Liana Wallet

GM. Timelocks are cool.

How quantum computing affects Bitcoiners, Part II

The second part of our summary of Chaincode Labs' excellent paper on Bitcoin and quantum resistance.

Migration strategies and the burn vs steal debate.

Bitcoins that are locked in addresses with publicly-revealed public keys are most vulnerable to theft from future quantum computers:

• Satoshi's coins
• Other early coins that may be lost
• Reused addresses

Researchers estimate that there are 6 million such vulnerable bitcoin

It's not just Satoshi's coins and coins with lost keys that are vulnerable

Some prominent examples of addresses with exposed public keys are yellow highlighted in this image from

's article on quantum resistance:

https://blog.lopp.net/against-quantum-recovery-of-bitcoin/

Ideally, we come up with a way to make all coins safe from quantum attack

All quantum resistance proposals currently require that users send their coins to new, quantum resistant addresses

There are ~190 million UTXOs

The good folks at Chaincode Labs pulled together research on how long it might take to migrate everyone's bitcoin to quantum resistant addresses

Estimates vary between 140 and 560 days

This is one very strong reason to start working on this problem long before it becomes a problem

There are a number of proposals for how this migration could work:

But all of them first require a soft fork or hard fork to introduce new quantum resistant address types

Commit-Delay-Reveal (CDR) has users create a quantum-resistant tx with an op-return that references the public key of their vulnerable coins

A soft fork then enforces a time delay before the coins can be moved by a 2nd tx that is signed by the original key and the op-return key

Quantum Resistant Address Migration Protocol (QRAMP) proposes a hard fork that enforces a flag day beyond which coins in quantum vulnerable addresses can no longer be spent

QRAMP could be used in combination with proposed BIP 360: pay to quantum resistant hash addresses

Hourglass strategy

A soft fork enforces a new rule that only a certain number of txs spending from quantum vulnerable addresses may be included in any one block

This slows the rate at which such coins could be stolen (or spent)

Might also generate a lot of fees for miners

In addition to the question of how Bitcoin achieves quantum resistance, there is also this:

What happens to the coins to which nobody has the keys?

Some proposals permanently freeze them while others leave them up for quantum theft.

Burn or steal?

The burn argument goes like this: Sure we don't want to prevent anyone from spending their coins, but this is a clear vulnerability: coins that the protocol guarantees as safe can be stolen.

Therefore, permanently freezing the lost coins best maintains Bitcoin's rules

The steal argument goes like this: Bitcoin is built on enforcing the sovereignty of key-owners. Changing the protocol to freeze some coins violates this important value.

Bitcoin should never change its rules such that we risk preventing a user from spending their coins.

Where does this leave us?

Making Bitcoin quantum resistant requires

1. A soft fork
2. Migrating all coins to new addresses
3. Tough decisions about what to do with coins that can't migrate

Bitcoin has so many stakeholders at this point that such an undertaking will clearly be slow

Even if you think that quantum computing is far overhyped, we really should start moving on it.

The best thing you can do is educate yourself. Read Chaincode Labs' paper here:

https://chaincode.com/bitcoin-post-quantum.pdf

Huge props to Clara Shik and

for their work!

GM. Ask somebody to pay you in Bitcoin today.

How quantum computing affects Bitcoiners 🧵

Summarizing Chaincode Labs' excellent recent paper on the topic

tl;dr 😅 Quantum computers do not pose a threat to Bitcoin today 😰 But many researchers agree they will in the next 5 - 10 years 🧐️ Bitcoiners should start working on mitigations

Here's how quantum computers could threaten Bitcoin:

An everyday computer can derive a public key from a Bitcoin private key in a few microseconds

But the reverse is much more difficult:

Today's supercomputers would take ~100 quadrillion years to find the private key for a known public key

Quantum computers could theoretically derive a Bitcoin private key from a known public key in just a few hours

So the primary risk quantum computing poses to Bitcoiners is for situations where the public key to your coins has been exposed

How might that have happened?

