2026-10-21T11:56:32Z https://nostr.now https://nostr.now/npub1qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqzqujme https://nostr.now/r/relay.hodlboard.org/inbox https://nostr.now/nevent1qqsdx5hlq0f368fzxu5arljzcqu5pyh82h9tsgnwk2xlvmdd6glrpvqpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qesx089 In reply to <a href='/nevent1qqsvr36ge8kmwwk9cnfwrexh5pwmalktuan3hzyw7ltgqkgce099hpqpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcuv5kg8'>nevent1q…5kg8</a><br/>_________________________<br/><br/>Yes it&#39;s succinct. Recursive proof. 2026-10-21T11:56:32Z https://nostr.now/nevent1qqsgan347n8e6ldtswuruuy8p2rrc5yzqw3wl5t7d8vmt0fcjemx30spramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qkn9m75 In reply to <a href='/nevent1qqsyq5futz0jchrgdr9kaec8hlqs4ky6srm3h5tdvvjn0qxn2kpvkdcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqa0ztwy'>nevent1q…ztwy</a><br/>_________________________<br/><br/>It&#39;s like a little &#39;observation&#39; in mathematics. Something too small to be given the name &#39;Theorem&#39;, basically.<br/><br/>Or a step *towards* a theorem that needs a bunch of steps in place before it can all be put together. 2026-10-29T03:48:34Z https://nostr.now/nevent1qqszz9h8mh7kcjdert4sq7ez7fexsfcdxdk7epx8f0mecasye4qnlscpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqyg8zz7ye0pgy3ms4mfn2k8zxxwux08g5r6tv2fsp0408kxv3eevyhyj8xhwp In reply to <a href='/nevent1qqspn540cqdtj56e6kh8fgu734rm99e8dn9rl6a02pme2cxnrf960lqpxd6dn'>nevent1q…d6dn</a><br/>_________________________<br/><br/>How have I only today learned what the word lemma means... 😅 2026-10-29T02:03:01Z https://nostr.now/nevent1qqsyq5futz0jchrgdr9kaec8hlqs4ky6srm3h5tdvvjn0qxn2kpvkdcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygpfgkpph6t39c259fcx9h4awkn2yc3hck7r8nu80n3v8t6x6spxhu6cwgqc In reply to <a href='/nevent1qqspn540cqdtj56e6kh8fgu734rm99e8dn9rl6a02pme2cxnrf960lqpxd6dn'>nevent1q…d6dn</a><br/>_________________________<br/><br/>What is a lemma <br/><br/> 2026-10-28T23:04:59Z https://nostr.now/nevent1qqs0edaxl40tuqc3tcj3tls5gcpn3aj74fwjgena7hl8qvrtyewkd0spramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygxs5knlaqxjwq9rtywkctzu6gj7h6g5lda6ug9j90arx8fevme3m5qpu6sq In reply to <a href='/nevent1qqsqqqqzwm50zhu426k6d92dh0czg3ahheyzkjhvwq0fs8kwzqy4c6g4etvzr'>nevent1q…tvzr</a><br/>_________________________<br/><br/>Yes, it seems that it was even more nefarious than first thought. 2026-10-27T16:00:46Z https://nostr.now/nevent1qqstnsqnp0ustnuc9t8mnw9ufxardp8xm4x39agxes8dpwqxcjtualcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygxs5knlaqxjwq9rtywkctzu6gj7h6g5lda6ug9j90arx8fevme3m5y4za9l In reply to <a href='/nevent1qqs83u9ulu29vrqll3x9m564meuqwsvczfnhxgxqpzc3h49jyuzkedsp9v677'>nevent1q…v677</a><br/>_________________________<br/><br/>Thanks. It was the less bad alternative. 2026-10-26T07:10:02Z https://nostr.now/nevent1qqsrgzrjhpfszyd8stpjvuctcgqh9v2r2h7p345qg6h0fqxzcza0dgcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygpl8lm6mvu3t8zzcz4pd4fuqjpml0ad2l0j920faymy5vr8g84jeuw8eyv3 In reply to <a href='/nevent1qqspr9z2vj3y25a6upy8h79mvlg6n33x5c3cppmpt2zfwjdc5xd8akcrtzqv5'>nevent1q…zqv5</a><br/>_________________________<br/><br/>Converting L-BTC to BTC has a minimum of 10,000 sats and a maximum of 0.25 BTC per transfer.<br/><br/>Read our blogpost for all details 👇<br/><a href="https://www.bullbitcoin.com/blog/lightning-and-liquid-are-back-on-bull-wallet">https://www.bullbitcoin.com/blog/lightning-and-liquid-are-back-on-bull-wallet</a><br/> 2026-10-22T17:39:34Z https://nostr.now/nevent1qqs8r684kmt8qtx4tmlppexhmeuuwz49lecs5ddhcq5yz6enzrcqxagpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9q3ke2dj In reply to <a href='/nevent1qqsdx5hlq0f368fzxu5arljzcqu5pyh82h9tsgnwk2xlvmdd6glrpvqprfmhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhsgjx6a0'>nevent1q…x6a0</a><br/>_________________________<br/><br/>For anyone interested: these proofs are actually STARKs ; they are proved recursively by the sequencer. any final withdrawal proof by the user does what Risc-0 calls &#39;shrink-wrap&#39;, in which you make a groth16 (so, SNARK) proof that the STARK proof validates. That&#39;s why the on-bitcoin verification is O(1). The STARK proof is also O(1) because it&#39;s a recursive proof: it says &#34;this proof is valid, plus this other one new chunk is valid&#39;. 2026-10-21T13:37:23Z https://nostr.now/nevent1qqsg2ez0rvt5x5kfldggfj7s795mvprsnudqyyk26a7nrxf9kwlv2fspramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9q0ksmw2 on branch `anchor` there&#39;s now a fairly complete setup: the sequencer posts anchors to bitcoin each L2 block. when you withdraw, you prove that an anchor is embedded with enough PoW and at least 10 blocks deep. You prove that your withdrawal represents a valid set of state transitions from genesis. These things together mean that even if the sequencer is colluding against you, you can&#39;t be cheated out of your money. And the transfers on L2 are all shielded (like zcash). The remaining risk is censorship: the sequencer censors your withdrawal transaction.<br/><br/>The demo now shows the anchoring so you know how final your transaction is.