Nostr notes by Blockstream

Silent Payments let you share one static address while every ...

2026-10-27T10:09:48Z

Silent Payments let you share one static address while every payment lands somewhere new and unlinkable. Making that work for multiparty wallets is a harder problem.

Oleksandr Kurbatov of Blockstream Research takes it on at btcplusplus (nprofile…5flv) Seoul, November 5-6. 🇰🇷

It's been a long time coming. Coin selection is now in the ...

2026-10-26T22:07:05Z

It's been a long time coming. Coin selection is now in the Blockstream app on iOS, Android and desktop.

Choose exactly which coins each payment spends. Keep coins from different sources apart, combine small ones when fees are low, and decide what each transaction reveals.

Update the Blockstream app to get it: https://blockstream.com/app/

Post-quantum signatures have to work for low-power hardware ...

2026-10-26T21:56:32Z

Post-quantum signatures have to work for low-power hardware wallets, miners, Lightning nodes and every node verifying blocks.

Jonas Nick of Blockstream Research at Lugano Plan B on how SHRINCS balances signature size against those needs.

Test your use case in our open-source explorer 👇

Searching for SHRINCS Parameters:
https://blog.blockstream.com/searching-for-shrincs-parameters/

Blockstream is making headlines in Lugano, from our new office to ...

2026-10-26T11:41:14Z

Blockstream is making headlines in Lugano, from our new office to quantum security.

Blockstream Consulting Services gives Swiss banks and asset managers direct access to our experts.

Check out coverage from Corriere del Ticino, finews and Bitcoin Magazine featuring adam3us (nprofile…9k65). 🇨🇭

Happening in two weeks: Electrum connections to blockstream.info ...

2026-10-26T10:37:27Z

Happening in two weeks: Electrum connections to blockstream.info on its legacy ports will stop serving data on

📅 November 9, 2026

Switch to the new endpoints in the image: port 50002 for TLS, 50001 for TCP. REST API users don't need to do anything.

Day two at Lugano Plan B: Jonas Nick of Blockstream Research on ...

2026-10-26T10:36:56Z

Day two at Lugano Plan B: Jonas Nick of Blockstream Research on the race to replace Bitcoin's signatures, Jade Plus from at the booth, NFC cards paying out in LiquidNetwork (nprofile…0cnd), and self-custody workshops at Asilo Ciani.

That's a wrap. Thank you, Lugano. 🇨🇭

At Lugano Plan B, Blockstream Research Director Jonas Nick ...

2026-10-24T20:18:45Z

At Lugano Plan B, Blockstream Research Director Jonas Nick answered the question everyone's asking: will AI break Bitcoin's cryptography?

Spoiler alert: no.

AI is changing how software gets built and secured, and Bitcoin ...

2026-10-24T20:16:56Z

AI is changing how software gets built and secured, and Bitcoin is at the forefront of it.

Peter Bain, CMO of Blockstream, on the opportunity: better development practices with the latest frontier models, ongoing research, and a global community working together to make the network stronger.

https://youtu.be/AHPlHp6kn9E

On the P2P Stage now at Lugano Plan B: Jonas Nick, Director of ...

2026-10-24T20:16:02Z

On the P2P Stage now at Lugano Plan B: Jonas Nick, Director of Blockstream Research, on the race to replace Bitcoin's signatures: quantum, AI and hash functions.

At Asilo Ciani: Noderunners: Bitcoin Core with Leonardo ...

2026-10-24T20:14:52Z

At Asilo Ciani: Noderunners: Bitcoin Core with Leonardo Comandini, a hands-on session on running Bitcoin Core yourself. In Italian, during Lugano Plan B.

Happening now at Asilo Ciani: Leonardo Comandini, Federico Tenga ...

2026-10-24T20:13:41Z

Happening now at Asilo Ciani:
Leonardo Comandini, Federico Tenga and Marco Argentieri
on building native applications on Bitcoin. In Italian, during Lugano Plan B.

At Asilo Ciani: Advanced Multi-vendor Multisig with Valerio ...

2026-10-24T20:12:21Z

At Asilo Ciani: Advanced Multi-vendor Multisig with Valerio Vaccaro, the next step for anyone already holding keys across more than one device. In Italian, during Lugano Plan B.

Every card holds a prize: up to $500 in LBTC. Grab one at our ...

2026-10-24T08:53:13Z

Every card holds a prize: up to $500 in LBTC.

Grab one at our booth at Lugano Plan B, open the Blockstream app, tap your phone to the card and paste your LiquidNetwork (nprofile…0cnd) address. Claim before the event ends today. 🇨🇭

Satoshi launched Bitcoin as open-source software. Jade Plus ...

2026-10-24T08:38:30Z

Satoshi launched Bitcoin as open-source software. Jade Plus carries that forward with open-source hardware and firmware.

Pick up Jade Plus at the Blockstream booth at Lugano Plan B today, while stocks last.

Find us at Villa Ciani overlooking the lake.

Starting NOW! Multi-vendor Multisig with Jade, BitBox and ...

2026-10-24T08:31:17Z

Starting NOW! Multi-vendor Multisig with Jade, BitBox and SeedSigner (Advanced), with Valerio Vaccaro.

The next step for anyone already holding keys across more than one device.

10:30. Italian-language, at Asilo Ciani during Lugano Plan B. Free, no ticket needed.

https://spazio21.com/#agenda

Day one at Lugano Plan B: @nprofile…9k65 on stage on cypherpunk ...

2026-10-23T19:34:42Z

Day one at Lugano Plan B: adam3us (nprofile…9k65) on stage on cypherpunk origins and philosophy, our new Lugano office officially open, NFC cards at the booth with a chance to win up to $500 in LiquidNetwork (nprofile…0cnd) Bitcoin, and our engineers teaching self-custody at Asilo Ciani.

One more day to go. 🇨🇭

Unscheduled, and worth the detour. 🛠️ Valerio Vaccaro walks ...

2026-10-23T19:28:34Z

Unscheduled, and worth the detour. 🛠️

Valerio Vaccaro walks through Jade DIY at Spazio 21, Asilo Ciani, during Plan B Lugano.