Long-range quantum attacks:

Some address types expose their public key:

Pay to public key Pay to multisig Pay to Taproot

Since these public keys are exposed as soon as the address receives coins, quantum computers may be used to derive their private keys and steal the coins

Short-range quantum attacks:

When you spend bitcoin, you reveal the public key for the coins in your transaction

A quantum computer may be used to derive their private key and spend them in a new transaction with a higher fee before your transaction is included in a block

Address reuse:

Coins that reuse an address from which other coins have already been spent may also be vulnerable to theft because the previous spends revealed the address's public key

A quantum computer may be used to derive private keys to any coins still at a reused address

Exposed xpubs:

Many services request that Bitcoiners provide an extended public key (xpub) used to generate addresses

If such an xpub is leaked, all addresses generated by that xpub may become vulnerable to having their private keys derived by a quantum computer

Advances in quantum computing could also affect mining:

Quantum computers may slightly weaken the security of the SHA256 hash function used in mining, but it is unlikely they could break it

This means Proof of Work is probably still reliable in a quantum computing future

However, quantum miners may be subject to much stronger centralization pressures:

the best quantum hardware "would gain a disproportionate speedup, eliminating the incentive for less powerful quantum miners - as well as those who lack quantum computers - to participate"

Quantum resistance

Fortunately, there are a number of feasible proposals for how Bitcoin could become resistant to quantum attacks

Unfortunately, most of them involve using much larger signatures (read: quantum resistant spending might mean you pay a lot more in mining fees)

Tomorrow, we'll look at the second half of Chaincode's paper: Migration strategies and the big question facing Bitcoiners: burn or steal?

Read the full Chaincode report at: https://chaincode.com/bitcoin-post-quantum.pdf

And be sure to follow the report's authors: Clara Shik & ozdeadman

Liana v11 is out! Lots of great new features including

• Multiwallet support
• Coin control during recovery process
• SD card air gap support for Coldcard and Krux signers
• View all previously generated unused addresses
• and more!

Check out the release blog post: https://wizardsardine.com/blog/liana-11.0-release/

Liana v11 is out! Now with multiwallet, SD air gap support for Coldcard and Krux, and coin control during recovery flow.

Check it out: https://wizardsardine.com/blog/liana-11.0-release/

Liana Wallet v11 is here adding some of our most user-requested features:

• Multiwallet support
• Coin control during recovery
• SD card air gap support for Coldcard and Krux
• Much more!

👉️ Check out the release blog post: https://wizardsardine.com/blog/liana-11.0-release/ 👉️ Or download Liana Wallet and start playing around (we support Signet and Testnet in case you just want to give it a test run): https://wizardsardine.com/liana

Seedless or not, sharing your keys with a provider always has privacy implications.

What would you get Satoshi for a birthday present?

Today is a good day for a reminder:

Not your keys, nacho bitcoin.

(reminder works better if you have your sound up)

Want to learn more about timelocked recovery keys and how they can change the security trade-offs for your backups?

We wrote an article about it. Check it out 👇

https://wizardsardine.com/blog/what-is-a-bitcoin-recovery-key/

GM. We're cooking away here: Liana v11 should be out soon!

Reasons to use Liana Wallet:

🌱️ Free, open source 🌱️ Easy multisig templates 🌱️ Signet for testing 🌱️ One-click node install 🌱️ Coin control 🌱️ Taproot addresses 🌱️ Labels BIP 329 🌱️ Dark mode only

...and it supports miniscript so you can do things like timelocks and expanding multisigs

Nacho Bitcoin - the music video Feat. Blackrock, Coinbase & Friends

Sound up 🔊

Great reminder to have a Bitcoin inheritance plan.

🎶️🎥️ Check out our new #Bitcoin music video:

Nacho Bitcoin Feat. Blackrock, Coinbase & Friends

Hey folks 👋

Our product manager is looking to chat with a few more Bitcoiners about self-custody and inheritance - what gives you peace of mind, what keeps you up at night, and what you wish existed.

You don’t need to be a Liana user - we’re just trying to learn from real setups and real concerns so we can build something truly useful.

If you’re up for a quick 30 min call with me, feel free to grab a time here:

👉 https://calendly.com/manuel-wizardsardine/30min

Appreciate it! 🙏

GM. Tired of pizza? How about nachos...

Nacho Bitcoin (the music video) feat. Blackrock, Coinbase & Friends

GM. Pineapple and jalapenos is good pizza.

Use money that isn't headed for extinction. #Bitcoin

There's going to be a whole panel on our favorite topic at the

!

Check it out:

Gotta admit, we're getting pretty excited for the

!

We've been working on something special for the PoWies!

See you there!

GM. Your money is headed for extinction. Learn how to use money that isn't: #Bitcoin

GM. You can start holding your own #Bitcoin keys with just a few dollars worth of bitcoin.

Free Cold Storage Sanity Checks!