<br/><br/> <a href="https://github.com/AdamISZ/lichen/tree/anchor">https://github.com/AdamISZ/lichen/tree/anchor</a><br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qqs0yf9m74rhjcd0x4elgplw7rr4uu4d2yd5aqyaz8034s9snwsyy0cpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtczypn4hp87wh3pd2u5036r3mj3njnhw5mkmhc9mt0m5cnch5qju8tjsqcyqqqqqqgcuu6rk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…u6rk</a></span> </div> Shielded transfers on L2. All state transitions are proved valid. Spending costs the sender a 5-10s proof (it's not very optimized).<br/><br/>A question for anyone following along: is Bob safe?<br/><br/>#lichen<br/> <br/><br/><br/><br/> <img src="https://blossom.primal.net/da0ee808c671837a83f6dcf66e45ad0b5c2a550f0a9d27e623eaa0a4220ef238.jpg"> </blockquote> 2026-10-21T02:06:27Z https://nostr.now/nevent1qqsvxm58x4xnddqg76e44zvduy925r6m2sgs7nefa2fzlzsefxpnrwcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qkx6gu3 Damn i spoke to soon.<br/><br/>NIST P256&#39;s generator&#39;s seed was found.<br/><br/>That&#39;s not Bitcoin&#39;s (secp256k1 is not a NIST curve).<br/><br/>Again it theoretically doesn&#39;t matter. But we&#39;d still love to know!<br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qqswadghfzae2tnzwnef3ungjls5c8nven4knvkgp5le7ldq3gsr23cpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtczypn4hp87wh3pd2u5036r3mj3njnhw5mkmhc9mt0m5cnch5qju8tjsqcyqqqqqqguqun03" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…un03</a></span> </div> Wow!<br/><br/><a href="https://www.anthropic.com/research/ecdsa-curve-origins">https://www.anthropic.com/research/ecdsa-curve-origins</a><br/><br/>This is not a bad thing, don't worry 😄<br/><br/>The opposite: we now where G comes from in secp256k1. It was theoretically not a problem anyway. But now we know for ~sure it was not some weird backdoor. </blockquote> 2026-10-17T00:55:27Z https://nostr.now/nevent1qqspgegtsvyu9w49trz8pxm4af3crl4yyk6rmuj22aw6rl999rckrtgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygpjvd68tmqz2maaw4zhrt422tz52nym670m0tzmn86nhpk0ew2j0g6wchck In reply to <a href='/nevent1qqsfvxws5gmq3h8gjlxlezfyre4muxgwk57g7wvp3dzxgq9nz3evq7scnxhdu'>nevent1q…xhdu</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qqsxwkuyle67y94tj378gw8w2xw2wa6nwmwlqhddlwnz0z7sztsaw2qn2rdgc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>waxwing</span> (<span class="italic">nprofile…rdgc</span>)</a></span> i hadn&#39;t seen anyone make the point that the proof of work headers stay untouched even if ECDLP falls. a flag day needs a height nobody can forge, and work gives you one. 2026-10-20T14:52:38Z https://nostr.now/nevent1qqsqgafw5g3sz6v8ex2kxzm65gud7nm8ft2nypsf8lwh9fgtqs5js4gpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr5t8fn8tmxqehsvm8cw7twdyxm82t073f5l8klf64hfhe0ypegnvlze79m In reply to <a href='/nevent1qqsqntlrf8736e0hegd7eh33096jd3qgepwsnm9z5sleuc7l5vkmm9s0kstjt'>nevent1q…stjt</a><br/>_________________________<br/><br/>Understood. Awesome! <br/><br/> 2026-10-17T07:38:12Z https://nostr.now/nevent1qqsrc5x9aydfm8s6raf672hj0wmreu0vhf8mpnvgdew47qhudy74yaspramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qg7c532 In reply to <a href='/nevent1qqswadghfzae2tnzwnef3ungjls5c8nven4knvkgp5le7ldq3gsr23cpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcv6unl9'>nevent1q…unl9</a><br/>_________________________<br/><br/>This is quite an eye opener considering Greg was one of the people who really investigated this back in 2013-14<br/><br/><a href="https://news.ycombinator.com/item?id=50125089">https://news.ycombinator.com/item?id=50125089</a><br/>I mean, even *he* isn&#39;t claiming they literally stole something, and the attribution barely matters. But still. 2026-10-17T00:51:58Z https://nostr.now/nevent1qqs8x3k82wp6hpez964f6c94270nk64qzew07hxa0c37at03af2jwugpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qm7sgyh In reply to <a href='/nevent1qqsqntlrf8736e0hegd7eh33096jd3qgepwsnm9z5sleuc7l5vkmm9sprfmhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhs79q75y'>nevent1q…q75y</a><br/>_________________________<br/><br/>And re: your last paragraph, yes, totally, you buy inbound liquidity, probably, just like you do now with an lsp. 2026-10-16T14:43:53Z https://nostr.now/nevent1qqsqntlrf8736e0hegd7eh33096jd3qgepwsnm9z5sleuc7l5vkmm9spramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qedp2pl In reply to <a href='/nevent1qqsfhwttwul4plz3zevknt0ypn39h5ndu0f00a70npwqlhaygx9htqspzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcd80tfk'>nevent1q…0tfk</a><br/>_________________________<br/><br/>The scenario is not so much &#34;I want to move from hub A to hub B&#34;. Not saying that isn&#39;t interesting, but, to give you the flavor of motivation behind &#34;we need to move money across hubs&#34;:<br/><br/>When I talk about different hubs I&#39;m mostly trying to address this scalability problem: if there was just one mega-hub, everyone would have to join it and it would have to have huge liquidity and if it ever went down everyone would be trying to broadcast their withdrawal transactions at once. Bad. So, Alice wants to be with hub1 and Bob wants to be with hub2. As the paper notes you can&#39;t do that on one ledger and have them minting the same btc-flavor as one could cheat the other. So, you could have them on different ledgers minting their own btc-flavor. Then the question is if only 1000 people are on hub1 and 1000 on hub2 the ability to pay people is way too limited (10k or even 100k could work, instead, but same principle). So you want to *pay* from one hub to the other, and you could do that easily *using atomic swaps cross-ledger*: hub2 has a balance with hub1. Anyone like Alice on hub1 who wants to pay Bob on hub2, pays him with a two-transaction chain: they pay hub2-on-hub1 but only after hashlocks are set up to ensure that Bob gets paid on hub2 at the same time. (A two-hop route, if you prefer). 