Open-source hardware wallet. Verifiable firmware. Every transaction checked on the device.

When the Key Is Not Enough with Fadi Barbara, on what protects ...

2026-10-23T19:26:04Z

When the Key Is Not Enough with Fadi Barbara, on what protects your bitcoin beyond a single key. In Italian, during Lugano Plan B.

Happening now at Asilo Ciani: Multi-vendor Multisig with Valerio ...

2026-10-23T19:21:13Z

Happening now at Asilo Ciani: Multi-vendor Multisig with Valerio Vaccaro, spreading keys across Jade, BitBox and SeedSigner so no single device holds the whole picture. In Italian, during Lugano Plan B.

Pick up an NFC card at the Blockstream booth at Lugano Plan B for ...

2026-10-23T12:40:05Z

Pick up an NFC card at the Blockstream booth at Lugano Plan B for a chance to win up to $500 in Liquid Bitcoin.

Generate a Liquid receive address, tap the card to your phone, then enter the address in the pop-up. Funds settle on the Liquid Network in about a minute. 🇨🇭

On stage at Lugano Plan B with Aaron van Wirdum, @nprofile…9k65 ...

2026-10-23T09:43:44Z

On stage at Lugano Plan B with Aaron van Wirdum, adam3us (nprofile…9k65) made the case for Simplicity as Bitcoin's last soft fork.

One expressive language with formal semantics could raise the security bar for Bitcoin scripts, and open the door to opt-in Confidential Transactions or covenants.

https://youtube.com/shorts/n8vO4miAxHM

Today Lugano Plan B opens at Palazzo dei Congressi. We're ...

2026-10-23T08:14:33Z

Today Lugano Plan B opens at Palazzo dei Congressi.

We're here to talk about building Bitcoin's security for the long run. At 10:30, adam3us (nprofile…9k65) shares lessons from the cypherpunk movement with Aaron van Wirdum, and Blockstream Jade is at our booth all day.

Day zero in Lugano. @nprofile…9k65 on stage at The Future of ...

2026-10-22T20:57:55Z

Day zero in Lugano. adam3us (nprofile…9k65) on stage at The Future of Capital Markets, media interviews from around the world, then drinks and Blockstream Jade giveaways with Satoshi Spritz.

Tomorrow Lugano Plan B opens. It only gets bigger from here. 🇨🇭

https://youtube.com/shorts/e42SQCEkv74

Happening now, the night before Lugano Plan B! Join us for a ...

2026-10-22T17:12:44Z

Happening now, the night before Lugano Plan B! Join us for a drink with Satoshi Spritz at the Blockstream space, Hotel Dante, and a chance to win a Blockstream Jade Bitcoin hardware wallet.

quoting
nevent1q…zj3r
Satoshi Spritz starts tonight at 18:00 at Piazza Cioccaro, before Lugano Plan B.

A numbered ticket from the Blockstream space at Hotel Dante gets you a free drink. Keep it: there are multiple giveaways through the night.

Details: https://planbweek.com/events/satoshi-spritz-speciale

Starting soon: our CEO @nprofile…9k65 takes two back-to-back ...

2026-10-22T15:51:12Z

Starting soon: our CEO adam3us (nprofile…9k65) takes two back-to-back panels at The Future of Capital Markets in Lugano, on fixed income and tokenized collateral, then a look back at 2026 and ahead to 2027. Hosted by Bitfinex Securities and Blockstream Capital Partners. 🇨🇭

Some security work has to start long before it's urgent. ...

2026-10-22T14:50:54Z

Some security work has to start long before it's urgent.

Jonas Nick, Director of Blockstream Research, takes OP_CHECKSHRINCS, a proposed opcode for post-quantum Bitcoin built on hash functions, to the technical stage at Lugano Plan B.

Satoshi Spritz starts tonight at 18:00 at Piazza Cioccaro, before ...

2026-10-22T14:42:18Z

Satoshi Spritz starts tonight at 18:00 at Piazza Cioccaro, before Lugano Plan B.

A numbered ticket from the Blockstream space at Hotel Dante gets you a free drink. Keep it: there are multiple giveaways through the night.

Details: https://planbweek.com/events/satoshi-spritz-speciale

On stage in Lugano today, @nprofile…9k65 on why people come to ...

2026-10-22T13:29:25Z

On stage in Lugano today, adam3us (nprofile…9k65) on why people come to Bitcoin for different reasons: the investment, sovereignty, or paying online when other options fail them.

ETFs and managed funds give the next wave of investors an entry point.

CLN users: older versions of the webpki-roots dependency ...

2026-10-22T13:25:31Z

CLN users: older versions of the webpki-roots dependency (RUSTSEC-2026-0381) still trust compromised emSign intermediate certificates, which may expose HTTPS requests to potential MITM attacks.

Core CLN code and the Lightning protocol are unaffected. The vulnerability is limited to the currencyrate (cln-currencyrate) plugin, which is enabled by default. Exposure is possible when:
- Using commands provided by the currencyrate plugin
- Configuring bkpr-currency for the bookkeeper plugin

The BIP353 plugin is unaffected in practice. Its upstream dependency includes an LNURL fallback path that uses HTTPS, but CLN's BIP353 plugin relies on DNS resolution and ignores the LNURL fallback result, so the affected TLS certificate validation path is not used.

If you don't need currencyrate, disable it by adding this to your CLN configuration: disable-plugin=cln-currencyrate

A fix is pending the relevant upstream dependency updates and a subsequent CLN release. Nodes not using the affected currencyrate functionality are not expected to be exposed, even with the plugin enabled.

Strong Bitcoin self-custody skills are learned hands-on. Six ...

2026-10-22T13:24:17Z

Strong Bitcoin self-custody skills are learned hands-on.

Six workshops and a panel, in Italian, at Asilo Ciani during Lugano Plan B: running your own node, multisig and security beyond a single key.

Limited quantity of BlockstreamJade classic at the door, first come first served.

Friday and Saturday. Free, no ticket needed.

https://planbweek.com/events/spazio-21

Our CEO @nprofile…9k65 arrives to join the panel on Bitcoin ...

