code sculptor and ordinal theorist

UTC-3
This is the equivalent of a bouncer checking your ID for holograms, special UV ink and correct microprints but then failing to check that the picture on the ID is actually you...
Critical vulnerability in the bip322 Rust crate: BIP-322 proofs for P2WPKH and P2SH-P2WPKH addresses could be forged with any attacker key. Full address-ownership bypass. Fixed in 0.0.11, affected versions yanked. If you verify Bitcoin address ownership, please upgrade now.
2
24
2,304
Critical vulnerability in the bip322 Rust crate: BIP-322 proofs for P2WPKH and P2SH-P2WPKH addresses could be forged with any attacker key. Full address-ownership bypass. Fixed in 0.0.11, affected versions yanked. If you verify Bitcoin address ownership, please upgrade now.
3
70
262
122,610
Timeline (continued): - 08/02/26 @ 13:35: Maintainer acknowledges disclosure receipt - 08/02/26 @ 14:51: 0.0.11 released, 0.0.6-0.0.10 yanked from crates.io - 08/02/26: Private outreach to anyone using bip322 crate - 08/14/26: Public disclosure
1
10
1,378
raph retweeted
Not to add further chaos to the timeline, but the degenerate runes gambling feature that I added in 0.28.0 can cause users to lose runes, so I just released 0.29.0 which reverts it. It was not a bug, per se, but a different kind of oversight 🧵 github.com/ordinals/ord/rele…
37
30
222
63,521
raph retweeted
You can now contribute to the Open Ordinals Institute @ordinalsorg when buying on @ord_net ⚡ A simple way to support the protocol while you collect.
38
52
277
9,197
raph retweeted
Inscriptions now have social media image previews and it only took three and a half years 😅 ordinals.com/inscription/a46…
96
101
539
34,885
My attempt to protect users from scam apps on the @AppStore has gotten my Apple Developer account flagged for termination - ironically, for "dishonest activity". Unless it's reversed by June 30, all new installs of Sparrow Wallet will fail, and development on macOS will end. The context: since 2023, more than a dozen fake "Sparrow" apps have appeared on the App Store, as recently as April this year. Users have contacted me after losing their savings, in some cases their life savings, to these impersonators. I'm the developer of the real Sparrow Wallet, a desktop app, and I hold the registered US trademarks for the name and logo. I have publicly warned @Apple and the community about these fake apps from early 2024, but they keep appearing. The app @Apple flagged was a placeholder that was never published. Its only purpose was to warn users that Sparrow is desktop-only and that other "Sparrow" apps aren't mine. This approach may have been misguided, but there was nothing dishonest about it. I'm confident this is an automated misclassification that Apple would reverse on review - but I may be terminated before a human ever looks at my appeal. The cost would fall on @Apple's own users: blocked installs and no updates for a tool people rely on, which opens the door for more fakes. If you value Sparrow, a repost would help. @AppleSupport
Didn’t work. App (with the screens below) was rejected for having “placeholder content” and only “demonstrating a concept”.
170
1,035
1,904
512,181
raph retweeted
New ord release, with a fix for a crash bug which can be triggered by a malformed child inscription! Huge thanks to @SagaKrypto, who found and reported the issue! github.com/ordinals/ord/rele…
16
26
187
10,416
Casey @rodarmor's reaction to @kanzure's disrespectful closing of the Ordinals BIP
9
16
76
5,317