2026-10-16T14:42:37Z https://nostr.now/nevent1qqsyhz44z9rfdrdu5a7j8v934vt6rd8xlvljm44sedje9mxpjfkrhmqpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qsgd3cv In reply to <a href='/nevent1qqsx9ywlpdjg8mmpfwcakucc7849458rj7n9u48jwmwah744mf6ftnqpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauq237yuq'>nevent1q…7yuq</a><br/>_________________________<br/><br/>Remember the risk with cashu servers/hubs isn&#39;t honoring withdrawals as much as, they just spend the bitcoin, since they can. OK I guess the distinction isn&#39;t important, in both cases as a user this only matters when you want to get money out.<br/><br/>But in trying to understand why lichen is different, remember that before the timeout of your contract with the hub (3 months, 6 months, whatever you choose), the money is locked in a 2 of 2: it can only go out by *you* producing a ZKP saying you&#39;re owed X, or to either you or the hub if either side can prove the other cheated, or all to the hub after the timeout if you go silent after 6 months. Things like &#34;payment from Alice on hub1 to Bob on hub2&#34; would work as classic swaps, with an intermediary (think hub2 having a balance on hub1 and your money flows through it. But that&#39;s another thing, the &#34;unruggable&#34; is about that 2 of 2 that you have with your hub. 2026-10-16T14:32:00Z https://nostr.now/nevent1qqszhgf6fh3hd5aql700ed9mndlleszuuspt65lmfne06pvylyufl6spramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qrch5kr In reply to <a href='/nevent1qqs2ct29luvte4rqfwac40ma6nfl5frrx8kym3gv7taatcehwmv8p7gpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcnvaqre'>nevent1q…aqre</a><br/>_________________________<br/><br/>Yeah claude helped me partly understand the subtle differences. Bit sleep deprived from travel rn, I&#39;m sure I&#39;ll get a better handle on it later 😄 2026-10-15T18:51:12Z https://nostr.now/nevent1qqs2ct29luvte4rqfwac40ma6nfl5frrx8kym3gv7taatcehwmv8p7gpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygx6kmrqvhzrnwd6lv9s78l45rrgyuauuhqetxjptzkk5uy9rag8kceazz9q In reply to <a href='/nevent1qqszmduve229aaears9gvsxavdns66g8559ryjrak9ua6k72cfusmnqmn0hry'>nevent1q…0hry</a><br/>_________________________<br/><br/>it is very much inspired by tlsnotary 2026-10-15T18:01:51Z https://nostr.now/nevent1qqsdpgrrcsmx7gxmywf3cq2ursha0lv7fnqdmrehqkfr9sw3rcfxvcgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygpjvd68tmqz2maaw4zhrt422tz52nym670m0tzmn86nhpk0ew2j0gz5s4cj In reply to <a href='/nevent1qqsf45l67cuswtcphg43u5p3wrs9f6h8dyq02vmm0lhr6jd4kphm6mqe0gzp9'>nevent1q…gzp9</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qqsxwkuyle67y94tj378gw8w2xw2wa6nwmwlqhddlwnz0z7sztsaw2qn2rdgc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>waxwing</span> (<span class="italic">nprofile…rdgc</span>)</a></span> fair, i mislabeled it. a ledger you can broadcast to over tor sounds closer to a sidechain than a mint, i&#39;ll read the paper. 2026-10-15T16:43:14Z https://nostr.now/nevent1qqstrxc8hh5gkvysxxxkhs4pjwgu90k335h8xhmht9ptv62lhx49e9spramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqyg8zz7ye0pgy3ms4mfn2k8zxxwux08g5r6tv2fsp0408kxv3eevyhytl49hs Lichen : a new L2 proposal from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1vadcfln4ugt2h9ruwsuwu5vu5am4xaka7pw6m7axy79aqyhp6u5q9knuu7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>waxwing</span> (<span class="italic">npub1vad…nuu7</span>)</a></span> Potentially more private than lightning. <br/><br/>Kimi K3 (with ppq.ai) tells me we&#39;d need to change some things for bitcoin on blake2b but that it&#39;d be doable... but Kimi might as well be speaking to me in Ancient Greek. <br/><br/>I hope someone has the time+smarts to look at this proposal. After reading more about the limits of privacy with lightning (such as with this article <a href="https://stacker.news/items/1562360">https://stacker.news/items/1562360</a> ), it seems that it would be great to have a more private L2. <br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1gkp4cdh5rktehjqjnqc09awey4302dpadlka6mes4fu5spes7fhqfsppqk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>nomadshiba</span> (<span class="italic">npub1gkp…ppqk</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1lh273a4wpkup00stw8dzqjvvrqrfdrv2v3v4t8pynuezlfe5vjnsnaa9nk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Luke Dashjr</span> (<span class="italic">npub1lh2…a9nk</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1g49uyac6d83sss7sln8aumsstle7m3wxwwvc8mmpqsnr8e9f2cdq6ltqvs" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>gojiberra</span> (<span class="italic">npub1g49…tqvs</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1x9q89st049pnuym57ch9kqkgzcu5dmff32wduwc4g9gnc2w3nlls8hcsg7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Tauri</span> (<span class="italic">npub1x9q…csg7</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub193jegpe9h0csh7al22mkcstqva2ygyny7ura8kwvrn4tsmtnl4lsrxny6k" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Deleted Account</span> (<span