Only five slots left: Liana Wallet is offering a free cold storage security audits/sanity checks to Bitcoiners who participate in a 10 minute user interview with our head of product, Manu.

If you've been wondering whether there is something you overlooked in your cold storage setup or you'd just like to know what self-custody best practices are, we're happy to help out!

• You do not have to be a Liana Wallet user
• You do not have to be super technical

Book a slot 👇️

https://calendly.com/manuel-wizardsardine/30min

Liana Wallet is looking for 10 Bitcoiners who are willing to hop on a call with our head of product to tell us what they find most frustrating about Bitcoin self-custody. We want to know what is the biggest source of anxiety in your cold storage setup.

• you do not have to be a Liana Wallet user
• you don't have to be technical

In exchange for your time, we're happy to offer a security audit of your current setup, if you'd like a high-level sanity check to make sure you haven't overlooked any serious flaws.

If you're interested in helping us out, head on over to the link below and pick a convenient date/time:

https://calendly.com/manuel-wizardsardine/30min

GM. Not your keys, not your coins.

GM. Don't talk about the size of your stack! https://blossom.primal.net/492339f9468a7f58022e72cdb0b4c62fefc87c7ffc17b3aee937147faa2fe6e1.png

GM. Today is a good day to hold your own keys.

GM. Have you spent more time reading/talking about op_return limits than you have setting up an inheritance plan and teaching your family how to recover your coins?

It seems we are sticking with a space theme today...

GM. #Bitcoin https://blossom.primal.net/905d43a744e889409b564c1247ae014985b39d710948cb6a4e6169df8e2df22f.jpg

be there or be square!

proof of tutorial work

moar bitcoin tv!

Not today, waste hauling vehicle!

Use a #Bitcoin wallet with a timelocked recovery key and give yourself a backup plan for your backups. https://blossom.primal.net/fe13ff9256c87fd6c3e59771de58080185e3760fbdcc87f7b0057ad3d28be5f1.jpg

Not today, silly old bear!

Use a #Bitcoin wallet with a timelocked recovery key and give yourself a backup plan for your backups. https://blossom.primal.net/ad45830cb16cd48ab287666b8d0d2a5a7e1058802271e4b1462963b42b2a5d7c.jpg

Not today, uncouth ogre!

Use a #Bitcoin wallet with a timelocked recovery key and give yourself a backup plan for your backups.

Not today, little do-gooder hobbit!

Use timelocked recovery keys for your coins and prevent destructive halflings from ruining your day.

Have you ever used a timelock to lock bitcoin?

Attempting to settle an internal debate.

Answer here: https://stacker.news/items/969247

GM. Not your keys, not your coins.

For a more technical background on the current filter/mempool policy debate, check out this by Antoine Poinsot:

https://antoinep.com/posts/relay_policy_drama/

What is the difference between a filter and a bitcoin consensus rule?

Recently, Peter Todd proposed removing Bitcoin Core's 83-byte limit on op_returns. Is this changing Bitcoin?

The limit isn't a consensus rule, so it doesn't change what can go in blocks or what is in a valid transaction--which might make you wonder Why are there Bitcoin rules that aren't consensus rules?

Turns out there is a big difference between consensus rules and mempool policies like these (also called standardness rules or transaction filters). Understanding the discussion around removing the op_return limit is a lot easier when we are clear on what this difference is.

Let's start with the role nodes play in the Bitcoin network.

🖥️ A node is just a computer

A node downloads blocks and runs the math to check that all the transactions follow the consensus rules of Bitcoin.

While it may not sound like much, this plays a crucial role in keeping Bitcoin decentralized and free from any single party's control.

Anyone can run a node (it doesn't take a special computer or very much technical experience). Running a node lets you see for yourself that the coins you receive are real and follow the rules as you understand them. It's kind of like having your own inhouse gold assayer, but for bitcoin.

🌐 Bitcoin really is a network

Nodes also play another important role: they relay newly mined blocks and new transactions that haven't made it into blocks yet.

All around the world, there are tens of thousands of computers sharing new blocks that have just been mined and new transactions that have just been broadcast.

One of the reasons having a lot of nodes is important is so that a new miner can easily learn about new transactions that haven't been mined yet and try to collect their fees by mining them.

Another reason is that having a robust network of nodes sharing transactions makes it more likely that the transactions you broadcast will make it to a lot of different miners, and thus be more likely to get mined.

