Code, math and physics are my passion ∑ Working as a Bitcoin security researcher
in your mind
- Tweets 722
- Following 611
- Followers 358
- Likes 2,994
E r i c k λ retweeted
I wrote a blog post on the recent exploits in the Bitcoin ecosystem, how Bitcoin Core is holding up, and how I think the community can get ahead of the models:
dergoegge.de/blog/somethings…
4
44
153
60,594
E r i c k λ retweeted
Vinteum Grantee Spotlight: @Erik17192799
He spent the past year maturing @getfloresta into a secure, reliable, and reusable Bitcoin node implementation, while advancing Swift Sync, compact filters, and mobile performance.
More in Vinteum’s Report: vinteum.org/4
1
17
39
766
E r i c k λ retweeted
Vinteum Grantee Spotlight: @plebhash
From Bitcoin Core IPC integration to Job Declaration and the Stratum V2 Working Group, Plebhash has been working on the infrastructure needed to bring @StratumV2 into production.
More from our fourth year: vinteum.org/4
15
37
797
E r i c k λ retweeted
Discussed:
Bitcoin mining w/@avg_gary
Vulnerability discovery w/Erick Cestari (@iamflops)
Quantum topics w/@conduition_io
Covenants w/Greg Sanders (@theinstagibbs)
Average_gary (@avg_gary), Erick Cestari (@iamflops), Conduition (@conduition_io), and Greg Sanders (@theinstagibbs) joined Optech to discuss Newsletter #421:
News
● Using silent payments for miner payouts in coinbase transaction (2:19)
● Responsible disclosure of a denial-of-service vulnerability in CLN (27:42)
Changing consensus
● Continued discussion of PQC output types (54:03)
● DropKick commit/reveal PQC rescue (1:14:08)
● SHRINCS draft BIP (1:35:48)
● BIP448 and CSFS/CTV demos and applications (37:55)
Releases and release candidates
● Core Lightning 26.06.7 (1:51:35)
● LND v0.21.3-beta (1:55:32)
● LND v0.20.4-beta (1:55:37)
Notable code and documentation changes
● Bitcoin Core #36111 (1:58:21)
● Bitcoin Core #36032 (2:01:17)
● Core Lightning #9435 (2:04:52)
● Eclair #3368 (2:08:10)
● Eclair #3366 (2:10:54)
● LND #11090 (2:14:55)
● LND #11140 (2:20:33)
● HWI #792 (2:23:55)
● BDK #2262 (2:25:48)
1
4
19
1,034
E r i c k λ retweeted
Core Lightning 26.06.7 is out and recommended for every node runner.
It fixes vulnerabilities reported over the past three weeks, during a sharp rise in AI-generated reports across open source Bitcoin. Details stay under embargo for two weeks, then all published.
github.com/ElementsProject/l…
17
110
275
145,143
E r i c k λ retweeted
Vinteum’s fourth year was about becoming a more durable organization.
Supporting established contributors. Helping emerging developers move toward sustained open-source careers. Strengthening the systems around that work.
The Year Four Report is out.
vinteum.org/blog/vinteum-yea…
1
45
102
253,089
I've written my first public vulnerability disclosure, detailing a DoS vulnerability I found in Core Lightning.
An attacker can crash a node simply by opening a connection and flooding it with ping messages.
Blog post: erickcestari.dev/blog/ping-f…
Delving: delvingbitcoin.org/t/disclos…
4
16
40
1,565
E r i c k λ retweeted
Eclair v0.14.2 is out: github.com/ACINQ/eclair/rele… 🚀⚡️
If you've been following AI scanning results recently, you already know that this is a good time to update your node 😉
3
34
94
15,039
E r i c k λ retweeted
Looks like a severe Core Lightning (CLN) issue was discovered.
It sounds like you should consider restarting your CLN node with `--offline` and be on the lookout for the point release coming in the next few days. (Messages from CLN discord via stacker.news/items/1555439).
14
84
216
42,200
E r i c k λ retweeted
More than a year after our first Bitcoin Dev Launchpad cohort, the paths are clearer.
Alumni are now working across Bitcoin open source through independent grants, full-time engineering roles, and long-term contributions.
Here’s where BDL1 took them ↓
vinteum.org/blog/bitcoin-dev…
2
18
42
2,424
E r i c k λ retweeted
I traced the Bitcoin Core multiprocess binaries (bitcoin-node and bitcoin-wallet) and wrote 3 posts on how it works under the hood.
viniciuscestari.dev/posts/in…
Turns out I wrote 3 posts to explain one line of C++, because of everything it hides.
13
22
894
E r i c k λ retweeted
New Floresta roadmap 🌳
What we shipped in Q2, what we’re hardening in Q3, and why the focus is shifting from adding capabilities to making Floresta easier to trust, diagnose, and maintain.
getfloresta.org/blog/roadmap…
4
27
76
18,252
E r i c k λ retweeted
4 years supporting Bitcoin development, research and education.
A lot has been built. A lot more is still ahead.
Tick tock. Next block. 🟩
1
23
57
4,792
E r i c k λ retweeted
Sábado tem Rust SP aqui na Casa21! 🦀
Vamos trocar ideia sobre editor hexadecimal, verificação formal e geração de SDKs em Rust com a galera do Rust-SP abrindo as portas da casa pra comunidade.
Bora! 👇
luma.com/41oiyhtk
8
15
460
77125a4a40efeeb13f6d351ab8c548196b5bbce551214e19531b2ca81d09450dd3405e0c8bc9832128b59c272491a275cb007c983a6e29334e4a3a3b2006fe80
sha512sum
e81926a39d017e07f68ab75fc15eaec33a5a39b6c45e23b26012f6c27170e83bbac1fcbd0f9261afaa4e03497c1e2e12843ac198c8c9fbdd06d8ed6e8af068ca
sha512sum
2
5
223
E r i c k λ retweeted
COLDCARD Mk3 Security Advisory
If you generated a seed on a Mk3 after firmware 4.0.1, your funds may be at risk.
Mk4, Q and Mk5 are not affected based on our early analysis.
Read the advisory and migrate carefully:
blog.coinkite.com/coldcard-m…
542
1,179
2,532
4,714,930
E r i c k λ retweeted
1/ We’re introducing Vinteum’s new fellowship cycle.
Four months ago, 12 fellows and 2 grantees began working full-time across Bitcoin Core, wallets, mining, privacy, cryptography, network observability, fuzzing, and protocol research.
🧵
blog.vinteum.org/introducing…
9
41
85
8,020