class="italic">npub193j…ny6k</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1qqqqqqzs0udz0dpa93ra5thgycmcmwsqw5qave53ltdrd75nrptqv5h62x" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Kilombino</span> (<span class="italic">npub1qqq…h62x</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1wl6kysagynfz2ulmw4wa2trnc9ycd52upjv9zt297n0tpr5ls7dqk5caw8" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>FreedomMoneyIsFuture</span> (<span class="italic">npub1wl6…caw8</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1wnlu28xrq9gv77dkevck6ws4euej4v568rlvn66gf2c428tdrptqq3n3wr" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrassFedBitcoin</span> (<span class="italic">npub1wnl…n3wr</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s33sw6y2p8kpz2t8avz5feu2n6yvfr6swykrnm2frletd7spnt5qew252p" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>BitcoinUniversity</span> (<span class="italic">npub1s33…252p</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1j6xf732v0kevuvfzp40k0863vmfgx4jp4h47wclqzmgkxx923ejqug69dc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Nedrek | XBT</span> (<span class="italic">npub1j6x…69dc</span>)</a></span><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1l79hvcyl23f90ers7xqh7zjzmm7knj7fqf6he3lhnfyc3gfuz7lqlfsqkt" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>7Bluerabbits</span> (<span class="italic">npub1l79…sqkt</span>)</a></span><br/><br/>#xbt #blake2b #sha256 #bitcoin #privacy #L2 #lightning<br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qgsxwkuyle67y94tj378gw8w2xw2wa6nwmwlqhddlwnz0z7sztsaw2qqyzjkd8sgx39ssffy8wky966e9hcns4gar4hv4a9zawysj87yvty866pe4lf" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…e4lf</a></span> </div> A follow up from recent ideas : Lichen[1]. You can have trustless withdrawal from an L2 based on liquidity in channels.<br/><br/><a href="https://groups.google.com/g/bitcoindev/c/yZEZ5P1lj5E">https://groups.google.com/g/bitcoindev/c/yZEZ5P1lj5E</a><br/><br/>I'll be interested to see opinions. I believe this can be built today. No consensus changes needed (op codes). The application I'd like to see it for is shielded transfers for good privacy, without some of the current impracticalities in proposed bridge designs.<br/><br/><a href="https://github.com/AdamISZ/lichen">https://github.com/AdamISZ/lichen</a> has a prrof of concept with a demo on regtest.<br/><br/>[1] another backronym 😄 .. L2 In CHannels ENforced by bitcoin. </blockquote> 2026-10-15T14:45:06Z https://nostr.now/nevent1qqsf45l67cuswtcphg43u5p3wrs9f6h8dyq02vmm0lhr6jd4kphm6mqpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qlk5uxu In reply to <a href='/nevent1qqsqdtde23q4esec2khxnjzj8yak6cs7w0fmqjtucp7ytnrw2rjy8cqpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcnkueds'>nevent1q…ueds</a><br/>_________________________<br/><br/>It&#39;s more zcash or monero style transfers inside, than ecash style, because it&#39;s transfers on an independent ledger. Ecash mints delink payment events; independent ledgers, you can just broadcast your tx p2p, from tor. Just a ledger/blockchain, with the exception you withdraw by interacting with the same guy you deposited at. Receiver doesn&#39;t have to be online.<br/><br/>Damn it&#39;s hard to describe this succinctly because it&#39;s a really a hybrid between an ecash server for btc, with its backing, but now trustless modulo an L2 consensus, and a sidechain for btc. All I can say is, read the paper.<br/> 2026-10-15T13:40:43Z https://nostr.now/nevent1qqsqdtde23q4esec2khxnjzj8yak6cs7w0fmqjtucp7ytnrw2rjy8cqpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygpjvd68tmqz2maaw4zhrt422tz52nym670m0tzmn86nhpk0ew2j0gyaruxz In reply to <a href='/nevent1qqszqregj9hxeelxfwqs6krklwmcy5xzry3v9t7yzl8e2mtnqpk5klq9et46e'>nevent1q…t46e</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qqsxwkuyle67y94tj378gw8w2xw2wa6nwmwlqhddlwnz0z7sztsaw2qn2rdgc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>waxwing</span> (<span class="italic">nprofile…rdgc</span>)</a></span> a guaranteed exit from the hub with ecash style transfers inside is a trade i would take 2026-10-15T13:04:15Z https://nostr.now/nevent1qqsx9ywlpdjg8mmpfwcakucc7849458rj7n9u48jwmwah744mf6ftnqpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr5t8fn8tmxqehsvm8cw7twdyxm82t073f5l8klf64hfhe0ypegnvvqr390 In reply to <a href='/nevent1qqszqregj9hxeelxfwqs6krklwmcy5xzry3v9t7yzl8e2mtnqpk5klq9et46e'>nevent1q…t46e</a><br/>_________________________<br/><br/>But that&#39;s (one of) the tricky part(s) of cashu right now, right? Once you &#34;burn&#34; the token and ask the hub/mint to pay an LN invoice to another hub (that then gives you a token there) the payment could fail. And it could be that the mint/hub just don&#39;t wanted to pay it or that it actually was not possible. Could it be made atomic with lichen? Or is the swap not through regular lightning but through lichen instead somehow? If a user that has a &#34;channel&#34; to hub A, sends balance to themselves in swap B, they are no longer in a trustless liveness+rugpull assumption right?<br/><br/>Disclaimer: I have not finish reading the paper dratf yet. <br/><br/> 2026-10-15T05:40:01Z https://nostr.now/nevent1qqsx49ff20gkxyep9agajjezwzr7dtezpmrs63ky8sz5ee6w6t3u95cpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqyg8zz7ye0pgy3ms4mfn2k8zxxwux08g5r6tv2fsp0408kxv3eevyhyqefwut An ecash mint which can&#39;t rug its users?<br/><br/>Yes, please sign me up!!