🚫 We don't talk about Bruno (well, actually just certain kinds of transactions)

Nodes can refuse to tell other nodes about transactions -- even if they are perfectly valid. It might seem like there's no good reason to do such a thing: that's censorship isn't it?

Not necessarily. There are several very important reasons why nodes might want to refuse to relay certain transactions:

⚔️ DoS attacks

An attacker could design a block full of special transactions that can take a lot of time to validate. While such transactions follow Bitcoin's rules, they don't serve much purpose other than to grief node runners and sabotage miner competition.

🪝 Upgrade hooks

Most nodes also refuse to relay transactions that utilize certain generally unused fields, even though there's no rule in Bitcoin that says these fields can't be used.

Developers are hoping to reserve these fields for future upgrades, but they will be a lot less useful if users put them to a smattering of different uses before a standard is set.

🧹 Dust limits

You can create a transaction in Bitcoin with such a small value that it is guaranteed that whoever receives the coins will have to spend more money in fees than the coins are worth.

Even though such transactions don't break Bitcoin's rules, most nodes won't relay them in an effort to prevent users from creating coins that aren't economically useful.

🙅 Deterring certain user behaviors

People seem to enjoy putting arbitrary data into blocks. Because Bitcoin is a permissionless system, it is very difficult to prevent people from doing this.

One common way this is achieved is by using a piece of Bitcoin Script called op_return. In an effort to incentivize the least costly (for noderunners) version of putting arbitrary data in blocks, nodes will generally relay transactions with op_return data.

But most nodes won't relay a transaction that has more than one op_return output or if the op_return is larger than 83 bytes, even though the consensus rules do not have a limit (other than the transaction size) for op_return data.

📝 It's not censorship, it's policy!

So now we are back to the op_return limit. The current mempool policy that nodes won't relay op_returns larger than 83-bytes was introduced in 2015. Since then, it has been pretty effective at preventing larger op_returns from ending up on the chain.

What is the difference between such a policy and a policy that refuses to relay transactions that come from certain blacklisted addresses?

While the purpose of the two policies may be wildly different (one aims to protect Bitcoin for financial uses while the other aims to censor it), the form of the two policies seems pretty similar.

⚒️ Proof of Work is designed to break filters

Every Bitcoin transaction carries a fee. These fees pay for blockspace which miners provide by expending electricity. Energy sources are widely distributed around the world, so if some miners refuse to mine certain transactions, we hope the increased fees censored transactions are willing to pay incentivizes other miners to put them in blocks.

Bitcoin uses Proof of Work to create censorship resistance. We all certainly hope that in the case of blacklists or other attempts at censorship, this mechanism will kick in and save the day. But the question is, why won't same dynamic won't play a similar role in the case of op_return limits?

Bitcoin only works if it is true that people can always get their transactions mined by paying more.

In the case of mempool policies, standardness rules, and transaction filters, paying more may mean something as simple as skipping the mempool and paying a higher fee via a mining pool's transaction accelerator. Miners have a strong incentive to figure out how to take the fees people want to pay them. Bitcoiners are counting on it.

🥤 Filters are not Consensus Lite

There is a fundamental difference between how consensus rules and mempool policies function:

• Different rules about what you accept into a block (consensus rules) will cause you to fork off.
• Different rules about which transaction your node will relay (mempool policies) will not cause you to fork off.

Consensus rules are known beforehand. When you accept a coin in payment you are agreeing to the rules that particular coin has followed (and you're able to dictate what those are by refusing to accept coins that don't follow the rules as you understand them).

Mempool policies can be enacted by any node that wants them. You don't get any say about other node's policies and they can't tell you what yours should be.

However, you can still accept coins that come from a transaction that is disallowed by other nodes policies. And once those coins are in a block, everyone else has to accept them as valid too (unless they want to fork).

We must all agree on consensus rules if we want to use the same coin.

We do not have to agree on mempool policies.

GM. bitcoin on your keys > bitcoin on your balance sheet

Excellent Persian language Liana tutorial from Ziya Sadr! Includes both simple inheritance and expanding multisig options.

Check it out:

What is the biggest obstacle your heirs will face when trying to recover your stack?

Come on over to

and tell us your thoughts!

https://stacker.news/items/955034

Create Bitcoin Achieve perfect opsec Move on to other things

Satoshi, 14 years ago today

GM. Want to run a Bitcoin node? Download Liana and click this button: https://m.primal.net/QaSh.jpg

GM, nostr. Want to learn about timelocks?