2026-10-22T09:46:21Z

Our CEO adam3us (nprofile…9k65) arrives to join the panel on Bitcoin performance, macro shifts and the road ahead at The Future of Capital Markets in Lugano, hosted by Bitfinex Securities and Blockstream Capital Partners. 🇨🇭

Our CEO @nprofile…9k65 joined Scarlet Fu and James Seyffart on ...

2026-10-21T17:09:59Z

Our CEO adam3us (nprofile…9k65) joined Scarlet Fu and James Seyffart on Bloomberg Crypto to talk about where the industry goes next: security in the age of AI, Bitcoin's path to post-quantum signatures, and the steady build of institutional adoption.

https://youtu.be/VVKz_MjwOHU

We're excited to host the Bitcoin community in Lugano the ...

2026-10-21T13:22:05Z

We're excited to host the Bitcoin community in Lugano the night before Lugano Plan B with Satoshi Spritz

Find us at Hotel Dante on Piazza Cioccaro from 18:00. 🇨🇭

Our CEO @nprofile…9k65 speaks at The Future of Capital Markets ...

2026-10-21T08:01:45Z

Our CEO adam3us (nprofile…9k65) speaks at The Future of Capital Markets in Lugano tomorrow, hosted by Bitfinex Securities during Plan ₿ Week, covering Bitcoin's macro outlook, tokenized fixed income and collateral, and a look back at 2026 and ahead to 2027. 🇨🇭

Bitcoin is built to last. Keeping it secure is long-term work. ...

2026-10-20T21:07:27Z

Bitcoin is built to last. Keeping it secure is long-term work.

We're excited to share our work this week at Lugano Plan B: adam3us (nprofile…9k65) on lessons from the cypherpunk movement, Jonas Nick on post-quantum signatures, and self-custody workshops with our engineers.

The descriptor file is what stops most people from trying ...

2026-10-20T20:41:06Z

The descriptor file is what stops most people from trying multisig.

It lists every signer's public key and the wallet's rules. Lose it and two of three recovery phrases won't let you spend. Jade stores it on device, making more advanced self-custody easier and safer.

https://youtube.com/shorts/PKCM_USH7qo

2FA emails for multisig accounts now arrive from Blockstream ...

2026-10-20T14:23:22Z

2FA emails for multisig accounts now arrive from

Blockstream <noreply@blockstream.com>

They used to show as GreenAddress. Same address, new sender name. If a code doesn't arrive, check your spam folder.

quoting
nevent1q…e96x
Multisig is back in the Blockstream app. Create a 2-of-2 2FA Protected or 2-of-3 Bitcoin account today, the same multisig protection we pioneered in 2019. Full breakdown:

https://blog.blockstream.com/multisig-is-back-in-the-blockstream-app/

You can also set up more than one 2FA method: SMS, email or an authenticator app.

With a second method ready, you're always able to authorize transactions and move your funds.

An update from the Liquid Federation on the next stage of the ...

2026-10-20T13:49:04Z

An update from the Liquid Federation on the next stage of the LiquidNetwork (nprofile…0cnd)'s recovery.

quoting
nevent1q…xkpq
Liquid Network Restoration Update

With key technical milestones completed and network operations stable, user swap functionality is now restored with semi-automated swaps for Federation members. Normal peg and balance validation will be reinstated soon.

The Liquid Network’s members appreciate the broader Bitcoin community’s support and advocacy as we work to not only provide the restoration, but also harden the network’s security structure.

https://blog.liquid.net/liquid-network-staged-recovery-update/

Multisig is back in the Blockstream app. Create a 2-of-2 2FA ...

2026-10-13T23:22:43Z

Multisig is back in the Blockstream app. Create a 2-of-2 2FA Protected or 2-of-3 Bitcoin account today, the same multisig protection we pioneered in 2019. Full breakdown:

https://blog.blockstream.com/multisig-is-back-in-the-blockstream-app/

Core Lightning 26.06.9 is out. Upgrade now. It fixes a newly ...

2026-10-07T19:46:25Z

Core Lightning 26.06.9 is out. Upgrade now.

It fixes a newly reported vulnerability that can lead to loss of funds. Nodes running 26.06.8 or earlier are affected.

Verify the signatures and install it as soon as possible.

https://github.com/ElementsProject/lightning/releases/tag/v26.06.9

Core Lightning 26.06.8 is out, and every node runner should ...

2026-09-24T02:53:29Z

Core Lightning 26.06.8 is out, and every node runner should upgrade.

This release fixes vulnerabilities responsibly reported over recent weeks. There is no embargo period: the release and fixes are available right now.

A number of tests are being held back temporarily to make the underlying issues harder to reverse-engineer while node runners have time to upgrade.

Please upgrade as soon as possible.

https://github.com/ElementsProject/lightning/releases/tag/v26.06.8

We have published the technical security assessment of the ...

2026-09-24T00:49:03Z

We have published the technical security assessment of the September 6 LiquidNetwork (nprofile…0cnd) incident, which details the root cause and mechanics of the exploit, an incident timeline, and the engineering and security changes being implemented in response.

https://blog.blockstream.com/liquid-network-security-incident-assessment/

Run Jade fully air-gapped on your phone. Unlock, receive, and ...

2026-09-03T23:27:00Z

Run Jade fully air-gapped on your phone. Unlock, receive, and send all pass through QR codes between Jade and the Blockstream app.

Every address and transaction gets verified on screen before you use it.

https://youtube.com/shorts/R5bX31gsihI?feature=share

blockstream.info has been rebuilt, for Bitcoin and ...

2026-09-02T23:25:24Z

blockstream.info has been rebuilt, for Bitcoin and LiquidNetwork (nprofile…0cnd)

Watch the next block fill. Read real analysis on any transaction. Check Liquid's backing yourself, in one dashboard.

Everything new:

https://blog.blockstream.com/blockstream-explorer-rebuilt/

2% allocation. If Bitcoin doesn't perform, the portfolio ...

2026-09-02T08:44:54Z

2% allocation. If Bitcoin doesn't perform, the portfolio recovers. If it continues toward $200T, the effect is outsized.

adam3us (npub1qg8…24kw) on why pension funds don't need to form an opinion on how far Bitcoin goes, just stay the course and don't rebalance.

https://youtube.com/shorts/FQgbfKSAxnE?feature=share

Core Lightning 26.06.7 is out, and every node runner should ...