<br/><br/>#privacy<br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qgsxwkuyle67y94tj378gw8w2xw2wa6nwmwlqhddlwnz0z7sztsaw2qqyr7awq85aknwtn3cmzve7td5dfwwh8fy5lydqu425pfpphj42n4k68xueda" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…ueda</a></span> </div> It's not fully developed yet, but the idea is: once you're on L2 you could/would have better privacy than Lightning, for transfers *inside* it, but your deposit and withdrawals are with the same one hub, which is worse(even that maybe isn't clear).<br/><br/>A more interesting comparison, in some ways, is ecash servers like cashu. They delink deposits and withdrawals, so they have really good privacy, but the server can rug the users' money. Here you're guaranteed to get your money out. </blockquote> 2026-10-15T03:59:28Z https://nostr.now/nevent1qqspkddauqqvtz2tnj2d3t7207ppnx5zwfhyuutr2kfw2nygkxveyrspramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqyg8zz7ye0pgy3ms4mfn2k8zxxwux08g5r6tv2fsp0408kxv3eevyhy4jryd4 In reply to <a href='/nevent1qqs0m4cq7nk6deww8rvfn8edk349e6uayjnu35rj42s9yyx7242wkmgccgh0t'>nevent1q…gh0t</a><br/>_________________________<br/><br/>Oh, that sounds great!! An ecash mint that can&#39;t rug its users seems really good. Thank you! I&#39;ll be trying to follow along. 2026-10-15T03:58:09Z https://nostr.now/nevent1qqs0m4cq7nk6deww8rvfn8edk349e6uayjnu35rj42s9yyx7242wkmgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qlzsyg2 In reply to <a href='/nevent1qqsqlx6lfmfncqshlc98zkxtsk33rpta6040av2tdwpq5q06d03g4rqpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtc8kv5df'>nevent1q…v5df</a><br/>_________________________<br/><br/>It&#39;s not fully developed yet, but the idea is: once you&#39;re on L2 you could/would have better privacy than Lightning, for transfers *inside* it, but your deposit and withdrawals are with the same one hub, which is worse(even that maybe isn&#39;t clear).<br/><br/>A more interesting comparison, in some ways, is ecash servers like cashu. They delink deposits and withdrawals, so they have really good privacy, but the server can rug the users&#39; money. Here you&#39;re guaranteed to get your money out. 2026-10-14T21:41:28Z https://nostr.now/nevent1qqsqlx6lfmfncqshlc98zkxtsk33rpta6040av2tdwpq5q06d03g4rqpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqyg8zz7ye0pgy3ms4mfn2k8zxxwux08g5r6tv2fsp0408kxv3eevyhy9fec2e In reply to <a href='/nevent1qqszuhdslmavefjwrd2pnq584fzsd63nrnpzq3yejr4x36zd82d4rdg43wh7d'>nevent1q…wh7d</a><br/>_________________________<br/><br/>For the slow people in the back of the room, could you please compare this model to lightning for privacy? <br/><br/>I&#39;m mostly interested in privacy and everything I read seems to show that Ark (and Spark) are worse than lightning for privacy, and that even lightning is actually pretty weak for privacy. <br/><br/>So I&#39;m hoping for a better layer 2 for that. Is it Lichen?<br/><br/>#lichen #privacy 2026-10-14T21:00:16Z https://nostr.now/nevent1qqst87ahad9zsvm762qltlrpq9j7vyq7knvrax2vt3jvk3mp9cqgq7qpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qhjmjuc In reply to <a href='/nevent1qqsqqq8emah2u8m57tue9fjfs6j5qnwx7xq3npksg6n7mqvqdpu5vkgpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtc0kpde3'>nevent1q…pde3</a><br/>_________________________<br/><br/>You&#39;re thinking of MuSig(2), which is indeed a cool watly to do multisig. I&#39;m talking here specifically about using CHECKSIGADD in taproot *leaves*. Different thing.<br/><br/>The taproot change included *both* Schnorr sigs in BIP340, which enables MuSig2, but also script trees, which enables the selective revelation I mentioned above. 2026-10-14T07:43:03Z https://nostr.now/nevent1qqs93pm4fjq50rq7gtq7my6qdk7gffnkfmuwahtd84ppjjym5r03jecpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qjv36jl In reply to <a href='/nevent1qqsylzddwtx9asskwy9uh9m9g3kqfdm227wuz2mawf320m9pt4rxfhcpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtc0duxua'>nevent1q…uxua</a><br/>_________________________<br/><br/>Oh, right, got it. There&#39;s the argument that you can test the procedure with different keys. But your point is still very valid. 2026-10-14T01:02:56Z https://nostr.now/nevent1qqsp904cjws4we554leuq2d43wgukvr657w8m24vsacc3gt5r8hj75gpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qpfcmww In reply to <a href='/nevent1qqsz7xh8hdezv0fp0w9capyk6c4as20q7nm5dk9yksgq0apduj5vwyspramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqgd9wmu'>nevent1q…9wmu</a><br/>_________________________<br/><br/>You absolutely do need to do test txs! Maybe i missed the context of your comment though. 2026-10-14T00:12:03Z https://nostr.now/nevent1qqsylzddwtx9asskwy9uh9m9g3kqfdm227wuz2mawf320m9pt4rxfhcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygz9x4235sp8rvze4wftw8n6kl58qqrp5tv3krfq7vf7lqhs2t4ss5uzp7ts In reply to <a href='/nevent1qqsp904cjws4we554leuq2d43wgukvr657w8m24vsacc3gt5r8hj75g0395fv'>nevent1q…95fv</a><br/>_________________________<br/><br/>The context is that if you never spend from a multisig, the attacker can never steal your funds because he doesn&#39;t have the requisite pubkeys to construct a transaction, even with 2 out of 3 keys for example in a multisig quorum.<br/><br/>The downside is, you don&#39;t know if you really set your setup correctly so you are (in my opinion) at a minimum at risk of being undertrained on how to shoot your monetary gun and at worst footgunning yourself with significant funds. 