What is a #Bitcoin timelock and how can you use it? 🧵

Do you feel like timelocks are only for shadowy super coders? Do you wish you knew what a timelock was? Do you want to make timelock magic with your bitcoins?

This thread's for you!

Timelocks have been in Bitcoin since the beginning, but over the years upgrades to Bitcoin made them a lot more powerful.

Today timelocks are used in ⚡️ Lightning ⚛️ Atomic swaps ⚖️ Fidelity bonds 🛟 Recovery keys 🔐️ Expanding multisigs

• and more

⏲️ So, what is a timelock?

Every bitcoin wallet has a set of instructions (spending conditions) for how its coins can be spent

Often these instructions are simple: provide a signature from a private key matching the wallet's pubkey...

Timelocks are just additional instructions you can apply to your coins. They prevent the coins from being spent before a specific time or blockheight (this is called an absolute timelock) or until a certain amount of time or blocks after you received the coins (this is called a relative timelock).

Being able to lock your coins this way is surprisingly useful. You've probably already used timelocks in some of your transactions without even knowing it.

Here's some examples:

⚡️ Lightning

• You and your channel partner share updates to the balance without putting them on chain
• Adding a timelock to the transaction lets you enforce a delay before a peer who force closes your channel can spend funds

⚛️ Atomic Swaps

• You swap some of your coins for someone else's on another chain (like liquid) or layer (like lightning)
• Adding a timelock lets you get your coins back if the other party doesn't fulfill their side of the swap

⚖️ Fidelity Bonds

• You participate in a join market coinjoin with several liquidity providers
• Adding a timelock lets you be sure the other party has skin in the game by letting you see that they've locked away real funds

💸 Lending Protocols

• You decide to take a loan on your bitcoin and send some btc to an address as collateral
• Adding timelocks to the recovery transaction allows you to recover your collateral if the lender ceases to exist

Things really get exciting when you combine timelocks with more complicated instructions. You can have one path of instructions for spending your coins that is timelocked and another path that is not.

In Liana, you can create spending conditions for your coins that look like this:

🔑️ A primary key can spend the coins anytime ⏰️ After a timelock expires 🔑️🔑️ Another key can also spend the coins

This is how we make a recovery key.

Or you can create spending conditions that look like this:

🔑️🔑️ 2 primary keys must sign to spend the coins ⏰️ After a timelock expires 🔑️🔑️ 2 additional keys can spend 🔓️ But still only 2 keys are required to spend

This is how we make an expanding multisig.

Liana uses timelocks that begin counting as soon as you receive coins in your wallet. These timelocks are currently limited to 65535 blocks (about ~15 months). But you can start the timer over by sending the coins to yourself.

We even have a button for that

Want to try out a wallet that lets you really use timelocks?

👉️ Check out Liana Wallet: wizardsardine.com/liana 👉️ For some extra help hit up our friends @BitcoinBrabant

The boss is on nostr!

If you've been looking for a step-by-step guide to set up Liana Wallet with

• timelocked inheritance keys
• multiple hardware signers
• custom multisig

You should definitely check out this

tutorial:

GM. Hang on to your bitcoins!

GM! Don't know the difference between Regtest, Testnet, and Signet?

tl;dr: they are all kinds of Bitcoin testing networks where coins have no value

Regtest: local sandbox

Testnet: difficulty resets frequently

Signet: permissioned mining

Test networks are handy for testing:

• potential consensus rule changes
• new software products that interact with Bitcoin
• network dynamics and mining
• lots more!

The closer they are to real Bitcoin the better

Regtest is the most basic Bitcoin testing network:

• you mine blocks w/ a generate command
• you choose the peers

It lets you test how software interacts with consensus rules

But it doesn't model a permissionless public network very well

Testnet was created to model almost all the same attributes as the real Bitcoin network

• anyone can join the network
• anyone can mine on it
• no one controls it

sounds great, right?

Mining difficulty only adjusts every 2016 blocks

If someone with a lot of miners comes to Testnet to try something out and then leaves..

Everyone else might be in for a long wait before they can mine blocks

Not ideal.

So Testnet also got this rule: if no block is mined for 20 minutes, difficulty resets to minimum.

Sounds good but it leads to a lot of problems:

• Block production is highly volatile
• Reorgs are common
• It can be hard to get new coins

Bitcoiners have been looking for a stable testnet model for quite a while.

2010: First public testnet 2011: Testnet2 2012: Testnet3 2024: Testnet4

It's hard to make a network where coins are free but mining still takes real resources

People get frustrated with Testnet...