2026-09-01T06:53:50Z

Core Lightning 26.06.7 is out, and every node runner should upgrade.

It fixes issues reported over the past three weeks, during a sharp rise in AI-generated reports across open source Bitcoin. No vulnerability is known to be actively exploited. Binaries are out now. Source follows in 14 days.

https://blog.blockstream.com/core-lightning-26-06-7/

Finding the right post-quantum signature for SHRINCS meant ...

2026-09-01T06:52:47Z

Finding the right post-quantum signature for SHRINCS meant testing 25,935 parameter sets.

Blockstream Research built an open-source explorer where wallet developers, protocol researchers, and anyone else set the weights that match their case.

Full post: https://blog.blockstream.com/searching-for-shrincs-parameters/

On 15 August 1971 the dollar left gold, and a savings account ...

2026-09-01T06:51:12Z

On 15 August 1971 the dollar left gold, and a savings account stopped holding its value. kineticfinance (npub1h88…pz20) walks through what changed that night and why it still matters.

Bitcoin in self-custody with Blockstream Jade is money nobody can dilute or freeze.

Full episode: https://youtu.be/PaUAgRUbeNM

Core Lightning has been triaging a high volume of AI-generated ...

2026-08-26T23:30:39Z

Core Lightning has been triaging a high volume of AI-generated CVE reports over recent weeks. Several are real, and a coordinated fix is underway.

What to do now: do not shut your node down. Restart it with --offline.

That flag stops peer connections, so no payments route in, out or through your node. It keeps running, which means it keeps watching the chain and can still act if a counterparty force-closes a channel. A node that is powered off cannot do that, and that is why switching off is the worse option.

On umbrel (nprofile…cnv5) or Start9 (nprofile…06f3) this is a startup setting for Core Lightning, not a toggle in the dashboard.

What happens next: signed binaries will be published. Verify the signatures before you install, then bring your node back online. Source and reproducible builds follow afterwards so anyone can audit what changed.

https://github.com/ElementsProject/lightning

If you run Core Lightning: when the release is published: upgrade ...

2026-08-26T21:12:32Z

If you run Core Lightning: when the release is published: upgrade with signed binaries, or start your node with `--offline`.

Details stay under embargo for two weeks. Previous releases, including 26.04, are unsupported.

Full details when the embargo lifts. The 26.09 release is still planned for late September.

quoting
nevent1q…r5qk
Like many open source Bitcoin projects, Core Lightning has received a number of AI-generated CVE reports from multiple sources over the past 10 days. Our small team, together with several invaluable open source contributors, has been working intensively to validate and triage these reports and develop fixes where needed.

We’re now working through a broader remediation strategy. The first step is a point release containing many of these fixes, and we will strongly recommend upgrading. We’re aiming to have an initial version of the point release available within the next few days.

You can build a Bitcoin wallet with nothing but a coin and a word ...

2026-08-26T03:31:20Z

You can build a Bitcoin wallet with nothing but a coin and a word list. Jade does the one step you cannot do by hand.

Flip a coin 121 times, find the words offline, and pick your final word from the options Jade calculates. Here is what rolling your own entropy actually looks like.

https://youtube.com/shorts/6P0waV3IP5M?feature=share

Every method written up, coins, dice, poker cards, even tarot, with the binary word tables you need to do it offline.

help.blockstream.com/generate-recovery-phrase-offline

Jade air-gapped QR support is new in the Blockstream desktop app. ...

2026-08-26T03:23:26Z

Jade air-gapped QR support is new in the Blockstream desktop app.

Run Jade Plus fully air-gapped and the device never touches your computer. PIN unlock, wallet import, address checks and signing all happen over QR codes, read by the camera on the device.

https://youtube.com/shorts/qsvqLNFjC1k?feature=share

Jade firmware 1.0.41 is out. It contains security updates and ...

2026-08-26T03:12:01Z

Jade firmware 1.0.41 is out. It contains security updates and every user should upgrade as soon as they safely can.

Jade is not affected by the Coldcard random number vulnerability. The reasoning, and everything we changed, is in the post.

https://blog.blockstream.com/reflections-on-the-coldcard-fallout/

You can now pick up a Jade at a UPS Access Point in the US and ...

2026-08-26T02:56:16Z

You can now pick up a Jade at a UPS Access Point in the US and Canada instead of having it shipped to your house.

At checkout, choose pickup and select a nearby UPS Store, CVS, or similar.

https://store.blockstream.com/

The official Core Lightning app from Blockstream is a dashboard ...

2026-08-25T10:30:17Z

The official Core Lightning app from Blockstream is a dashboard you host yourself, connected straight to your own node.

Its Volume Chart maps routing traffic inbound to outbound, channel by channel, so you can see which channels earn their capital and which sit idle.

Run a node, route payments, watch it work. One-click on umbrel (nprofile…cnv5) or Start9 (nprofile…06f3) or run it from source: https://github.com/ElementsProject/cln-application

Your Jade never has to touch the computer. QR Connect and ...

2026-08-24T23:27:26Z

Your Jade never has to touch the computer.

QR Connect and air-gapped signing land in the desktop app, so Blockstream Jade pairs, unlocks and signs entirely over QR codes.

Lightning arrives too, in Beta. Switch it on in settings, no second app to run.

https://blog.blockstream.com/blockstream-app-desktop-3-5-0/

Sync an entire Bitcoin wallet in seconds. QuickSync is a new ...

2026-08-23T22:53:51Z

Sync an entire Bitcoin wallet in seconds.

QuickSync is a new open-source wallet scanning protocol by Blockstream that turns hundreds of address lookups into one descriptor request, dramatically cutting sync time when using the Blockstream Explorer API.

Get an API key today: https://dashboard.blockstream.info

"If you can't outperform Bitcoin with a strategy, maybe ...

2026-08-21T10:09:16Z

"If you can't outperform Bitcoin with a strategy, maybe you should just buy Bitcoin."

