wild exploit chain that can quietly steal cryptocurrency private keys and mnemonic seed phrases from iPhones.
The reported attack begins when a target is socially engineered into opening a malicious page in Safari. That page is said to abuse a memory-corruption flaw in WebKit / JavaScriptCore to gain arbitrary read/write access from JavaScript, then bypass Pointer Authentication Codes (PAC) to run native code, break out of the WebContent sandbox, and escalate to kernel/root privileges.
With that access, attackers can pull data from the device Keychain and from local crypto wallet apps.
The claimed impact range is iOS 13 through iOS 26.5; that range has not been independently confirmed in full. Until more is known, treat any unpatched device as potentially exposed and update as soon as a newer build is available. Also avoid untrusted links in Safari, especially if you keep wallet keys or seed phrases on the phone.
23
31
243
40,692
There is no coldcard white hat. People who got their money stolen won't get it back. Even if it's in a trust now.
βοΈCOLDCARD WHITE HAT MOVES FUNDS TO TRUST π³οΈ
52.37 BTC comprised of coins from Wave 2, Footprints AA, AU, AX consolidated into a fresh address with an OP_RETURN "claim:cryptorecoverytrust dot com" in block 967,948
these white hatted funds represent 2.8% of the coldcard exploit
6
3
45
7,451
what
We implemented 1024-bit RSA signature forgery in nearly SNFS time!
Temporary access to an HSM allows an attacker to forge arbitrary signatures (without factoring).
Join work with Laura (1st author!), Adam, Nadia, and Emmanuel
github.com/ucsd-hacc/NSNFSSSβ¦
2
6
2,965