Releases, security notices and protocol work from the people who build Bitcoin software.
121 publications
Greg Sanders, Antoine Poinsot, Elias Rohrer, Oleksandr Kurbatov and Nishant Bansal join the Optech hosts for the #429 recap, which starts with Bitcoin Core #36665, #36667 and #36669 before moving to the updated security policy. Multiparty silent payments, a Core Lightning DoS disclosure and Eclair 0.14.6 come later; the transcript is still pending.
Bitcoin Optech
A channel announcement naming the same node at both ends could crash Core Lightning 25.02 through 26.04 on every restart, at a cost to the attacker of only onchain fees; the fix landed in 26.04.1. Newsletter #429 pairs that disclosure with Oleksandr Kurbatov's protocol for multiparty silent payment inputs and Bitcoin Core's faster point releases for easily discoverable bugs.
Bitcoin Optech
Socket exception monitoring now matches between poll() and select() in Bitcoin Core 29.5 (#36665), and paused send peers face an enforced timeout (#36667). Flatfile positions move to 64-bit integers (#36669), nodes assume v2transport for addresses from seeds, and one DNS seed is removed.
Bitcoin Core
A miner could push a Bitcoin Core undo file past 4 GiB, wrapping its 32-bit positions and corrupting data, so nodes shut down if the right reorg follows; Windows and 32-bit systems fail at 2 GiB with no reorg. CVE-2026-117346 is rated Low and would take roughly a month of all network blocks. Versions 32.1, 31.2, 30.4 and 29.5 fix 64-bit systems; 32-bit nodes and FAT32 block storage stay affected.
Bitcoin Core
Windows, macOS and BSD nodes could be crashed by a connected peer sending TCP urgent data, which slipped past paused reads in the select() backend and queued memory without limit (CVE-2026-117350). Linux nodes use poll() and are not affected. Bitcoin Core 32.1, 31.2, 30.4 and 29.5 fix the Medium-severity bug, which an LLM scan under Project Loupe found.
Bitcoin Core
Bitcoin Core 30.4 stops treating BIP 9 bits 5 to 28 as soft fork signals, following BIP 323, so blocks that set them no longer trigger unknown-deployment warnings (#34779). Network changes include a timeout enforced on paused send peers (#36667), and flatfile positions now use 64-bit integers (#36669).
Bitcoin Core
Private broadcast gets a ceiling in Bitcoin Core 31.2: the queue of transactions not yet echoed back from the network stops at 10,000 entries and refuses new submissions when full, leaving callers to clear it with abortprivatebroadcast (#35406). Version bits 5 to 28 no longer count as soft fork signals, per BIP 323.
Bitcoin Core
Private broadcast in Bitcoin Core 32.1 no longer risks exposing the sender's IP address, a leak that could occur when a failed v2 connection retried over v1 directly instead of through Tor. The default -maxconnections rises from 125 to 200, and outgoing transaction relay is rate-limited through a global backlog rather than per peer.
Bitcoin Core
Adam Gibson walks through Lichen, his single-issuer layer 2 with unilateral exits validated by BitVM, on the #428 recap. João Dias and Vincenzo Palazzo are the other guests of Gustavo Flores Echaiz and Brandon Black; descriptor syntax for hash preimages, rbitcoin 0.8.0 and LND v0.21.5-beta.rc1 also come up.
Bitcoin Optech
Lichen, a design from Adam Gibson, lets users of a single-issuer layer 2 redeem bitcoin onchain when the hub refuses or goes offline, with disputes settled through Groth16 proofs and presigned BitVMX transactions. A second item in Newsletter #428 covers João Dias's proposal for a private preimage form of miniscript hash fragments; Ibis Wallet v5.0-beta and rbitcoin 0.8.0 appear among software updates.
Bitcoin Optech
Erick Cestari explains two Eclair memory bugs in the channel-opening handshake on the #427 recap, one caught by Matt Morehouse's fuzzer and the other with an LLM. Adam Gibson then presents LN-GAP, whose example is a chess game played inside a Lightning channel. Bitcoin Core 32.0rc4 and a batch of Eclair fixes come later in the show.
Bitcoin Optech
Eclair v0.14.0 and earlier could be run out of memory during channel opening: one bug leaked about 1 MB per second, and another exhausted 4 GB in about 48 minutes over a single connection with no onchain cost. Both were fixed in v0.14.1. Newsletter #427 sets them beside LN-GAP, Adam Gibson's scheme for multi-round contracts inside Lightning channels, which rests on an honest-majority committee.
Bitcoin Optech
Clara Shikhelman opens the #426 recap with Shielded Bitcoin, a proposal she co-authored to move bitcoin without broadcasting sender, receiver or amounts, and without consensus changes or operators. Elias Rohrer of Spiral then takes the LDK v0.3-rc3 and v0.2.7 releases along with LDK code changes, with Gustavo Flores Echaiz hosting.
Bitcoin Optech
Shielded Bitcoin, proposed by Misha Komarov with Clara Shikhelman and Aleksei Moskvin, is a metaprotocol for private onchain transfers that needs no consensus change, though it requires a one-time setup ceremony and leaves a trace on entry and exit. Anthony Towns drafts a BIP letting peers pick their own one-byte message IDs over BIP324 transport, and Fabian Jahr asks whether tagged hash tags should carry BIP numbers.
Bitcoin Optech
A 64 kB gossip query could inflate to 64 MB in Eclair v0.13.1 and earlier, and a maximum-length init message churned through about 300 MB; Matt Morehouse disclosed both DoS bugs, fixed in v0.14.0. Jakub is gauging interest in syncing BIP329 wallet labels through an untrusted store, while Newsletter #425's consensus section returns to post-quantum output types.
Bitcoin Optech
Ahmet Kurt explains PQLN, post-quantum security for Lightning's offchain surfaces, in the first pre-recorded segment on Optech's show. Jan B, a Bitcoin Core contributor who reviews PRs and works on kernel code, joins Gustavo Flores Echaiz and Mike Schmidt for the live part, where Bitcoin Core 32.0rc2 and its testing guide are on the agenda.
Bitcoin Optech
PQLN, from Ahmet Kurt and collaborators, makes Lightning's gossip, transport, invoices, offers and onion quantum-secure but leaves onchain operations alone, since those would need a consensus change. Bandwidth is the price: a node downloads 10 times and stores 9 times as much data, while ML-DSA signing takes just 0.33 ms. A working rust-lightning implementation can be tested now.
Bitcoin Optech
Adam Gibson walks Optech hosts Mark Erhardt and Mike Schmidt through Babilonia, his coinjoin protocol disguised as covert bets, and points to a 1997 Ron Rivest paper on lottery-style micropayments as an older root of probabilistic payments. Rob Segers then discusses his silent payments light client measurements.
Bitcoin Optech
Babilonia, a proposal from Adam Gibson, dresses coinjoins up as onchain coin flips that look like normal payments from outside, though his paper admits the protocol's efficacy has no clear measure yet. Rob Segers' benchmarks put BlindBit Oracle v2 at about 2.1x the download of a taproot-only filter plus tweak data, in exchange for no false positives. LDK v0.2.6 patches a denial-of-service vulnerability.
Bitcoin Optech
Heavy disk reads and writes during normal operation trace to a bug fixed in Bitcoin Core 29.4: the chainstate database kept rewriting large parts of itself. The fix disables LevelDB seek compaction and compacts the chainstate on a regular basis (#35465).
Bitcoin Core