Over six-year rolling periods for the last 15 years, Bitcoin has been the outlier asset class. adam3us (npub1qg8…24kw) on why Bitcoin is the hurdle rate for long-term value preservation.

https://youtube.com/shorts/4DQPf01qAzg?feature=share

The hurdle rate is set. Build your allocation in self-custody.

blockstream.com/app

Blockstream Research put post-quantum signatures on Jade Plus and ...

2026-08-20T23:45:47Z

Blockstream Research put post-quantum signatures on Jade Plus and three other wallets. All four signed.

H/t Oleksandr Kurbatov and Dmytrii Kurbatov for leading the work. Reviewed by Jonas Nick.

quoting
nevent1q…srh9
A popular concern says post-quantum signatures cannot run on the hardware wallets people already own.

Blockstream Research implemented hash-based schemes on four popular devices. All four signed. SLH-DSA, the NIST standard, in about two minutes at worst.

https://blog.blockstream.com/hardware-wallets-post-quantum-signatures/

Also reviewed by Mike Kudinov, Viktor Mashtaliar and Yaroslava Chopa.

Thanks also to Trezor, Ledger and BitBox (nprofile…0kcc), who helped the team get this running on their hardware.

https://blog.blockstream.com/hardware-wallets-post-quantum-signatures/

A popular concern says post-quantum signatures cannot run on the ...

2026-08-19T23:15:25Z

A popular concern says post-quantum signatures cannot run on the hardware wallets people already own.

Blockstream Research implemented hash-based schemes on four popular devices. All four signed. SLH-DSA, the NIST standard, in about two minutes at worst.

https://blog.blockstream.com/hardware-wallets-post-quantum-signatures/

Owning your money outright is a financial edge that's hard to ...

2026-08-17T23:53:32Z

Owning your money outright is a financial edge that's hard to take away.

kineticfinance (nprofile…l07l) lays it out in Exit Manual Episode #45, and the Blockstream app makes it real.

https://youtu.be/NkMUbao6bQY

Blockstream Jade can hold a duress PIN, a second PIN separate ...

2026-08-16T23:41:08Z

Blockstream Jade can hold a duress PIN, a second PIN separate from your real one. Enter it under pressure and Jade erases the wallet, so what's handed over is an empty device.

There is no undo. Back up your recovery phrase first, and choose carefully when to use it.

https://youtube.com/shorts/m4JnjMQO78A

How to enable a duress PIN on Jade:

https://help.blockstream.com/blockstream-jade/add-more-security-functionality/enable-a-duress-pin

Like many open source Bitcoin projects, Core Lightning has ...

2026-08-13T23:37:28Z

Like many open source Bitcoin projects, Core Lightning has received a number of AI-generated CVE reports from multiple sources over the past 10 days. Our small team, together with several invaluable open source contributors, has been working intensively to validate and triage these reports and develop fixes where needed.

We’re now working through a broader remediation strategy. The first step is a point release containing many of these fixes, and we will strongly recommend upgrading. We’re aiming to have an initial version of the point release available within the next few days.

Jade doesn’t use a physical secure element. We just published a ...

2026-08-13T23:02:54Z

Jade doesn’t use a physical secure element.

We just published a full post on how the Virtual Secure Element works:

https://blog.blockstream.com/jade-virtual-secure-element/

Your recovery phrase sits encrypted on the device. Unlocking it needs the PIN you type on Jade and a key share from a blind oracle. Neither is enough by itself.

The oracle never sees the real PIN or any wallet data. It only gets a scrambled version that includes a secret unique to that particular Jade.

Three wrong PINs and both sides wipe. Device and oracle. After that the encrypted data is permanently unusable without the recovery phrase.

A locked Jade holds nothing an attacker can use alone.

Everything is open source, firmware, hardware, and the oracle. You can run the oracle yourself, or skip it completely and use SeedQR or type the recovery phrase.

The official Core Lightning app from Blockstream is a dashboard ...

2026-08-13T05:26:13Z

The official Core Lightning app from Blockstream is a dashboard you host yourself, connected straight to your own node.

Account Events tracks every sat across every channel, day by day, so you can see exactly where your liquidity has been.

Self hosted, and it talks to your node over an encrypted Commando connection with rune permissions you control. One-click on umbrel (nprofile…cnv5) or Start9 (nprofile…06f3), or run it from source:

https://github.com/ElementsProject/cln-application

Using LLMs to find bugs is well trodden. Using them to help prove ...

2026-08-13T05:02:02Z

Using LLMs to find bugs is well trodden. Using them to help prove a cryptographic library correct is not.

Proof of concept from Jonas Nick, Director of Blockstream Research, with remix7531.

https://delvingbitcoin.org/t/libshrincs-a-c-implementation-with-a-machine-checked-security-proof/2795

New research from Kyrylo Riabov and Artem Chystiakov. This ...

2026-08-13T04:33:12Z

New research from Kyrylo Riabov and Artem Chystiakov.

This Blockstream paper explores enforcing asset rules onchain with a Simplicity covenant on the LiquidNetwork (nprofile…0cnd). Ordinary transfers need no issuer signature, and the holder keeps their own keys.

https://github.com/Arvolear/research-papers/blob/master/simplicity/DAMP.pdf

A passphrase adds an advanced layer of protection to the Bitcoin ...

2026-08-12T00:42:31Z

A passphrase adds an advanced layer of protection to the Bitcoin self-custody setup you already have, with nothing to buy.

Your existing funds don't move on their own. Back up the passphrase as carefully as your recovery phrase, then send them across.

https://youtube.com/shorts/XdhNn5cIEd8

Lose the passphrase and the funds are gone, even if you still hold your recovery phrase. It isn't a password you can reset, it's part of the key.

Jade shows an 8 character fingerprint each session. If it doesn't match, you've typo'd.

Passphrases are the BIP-39 standard, not a Jade feature, so the same one works on any wallet that supports it. Case and spaces count.

Step by step setup on Jade:

https://help.blockstream.com/blockstream-jade/add-more-security-functionality/add-a-bip39-passphrase-for-jade

Announcing Blockstream Swaps. Trustless atomic swaps for Bitcoin, ...

