avatar
katakoto

Following0Followers (X)2.86KPosts139Likes2.03K
avatar

This attack involved the theft of Bitcoin and Litecoin from the BTCPay Server hot wallet. If you were using version 2.4.1 or earlier, it implies a compromise of the entire machine—meaning you must replace not only the wallet keys but also SSH and hosting credentials.

avatar

The disclosure was on the 24th, and this individual suffered a loss of 0.85 BTC using the same method on the 28th. Even experienced Bitcoin users with over 10 years of experience, such as those who use Tails + Electrum, can lose funds if they don’t carefully monitor X... Sharing information among regular users is certainly not pointless... There’s still value even for social media addicts. https://t.co/3u0n5nzgAp

avatar

What if this feature, if you travel too much thanks to someone else’s generosity (Bitcoin), causes “Satocchi” to evolve into “Satobitch”? When I asked AI about it, I was scolded for a serious compliance violation. (I sneaked it in subtly, as a hidden character.) https://t.co/nyFxcwm11M

avatar

The LLM scan also found a bug in Bitcoin Core, but it’s only severe enough to potentially crash low-spec nodes. Since you’re on an Umbrel node, let’s update right away.

avatar

The "StealMyBitcoin" challenge, which involved deliberately exposing a vulnerable PHP server and attempting to steal the Bitcoin private key stored on it, has been breached. Approximately 19 hours and 28 minutes after the challenge began, an unauthenticated remote code execution was successfully carried out using what is known as "PHP2Shell," resulting in the theft of Bitcoin worth $2,000.

avatar

Cloudflare has also been affected by the eMudhra private key "4" issue, so users of Cloudflared should update immediately. Core Lightning has also issued a notice indicating a minor impact. Since users have no way of knowing which TLS implementation their apps use, this is a critical moment for wallets and exchange applications.

avatar

⚠️ For Electrum Users A real attack has occurred where malicious servers suppress transactions and display forged transactions in the history with altered recipient addresses. Increasing the fee on these forged transactions results in funds being sent to the attacker. ・ Update immediately to version 4.8.3 ・ Always verify the full recipient address when signing transactions If you’re connected to your own server, you are unaffected—but even users with hardware wallet signatures should remain vigilant going forward.

avatar

It is said that the 2009 version of bitcoin.exe by Satoshi has been reproduced byte-for-byte (by reverse-engineering the build environment using Opus 5.5). It was discovered that the code was compiled directly from the Windows XP command prompt, and the exact build time (late Saturday night, around 23:00 UTC) has also been identified—evoking a sense of romance in the vivid image of Satoshi’s late-night work.

avatar

Jack Mallers has even said, “Hardware wallets aren’t mandatory—you can also use Bitcoin Core on an offline laptop.” Back to basics. But in this context, there are no beginners left. Will self-custody end as a practice reserved for a rare generation who can directly handle UTXOs, or will it remain as a right to exit accessible to everyone? That is the question now at stake.