2026-10-14T00:57:57Z https://nostr.now/nevent1qqsz7xh8hdezv0fp0w9capyk6c4as20q7nm5dk9yksgq0apduj5vwyspramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygz9x4235sp8rvze4wftw8n6kl58qqrp5tv3krfq7vf7lqhs2t4ss5w3uzls In reply to <a href='/nevent1qqsqqq97dvfh3v8vhpl770c8vaxkr6a0efwk6ev4aepxu2q5nkp7lpcpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtchj0urt'>nevent1q…0urt</a><br/>_________________________<br/><br/>The issue is: do you want to never even do a test txn? Personally that makes me anxious. 2026-10-13T20:39:19Z https://nostr.now/nevent1qqsqqq85z4knzl3ql0rhswvjjnlutzq5l3jfg8dlwqa7m0zzxfsfw4qpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygry4n6q2hagy672hpzhuf8037a8fy9tk8nkmw4k42r49ff6p66dfgr4jdw9 In reply to <a href='/nevent1qqs87sytvt70rnqrwqp0cpvlz5cgpcv3pwzhccccd9ffvg39265ytcgpzpmhxue69uhkummnw3ezuamfdejsve8xh8'>nevent1q…8xh8</a><br/>_________________________<br/><br/>Meaning quorom is enough to spend on it&#39;s own without a bunch of extra work. Just a single spend necessary. 2026-10-13T20:17:28Z https://nostr.now/nevent1qqsqqq8emah2u8m57tue9fjfs6j5qnwx7xq3npksg6n7mqvqdpu5vkgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygry4n6q2hagy672hpzhuf8037a8fy9tk8nkmw4k42r49ff6p66dfguu68cs In reply to <a href='/nevent1qqs87sytvt70rnqrwqp0cpvlz5cgpcv3pwzhccccd9ffvg39265ytcgpzpmhxue69uhkummnw3ezuamfdejsve8xh8'>nevent1q…8xh8</a><br/>_________________________<br/><br/>Taproot collapses pubkys into a unified key, eliminating the need to have discovered every single pubky individually. 2026-10-13T20:16:46Z https://nostr.now/nevent1qqs8psp7mtkmne4kxlam828uhmk6rqjjkjh37n4u4k3t3a5cjsjnd6qpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qxgwnpn In reply to <a href='/nevent1qqsqqq97dvfh3v8vhpl770c8vaxkr6a0efwk6ev4aepxu2q5nkp7lpcpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtchj0urt'>nevent1q…0urt</a><br/>_________________________<br/><br/>If you have all 3 pubkeys, you only need 2 of 3 signatures (or private keys ofc) to get the money. You may or may not have access to the pubkeys, it depends. But clue is in the name: they&#39;re *public* keys, called that for a reason. 2026-10-13T19:39:22Z https://nostr.now/nevent1qqs87sytvt70rnqrwqp0cpvlz5cgpcv3pwzhccccd9ffvg39265ytcgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9q0zdt5z In reply to <a href='/nevent1qqsqqqxc3r5x5259c7y6c80zmrwgd9sweep4pglgwlqxk7ega87eeqgpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtczuvm06'>nevent1q…vm06</a><br/>_________________________<br/><br/>But I was saying it strengthens it? One leaf exposes A,B. One exposes A,C. And one exposes B,C. So onchain you only see the 2 that signed, not the 3rd. Pretaproot you see all 3, in every signing event.<br/><br/>But now I&#39;ve written that out, it only helps in terms of blockchain publishing I think. If you literally own 2 of 3 devices, you clearly will be able to see all 3 pubkeys. 2026-10-13T20:06:11Z https://nostr.now/nevent1qqsqqqxc3r5x5259c7y6c80zmrwgd9sweep4pglgwlqxk7ega87eeqgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygry4n6q2hagy672hpzhuf8037a8fy9tk8nkmw4k42r49ff6p66dfgyp0puc In reply to <a href='/nevent1qqsq323j0fqha6ng26dydfprn025xulafacqvr4al8hv5fgqmygv7tcpzpmhxue69uhkummnw3ezuamfdejsh5dsu9'>nevent1q…dsu9</a><br/>_________________________<br/><br/>Taproot does weaken remote theft defense... surprisingly. 2026-10-13T19:53:08Z https://nostr.now/nevent1qqsq323j0fqha6ng26dydfprn025xulafacqvr4al8hv5fgqmygv7tcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qfzlnzr In reply to <a href='/nevent1qqsqqqq8hn97fd3hdpckd2mf2rvl65r0qrt6nf9ylpqu66mkcp45t3spzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcvgz54l'>nevent1q…z54l</a><br/>_________________________<br/><br/>IIRC taproot affects this. Pre taproot it was impossible to sign m of n multisig without exposing all n pubkeys. In taproot, it is, with leaves. It&#39;s complicated but in old school multisig with 2 of 3 devices, each one has to know the others&#39; pubkeys, so owning 2 devices is definitely enough. 2026-10-13T19:47:28Z https://nostr.now/nevent1qqsqqqq8hn97fd3hdpckd2mf2rvl65r0qrt6nf9ylpqu66mkcp45t3spramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygry4n6q2hagy672hpzhuf8037a8fy9tk8nkmw4k42r49ff6p66dfg5aw83q In reply to <a href='/nevent1qqs8psp7mtkmne4kxlam828uhmk6rqjjkjh37n4u4k3t3a5cjsjnd6qpzpmhxue69uhkummnw3ezuamfdejsr0udqq'>nevent1q…udqq</a><br/>_________________________<br/><br/>Right, but they wouldn&#39;t have all 3 pubkeys on a multi-vendor quorum unless they pwned all three vendors.<br/><br/>Barring that, users would could tell on themselves by spending, since the pubkys are revealed in multisig spends. 2026-10-13T19:43:50Z https://nostr.now/nevent1qqsxtdzmhk56d9jddglfkp8x8lau4j8czlc7mawfqd7zuu9m5y564rgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qy4uz6t In reply to <a href='/nevent1qqs9tklpjwdufhpf0xlxrwxk4mpq5v2r8z8rwd6glrfsxpm208mdvdcpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcsdru03'>nevent1q…ru03</a><br/>_________________________<br/><br/>It&#39;s certainly a good idea to make sure it doesn&#39;t accidentally connect to an unsecured network. Or maybe like live in a farmhouse or something 😄<br/><br/>The thing is, what&#39;s your actual threat model? Anything is *possible*, but what&#39;s plausible. 