2026-08-10T22:40:12Z

Announcing Blockstream Swaps.

Trustless atomic swaps for Bitcoin, Liquid, and Lightning. Hold BTC or LBTC and pay Lightning invoices without managing channels or inbound liquidity. Reach Lightning from cold storage while keeping full control of your funds.

Built as a complementary service to strengthen ecosystem resilience and redundancy. Currently in beta.

Full announcement: https://blog.blockstream.com/announcing-blockstream-swaps/

Beta access: https://blockstream.typeform.com/to/y1L5wyZT

Gen Z is investing earlier than any generation, often into assets ...

2026-08-10T07:31:32Z

Gen Z is investing earlier than any generation, often into assets they never actually control.

kineticfinance (nprofile…l07l) breaks down the trend and the way forward: bitcoin in self-custody with Blockstream Jade, a fully open source Bitcoin hardware wallet.

https://youtu.be/S81FoRlaYTE

Your bitcoin should answer to you alone. Jade builds your ...

2026-08-07T08:07:48Z

Your bitcoin should answer to you alone.

Jade builds your recovery phrase from 9 independent sources of randomness, blended so nobody on earth can reproduce it. Watch the full setup: create your wallet, confirm it's genuine, and receive with confidence.

https://youtube.com/shorts/WqQ5nfKlnRI

How Jade generates your recovery phrase:

https://help.blockstream.com/blockstream-jade/faqs/how-does-jade-generate-my-recovery-phrase

Post-quantum signatures aren't one-size-fits-all, and now ...

2026-08-07T08:05:36Z

Post-quantum signatures aren't one-size-fits-all, and now developers can find the SHRINCS setup that fits theirs.

Blockstream Research's explorer lets you tune signature size, signing cost, and verification cost to match your wallet, node, or miner.

Their sweep of 25,935 candidates found a fallback signature about 2 KB smaller than NIST's SLH-DSA, and 28% cheaper to verify.

https://blog.blockstream.com/searching-for-shrincs-parameters/

Most people carefully back up their multisig seeds… and forget ...

2026-08-07T01:00:35Z

Most people carefully back up their multisig seeds… and forget the part that actually lets them reconstruct the wallet.

Without the configuration (descriptor), those seeds are incomplete. Jade can register and store your multisig configs on-device (up to 8) and export them later via QR if you ever need to rebuild the wallet.

Guide: https://help.blockstream.com/blockstream-jade/add-more-security-functionality/back-up-a-multisig-configuration-on-jade

Jade has had Anti-Exfil since the beginning. A compromised ...

2026-08-07T00:55:33Z

Jade has had Anti-Exfil since the beginning.

A compromised hardware wallet can slowly leak your private keys through the nonces in its signatures, even if the keys themselves were generated securely.

Anti-Exfil stops this by using sign-to-contract: Jade cryptographically commits its nonce to random data from your host computer, fully re-randomizing it so no key material can be smuggled out.

Blog written by Andrew Poelstra: https://blog.blockstream.com/anti-exfil-stopping-key-exfiltration/

More details: https://help.blockstream.com/hc/en-us/articles/9641573399961-What-is-Anti-Exfil-and-how-does-it-work

More from Excellion aka Excellion (nprofile…pykq):

Physical secure elements are closed-source under NDA. Once ...

2026-08-07T00:42:06Z

Physical secure elements are closed-source under NDA. Once reverse-engineered offline, every unit is compromised.

Jade's virtual SE (Blind Oracle) encrypts your seed so the locked device holds only ciphertext. The AES-256 key is co-created with a truly blind, rate-limited oracle that wipes after 3 wrong PINs. The attack becomes interactive and remote.

Fully open-source. No proprietary silicon. No NDAs. Anyone can audit the code or run their own oracle.

We don't FUD secure elements, we simply explain why we chose the Blind Oracle path for greater transparency and verifiability.

Video with full details: https://youtu.be/ad3titeu9uY

Help Center: https://help.blockstream.com/blockstream-jade/faqs/how-does-jade-protect-my-recovery-phrase-with-a-blind-oracle

Set up your own Blind Oracle: https://help.blockstream.com/blockstream-jade/add-more-security-functionality/set-up-a-personal-blind-oracle

Github: https://github.com/Blockstream/blind_pin_server

More from adam3us (nprofile…9k65):

Your bitcoin is only as safe as the randomness your keys are made ...

2026-08-05T23:02:35Z

Your bitcoin is only as safe as the randomness your keys are made from.

Jade blends 9 independent sources of randomness, from a dedicated hardware chip to camera noise, into a result that exists only once.

Our code is open-source, so anyone can verify it.

How Jade generates your recovery phrase:

https://help.blockstream.com/blockstream-jade/faqs/how-does-jade-generate-my-recovery-phrase

First and foremost, we wish the @nprofile…aze8 team the very ...

2026-08-05T22:59:31Z

First and foremost, we wish the Boltz (nprofile…aze8) team the very best as they work through this situation.

They are excellent partners to Blockstream and the Bitcoin ecosystem, particularly at the intersection of layer-2 networks like Lightning and Liquid.

To strengthen ecosystem resilience and redundancy, Blockstream is launching a new swaps feature. This initiative was already in development as part of our broader effort to build a more resilient suite of tools for the Lightning and Liquid networks. This system is currently in beta testing with select participants.

This was not an effort to replace any one provider. We see Blockstream Swaps as a complementary implementation that adds much-needed redundancy and diversity to the ecosystem. These recent events have only reinforced that need, and we are accelerating efforts to bring Blockstream Swaps to market.

We welcome conversations with wallets, apps and other potential integration partners.

In-app swaps in the Blockstream app are temporarily unavailable ...

2026-08-03T23:11:36Z

In-app swaps in the Blockstream app are temporarily unavailable due to a service interruption with our swap partner Boltz (nprofile…aze8).

Only the swaps are affected. LiquidNetwork (nprofile…0cnd) is unaffected, and your funds remain fully secure under your control. Send, receive, and all other core features continue to work normally.

We’ll share updates as soon as swaps are restored.

To Bitcoin community leaders worldwide: Please message your ...

2026-08-03T00:59:28Z

To Bitcoin community leaders worldwide:

Please message your Telegram, Signal, Discord, Nostr groups: anyone who created a recovery phrase on a Coldcard should migrate: fresh seed, generated on a new device.

If your community needs hardware wallets, get in touch. We're expediting onboarding and shipments for local communities:

https://help.blockstream.com/local#register-your-bitcoin-meetup

Use code JADEPLUSEXPRESS for free expedited shipping. We’re ...

2026-08-03T00:53:37Z

Use code JADEPLUSEXPRESS for free expedited shipping.

We’re upgrading as many orders as possible to try and help.

https://store.blockstream.com/products/jade-plus

If you need to move funds fast, do NOT wait for shipping. Create ...

2026-08-03T00:40:08Z

If you need to move funds fast, do NOT wait for shipping.

Create a software wallet in the Blockstream app and move the funds there. This is temporary while you wait for your hardware wallet from any vendor.

This thread covers creating a software wallet, backing up the recovery phrase, and receiving funds.

Stay calm, but move diligently.

Official guides linked in every post.

Download the Blockstream app

https://blockstream.com/app

Create a new software wallet in the Blockstream app

1. Open the app
2. Select Setup Mobile Wallet (or the desktop equivalent)
3. Secure it with biometrics or set a PIN
4. The app generates your keys. Tap Continue
5. Your wallet is ready

Keys live only on this device until you backup the recovery phrase.

https://help.blockstream.com/blockstream-app/set-up-transact-recover-your-wallet/set-up-a-new-wallet

Backup your recovery phrase

1. In the app go to Security
2. Tap Backup Now
3. Write down the 12 or 24 words offline, carefully, in order
4. Complete the verification check in the app
5. Store the backup securely offline. Never a photo or digital file

https://help.blockstream.com/blockstream-app/set-up-transact-recover-your-wallet/back-up-wallet

Receive bitcoin in the Blockstream app

1. Open your wallet and tap Transact → Receive
2. Share the address or QR code with the sender
3. Wait for the transaction to confirm. Your balance updates on the home screen

https://help.blockstream.com/blockstream-app/set-up-transact-recover-your-wallet/receive-bitcoin

Entire Jade lineup is safe. Read how Jade generates entropy and ...

2026-08-03T00:21:24Z

Entire Jade lineup is safe.

Read how Jade generates entropy and recovery phrases:

https://help.blockstream.com/blockstream-jade/faqs/how-does-jade-generate-my-recovery-phrase

quoting
nevent1q…gdvq
The Blockstream Jade lineup (Jade Classic, Jade Core, and Jade Plus) is unaffected by the recently reported RNG issue with another company.

We are preparing a blog post outlining best practices for anyone moving bitcoin to a new wallet, including how to generate fresh keys, verify addresses, conduct a test transaction and securely retire an old recovery phrase.

Frontier LLMs are uncovering previously overlooked vulnerabilities, and Blockstream is using the same tools to strengthen the QA reviews of our product suite.

But AI is not a substitute for open source: transparent hardware and firmware enable independent scrutiny, faster disclosure and quicker fixes. This is why Blockstream Jade continues to champion both open source software and hardware.

Your recovery phrase backs up your bitcoin, so keep it offline. ...

2026-08-02T23:52:03Z

Your recovery phrase backs up your bitcoin, so keep it offline. Don't photograph it, don't type it into any website, and don't drop it into your notes app. Put it on paper, or better still, steel.

https://youtube.com/shorts/QxVjXbjWO6g?feature=share

Jade is unaffected by the recently disclosed RNG vulnerability ...

2026-07-31T05:28:10Z

Jade is unaffected by the recently disclosed RNG vulnerability affecting other hardware wallets.

Every BlockstreamJade recovery phrase comes from multiple independent entropy sources.

On an affected device? Here's how to migrate calmly, step by step:

https://blog.blockstream.com/jade-unaffected-coldcard-vulnerability/

The Blockstream Jade lineup (Jade Classic, Jade Core, and Jade ...

2026-07-31T04:18:04Z

The Blockstream Jade lineup (Jade Classic, Jade Core, and Jade Plus) is unaffected by the recently reported RNG issue with another company.

We are preparing a blog post outlining best practices for anyone moving bitcoin to a new wallet, including how to generate fresh keys, verify addresses, conduct a test transaction and securely retire an old recovery phrase.

Frontier LLMs are uncovering previously overlooked vulnerabilities, and Blockstream is using the same tools to strengthen the QA reviews of our product suite.

But AI is not a substitute for open source: transparent hardware and firmware enable independent scrutiny, faster disclosure and quicker fixes. This is why Blockstream Jade continues to champion both open source software and hardware.

Simplicity has been live on @nprofile…0cnd mainnet for nearly a ...

2026-07-31T00:03:51Z

Simplicity has been live on LiquidNetwork (nprofile…0cnd) mainnet for nearly a year. Now the full developer toolchain is here.

Build high-assurance Bitcoin contracts in a zero-friction environment with autocomplete, instant testing, post-quantum signatures, and a finalized lending template.

Here's what builders can ship today and what's coming next.

https://blog.blockstream.com/building-on-simplicity-what-ships-today-what-is-coming-next/

Your node's finances, in one place. CLN's Bookkeeper ...

2026-07-30T04:03:34Z

Your node's finances, in one place. CLN's Bookkeeper shows invoices received, payments sent, routing revenue, and sats flowing in and out.

Run your own node and watch the books update live. One-click on umbrel (nprofile…cnv5) or Start9 (nprofile…06f3) or run it from source:

https://github.com/ElementsProject/cln-application

The curve behind every Bitcoin signature has a weakness to ...

2026-07-29T23:51:51Z

The curve behind every Bitcoin signature has a weakness to quantum computers, understood since the 1990s. The only thing missing is the machine.

Quantum is the Bitcoin Security Consortium's first focus, and Jonas Nick explains why we build for that adversary now instead of betting it never arrives.

https://youtube.com/shorts/tPA_e3j2Ugc?si=5Fji3bBFqO2f64gH

Send Bitcoin faster, keep your amounts private, and hold ...