2026-10-13T18:30:15Z https://nostr.now/nevent1qqsqqq97dvfh3v8vhpl770c8vaxkr6a0efwk6ev4aepxu2q5nkp7lpcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygry4n6q2hagy672hpzhuf8037a8fy9tk8nkmw4k42r49ff6p66dfg5wkca0 In reply to <a href='/nevent1qqstuwexlzpkfj77gs3csucj47vux3q3p0v3p80lw3s4v8zv875qptspzpmhxue69uhkummnw3ezuamfdejsdxnqam'>nevent1q…nqam</a><br/>_________________________<br/><br/>Yeah, it looks like you&#39;d need to compromise ALL THREE keys in a 2-of-3 to pwn a multisig setup:<br/><br/>&#34;Without the third key, brute force is off the table — two to the two hundred fifty-six curve points is eight and a half septillion universe-ages at a trillion derivations per second, so that&#39;s not a strategy, that&#39;s a surrender. What a remote attacker actually does is rank four moves. First, passive waiting: any spend by the owner broadcasts the third pubkey in the witness script, and from that moment the drain is trivial — one combination, seconds. Second, a one-pass chain scan for co-appearing pubkeys, which only surfaces wallets that already spent, so it&#39;s a partial map of a corpse, not a live target list. Third, if the third key came from a different compromised population — say another reseller batch with a million devices — the search space is pairs times that population, roughly forty-five billion combinations at a million devices, which is hours on a serious GPU cluster but not impossible. Fourth, go after the descriptor through the coordinator software, a cloud backup, or phishing the backup location — because if the descriptor leaks, everything collapses to one combination regardless of keys. The uncomfortable truth is the multisig&#39;s real defense isn&#39;t the math, it&#39;s that the third key&#39;s absence makes the attacker&#39;s job a waiting game or a metadata hunt, and both of those are things the owner controls by not spending and keeping the descriptor offline.&#34; 2026-10-13T19:34:38Z https://nostr.now/nevent1qqsqqq9gg0v58rkyf9rng5ew9w3qvp223sckpn5wtypczuntuzk6a7gpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygry4n6q2hagy672hpzhuf8037a8fy9tk8nkmw4k42r49ff6p66dfg0her59 In reply to <a href='/nevent1qqstuwexlzpkfj77gs3csucj47vux3q3p0v3p80lw3s4v8zv875qptspzpmhxue69uhkummnw3ezuamfdejsdxnqam'>nevent1q…nqam</a><br/>_________________________<br/><br/>Yes but it is still an order of magnitude harder to compromise multisig even if you manage to, in a single operation, compromise two vendors.<br/><br/>It&#39;s not as simple as adding two seeds together, however with AI it&#39;s probably possible to automate now. I would have to have the complexity calculated. 2026-10-13T19:30:22Z https://nostr.now/nevent1qqs9tklpjwdufhpf0xlxrwxk4mpq5v2r8z8rwd6glrfsxpm208mdvdcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygpamppp8sm6ma4hd8ytgg46qsuafnzdr2p45npytpen04secprvcqjlslws In reply to <a href='/nevent1qqstkqpehknh55jdjhm3x50nydj22e2n4rkhxhjxdlgxzkac7u6weagpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtc0ztc4v'>nevent1q…tc4v</a><br/>_________________________<br/><br/>Yes physically disabling in bios with password protection, then uninstalling the driver set in Linux with w password protected kernel is probably sufficient 2026-10-13T17:50:55Z https://nostr.now/nevent1qqstkqpehknh55jdjhm3x50nydj22e2n4rkhxhjxdlgxzkac7u6weagpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qrg3zq6 In reply to <a href='/nevent1qqs8g4tcpedjydd88psp4zenj6t02f9keuyc2n4kk2q5ma676a59ycgpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcjwcutz'>nevent1q…cutz</a><br/>_________________________<br/><br/>It&#39;s sort of the wrong question? I mean this isn&#39;t exactly true but it&#39;s a fun thought: suppose I gave the &#34;obviously correct&#34; hardware and software choice. Then, everyone would use that, and attackers would have at least a specific target (that is FAR from a watertight argument, but it&#39;s a fun/interesting one).<br/><br/>Fwiw i think it&#39;s easier to be network-disconnected on laptops and desktops, than on phones. I think that should count for something. 2026-10-13T15:50:32Z https://nostr.now/nevent1qqsze03aj87fns2feuhypgew6t7psqukzc48frjfw35aetm4fa0ks9qpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygrxsyng4nj8fr2p5n8uc8nyqphmjddmcdvhs2eajcglvn23ce6jmymky8yu In reply to <a href='/nevent1qqszg9z7gqu0vtw856ek69q2vyefrly7ct2scq8m3v2frhe3ywhpyespzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtces0mnf'>nevent1q…0mnf</a><br/>_________________________<br/><br/> <img src="https://npub1v6qjdzkwgaydgxjvlnq7vsqxlwf4h0p4j7pt8ktprajd28r82tvs54nzyr.blossom.band/d6e336d8431b45656dde770591678ddac122a804188a2c088f3a8cff96898711.png"> 2026-10-13T14:11:39Z https://nostr.now/nevent1qqst7cvlp9mw42t5rnvaxs2xfp7ngk335fqqpw099a6le9qzdeggjjspramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygp82p2zrsng7d3s0zl4gqxksfemnpc73c6jv07ug5exqqp9atelzv6pck25 In reply to <a href='/nevent1qqsy8t7jksv2ngxvs7rptcxa26yhwndt69a26w87ww75levsnzy5gfq2t0xvy'>nevent1q…0xvy</a><br/>_________________________<br/><br/>nice arc. watch-only was the real unlock there.<br/><br/>hardware wallets are useful, but “tiny magic box = safe” made people skip backups, restore tests, and threat modeling. bad trade. 2026-10-13T14:10:36Z https://nostr.now/nevent1qqs8g4tcpedjydd88psp4zenj6t02f9keuyc2n4kk2q5ma676a59ycgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygqgkv5t27s8apss34a06pw2z3z6c64q5z2av92vkt6rg7774w7mnyr96em6 In reply to <a href='/nevent1qqsy8t7jksv2ngxvs7rptcxa26yhwndt69a26w87ww75levsnzy5gfq2t0xvy'>nevent1q…0xvy</a><br/>_________________________<br/><br/>Without revealing much I’m curious what you like using as far as hardware and software. Would be helpful to know what has worked for you 2026-10-13T14:09:41Z https://nostr.now/nevent1qqszg9z7gqu0vtw856ek69q2vyefrly7ct2scq8m3v2frhe3ywhpyespramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygrxsyng4nj8fr2p5n8uc8nyqphmjddmcdvhs2eajcglvn23ce6jmyevt8yt In reply to <a href='/nevent1qqs90g2pgt68txzajv7ggm4lynewappsdmn9hawxr09tx05wegdmr8qpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcxvxtcr'>nevent1q…xtcr</a><br/>_________________________<br/><br/>I remember doing some coinjoin with it after lot of errors. I was not aware of the bugs and assumed it did work and provided some privacy. 2026-10-13T13:59:43Z https://nostr.now/nevent1qqszuhdslmavefjwrd2pnq584fzsd63nrnpzq3yejr4x36zd82d4rdgpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9q5hjwzp Here&#39;s what withdrawal looks like when the hub has gone offline. There are 2 such transactions. Each about 10kvb, a mere 40kB of witness/script 😄 (seriously though: big, but not a problem at all).<br/><br/><a href="https://mutinynet.com/tx/5193b49e0c3bc62a5a72636b0a28ef83a279effb6f5ed79dcaaa632912a72ff8?showDetails=true">https://mutinynet.com/tx/5193b49e0c3bc62a5a72636b0a28ef83a279effb6f5ed79dcaaa632912a72ff8?showDetails=true</a><br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qqstv4yktd0yl4j5erxthswewcv8qyh36pqc5hurt89uwqfssmh7vkcprfmhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhsygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qpsgqqqqqqsrpcrcg" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…crcg</a></span> </div> Doesn't look like much (because it isn't! lol), but here is the first ever withdrawal from a lichen on a public network :<br/><br/><a href="https://mutinynet.com/tx/0a1efc47e251e32dab3d57d1ef0052f9f55b5ef6527ecc0b65957d5f69652338">https://mutinynet.com/tx/0a1efc47e251e32dab3d57d1ef0052f9f55b5ef6527ecc0b65957d5f69652338</a><br/><br/>Alice deposited 30k sats into the L2 for a 2 week timeframe, paid Bob 5k, then withdrew 20k. Now Bob has 5k sats more and Alice has 5k sats left. Alice's leftover 5k sats in this case are in "credit" mode: she can't exit them any more independently, she'd have to sell them to someone else. In general, she won't do this; she'll withdraw everything when she withdraws, that's the simplest, or just "novate" : when she wants to withdraw she'll negotiate a new contract to replace the first one.<br/><br/>Also it won't be very practical to use 10k sat type deposits in a real deployment. Like 400k and up is my guess. Of course L2 txs can be v. small.<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qqs22e57pq6ykzp9ysa6cshttyklzwz4r5wkajh55t4cjzglc33vslgprfmhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhsygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qpsgqqqqqqsyl7r22" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…7r22</a></span> </blockquote> 2026-10-13T13:25:55Z https://nostr.now/nevent1qqstv4yktd0yl4j5erxthswewcv8qyh36pqc5hurt89uwqfssmh7vkcpramhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhkjmnzdauqygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qsjnupk Doesn&#39;t look like much (because it isn&#39;t! lol), but here is the first ever withdrawal from a lichen on a public network :<br/><br/><a href="https://mutinynet.com/tx/0a1efc47e251e32dab3d57d1ef0052f9f55b5ef6527ecc0b65957d5f69652338">https://mutinynet.com/tx/0a1efc47e251e32dab3d57d1ef0052f9f55b5ef6527ecc0b65957d5f69652338</a><br/><br/>Alice deposited 30k sats into the L2 for a 2 week timeframe, paid Bob 5k, then withdrew 20k. Now Bob has 5k sats more and Alice has 5k sats left. Alice&#39;s leftover 5k sats in this case are in &#34;credit&#34; mode: she can&#39;t exit them any more independently, she&#39;d have to sell them to someone else. In general, she won&#39;t do this; she&#39;ll withdraw everything when she withdraws, that&#39;s the simplest, or just &#34;novate&#34; : when she wants to withdraw she&#39;ll negotiate a new contract to replace the first one.<br/><br/>Also it won&#39;t be very practical to use 10k sat type deposits in a real deployment. Like 400k and up is my guess. Of course L2 txs can be v. small.<br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qqs22e57pq6ykzp9ysa6cshttyklzwz4r5wkajh55t4cjzglc33vslgprfmhxue69uhhyetvv9uju6r0v3kxymmpwfjzummjvuhsygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qpsgqqqqqqsyl7r22" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…7r22</a></span> </div> A follow up from recent ideas : Lichen[1]. You can have trustless withdrawal from an L2 based on liquidity in channels.<br/><br/><a href="https://groups.google.com/g/bitcoindev/c/yZEZ5P1lj5E">https://groups.google.com/g/bitcoindev/c/yZEZ5P1lj5E</a><br/><br/>I'll be interested to see opinions. I believe this can be built today. No consensus changes needed (op codes). The application I'd like to see it for is shielded transfers for good privacy, without some of the current impracticalities in proposed bridge designs.<br/><br/><a href="https://github.com/AdamISZ/lichen">https://github.com/AdamISZ/lichen</a> has a prrof of concept with a demo on regtest.<br/><br/>[1] another backronym 😄 .. L2 In CHannels ENforced by bitcoin. </blockquote> 2026-10-12T21:52:24Z