2026-07-29T23:51:16Z

Send Bitcoin faster, keep your amounts private, and hold stablecoins and other assets, all on Bitcoin-based rails. That's Liquid, a Bitcoin layer-2. At btcplusplus (npub1dwa…7c52) Toronto, Pablo Greco explains how it works.

Watch:

https://youtu.be/p1UInbcK2cM

Buy bitcoin on an exchange and it sits as a balance on their ...

2026-07-29T00:57:23Z

Buy bitcoin on an exchange and it sits as a balance on their books. Until you withdraw, it is not bitcoin you hold. In the Blockstream app, every purchase lands in a wallet you control, in self-custody from the first second.

https://youtube.com/shorts/u-op-eChjDE?feature=share

Hold your own bitcoin from the first second. Download the Blockstream app:

https://blockstream.com/app/

Make your Bitcoin ready to spend anywhere it's accepted with ...

2026-07-29T00:56:38Z

Make your Bitcoin ready to spend anywhere it's accepted with the Blockstream App.

Swap into Liquid for fast, Confidential Transactions that can pay any Lightning invoice. When you're ready to go back to mainchain, swap back to Bitcoin.

Lose your phone, keep your 2FA. Jade Plus now backs up your ...

2026-07-28T02:34:41Z

Lose your phone, keep your 2FA.

Jade Plus now backs up your two-factor accounts. Scan your Google Authenticator export straight to Jade, then generate your codes on a PIN-protected device you control.

https://store.blockstream.com/products/jade-plus

Post-quantum signatures aren't new, they've existed for ...

2026-07-28T02:33:04Z

Post-quantum signatures aren't new, they've existed for about 45 years.

adam3us (npub1qg8…24kw) on why OP_CHECKSHRINCS proposed by Blockstream Research is designed as a minimal, provable change to Bitcoin, and why starting the migration now means more real-world data before it's actually needed.

https://youtube.com/shorts/_oGgAEfwo-E?feature=share

Core Lightning 26.06 ships with bwatch: a new event-driven, ...

2026-07-27T03:58:06Z

Core Lightning 26.06 ships with bwatch: a new event-driven, in-memory block-watching plugin.

Your node registers its watches and catches up to the chain near-instantly. Faster startups, lighter footprint, crash-resistant, and built to scale. ⚡

https://blog.blockstream.com/core-lightning-26-06-quantum-resistant-lightning-channel/

Quantum is the Bitcoin Security Consortium's first focus, and ...

2026-07-27T00:13:01Z

Quantum is the Bitcoin Security Consortium's first focus, and Blockstream Research has spent the last year working toward a quantum-safe Bitcoin.

Check out the thread below to learn about some of our initiatives, starting with OP_CHECKSHRINCS. 🧵

OP_CHECKSHRINCS is a proposed opcode for verifying SHRINCS, a hash-based post-quantum signature scheme.

At 7x smaller than the NIST standard, it's small enough to actually work on Bitcoin.

https://blog.blockstream.com/op_checkshrincs-a-hash-based-signature-opcode-for-post-quantum-bitcoin/

Hash-based signatures are the near-term answer. Lattices are a strong potential long-term play: eventually ~50% smaller signatures and faster verification, and unlike hash-based they preserve multisig, threshold, and HD wallets. Here's how they work:

https://blog.blockstream.com/schnorr-but-with-vectors-lattice-based-signatures-explained/

How worried should Bitcoin holders be? Today's best quantum hardware can barely factor 21.

Taproot already has a quantum-safe path built in via its script tree. Blockstream Research ran the first post-quantum tx on the LiquidNetwork (nprofile…0cnd) in March 2026.

https://blog.blockstream.com/quantum-computing-and-bitcoin-eli5/

None of it works without solid cryptography.

Blockstream Research are key contributors and maintainers of libsecp256k1, behind every Bitcoin signature, and libsecp256k1-zkp, powering Confidential Transactions on Liquid.

Let us proceed together apace. Onward.

https://blog.blockstream.com/blockstream-research-brings-libsecp256k1-zkp-back-up-to-speed/

Proud to be a founding member of the @BTCconsortium. Bitcoin’s ...

2026-07-23T23:21:57Z

Proud to be a founding member of the @BTCconsortium.

Bitcoin’s long-term security has always been core to what we do, from open-source research to practical post-quantum work like OP_CHECKSHRINCS.

Supporting the independent developer community that keeps the network resilient is a natural extension of that mission.

Today, the best quantum hardware can just about factor 21 (3 x ...

2026-07-23T23:20:16Z

Today, the best quantum hardware can just about factor 21 (3 x 7).

Blockstream Research hired Mikhail Kudinov, one of the cryptographers behind NIST's post-quantum signature standard, and we have already proposed OP_CHECKSHRINCS, an optimized hash-based signature opcode for Bitcoin.

https://youtube.com/shorts/SfiP1Aw7NvM?feature=share

How we are making Bitcoin post-quantum secure:

https://blog.blockstream.com/op_checkshrincs-a-hash-based-signature-opcode-for-post-quantum-bitcoin/

New 0-conf infrastructure for Liquid and other Blockstream ...

2026-07-22T23:18:06Z

New 0-conf infrastructure for Liquid and other Blockstream Elements - based deployments is here.

Swap services, exchanges and other applications that accept Liquid payments now have access to near-instant transfer times.

More in the technical explainer. 👇

https://blog.blockstream.com/0-conf-for-elements-and-liquid-a-technical-explainer/

Managing a Lightning node used to mean living in the command ...

2026-07-22T00:38:03Z

Managing a Lightning node used to mean living in the command line.

The Core Lightning app puts your channels, fees, and peer control in one screen. Your node, your rules.

Core Lightning runs at home in one click on umbrel (nprofile…cnv5) or Start9 (nprofile…06f3).
Run the app from source:

https://github.com/ElementsProject/cln-application

Everyone you've orange-pilled is still leaving their coins on ...

2026-07-22T00:33:25Z

Everyone you've orange-pilled is still leaving their coins on an exchange.

The best way to teach self-custody is to hand someone the keys. Jade Core makes it a five-minute conversation, not a lecture.

Bring someone in this week.

https://store.blockstream.com/products/blockstream-jade-core