(Not all people though: that fabulous Bitcoin troubadour

took his name from testnet3...and superman)

...so Signet (BIP325) was proposed in 2019, and merged into Bitcoin Core v21.

What is Signet?

A centralized Bitcoin testing network where

• mining still takes PoW
• but blocks also need a signature from network operator

This makes Signet reliable and stable, much better for most testing applications

The default Signet targets a block interval of 10 minutes, just like Bitcoin mainnet

Check it out: https://mempool.space/signet

But anyone can start their own Signet

Mutinynet targets a block interval of 30 seconds

https://mutinynet.com/

If you are Signet poor, here are some faucets we tested where you can stack some Signet sats!

• https://signet.dcorral.com/
• https://bitcoinsignetfaucet.com/
• https://signetfaucet.com/
• https://signet25.bublina.eu.org/

Some great resources for learning more the different Bitcoin testing networks can be found here:

👉️ https://bitcoinops.org/en/topics/testnet/

👉️ https://bitcoinops.org/en/topics/signet/

👉️ https://blog.lopp.net/griefing-bitcoin-testnet/

Following along with @lopp's testnet adventures is an excellent way to get a crash course in bitcoin testing.

You can use Liana with Regtest, Testnet (still testnet3), Signet, and Mainnet.

If you just want to play around with it, give it a whirl on Signet and tell us what you think!

👉️ Download: https://wizardsardine.com/liana/

GM. take some time to teach your kids about Bitcoin today. https://m.primal.net/QRxX.jpg

Self custody is a lifestyle.

How to get Taproot privacy benefits for your Bitcoin today

🥕️ Taproot has been live since block 709632 (three years ago) 🥸 It can improve your onchain privacy 💰️ It can save you money

But how the f*ck do you start using it?

First: you need a wallet app that supports Taproot Second: you have to receive coins to addresses generated by this wallet (Taproot addresses start with bc1p...) And now you're using Taproot! ...so what?

Before Taproot, spending a coin revealed all spending paths So if you had a timelocked inheritance key Spending with primary key showed everybody you also had inheritance key In Taproot, you only show the path you use to spend

Here's another example:

If you have a 2 of 2 multisig with a 3rd recovery key Before Taproot, spending showed you had a third recovery key With Taproot, people only learn about your recovery key when it is used.

Also: Schnorr pubkeys and signatures are smaller than ECDSA (ECDSA is the signature scheme non-Taproot Bitcoin uses) So Taproot signatures often take up less blockspace This means spending Taproot coins is cheaper

So: tl;dr to start using Taproot:

🌱️ You DON'T need a new seed phrase 🥕️ You DO need wallet software that supports taproot 👛️ You DO need to create a new wallet ⬇️ You DO need to receive coins to Taproot addresses

In Liana Wallet, it's as easy as selecting Taproot addresses on installation

If you want to start Taproot maxing, give it a download here

👉️ https://wizardsardine.com/liana

GM. Bitcoin is more than send and receive. Learn how to use timelocks to set up inheritance keys for your heirs. https://m.primal.net/QNxq.jpg

Learn how to use Bitcoin's script capabilities. https://m.primal.net/QNSi.jpg

What's it look like if you have timelocked coins in Liana Wallet?

Just like normal but with a countdown timer.

(yes, our pastry fund is almost .01BTC)

GM. Don't know much about Liana?

Check out these features: 🌱 Open source 🌱 Bitcoin-only 🌱 Singlesig 🌱 Multisig 🌱 Miniscript 🌱 Onchain timelocks 🌱 One-click node 🌱 Taproot 🌱 Coin control 🌱 Labels 🌱 No KYC 🌱 Easy to use 🌱 Dark mode only 🌱 Compatible w/ Ledger, Jade, ColdCard, BitBox, SpecterDIY, Krux

Don't lose track of your Bitcoin.

Self custody is a lifestyle.

GM. The 68-bit #Bitcoin puzzle has been solved!

Winners sweep 6.8 BTC reward! Never heard of the 68-bit puzzle? Let's learn about key entropy, brute-forcing, and why 12 words is enough!

First: entropy and Bitcoin Bitcoins are secured by a key This key is actually just a really big number When people talk about entropy in this context they mean: How big is the set of numbers from which you randomly chose your key

So if you have a key that has 1 bit of entropy Your key is one of only two possible numbers If you have a key with 10 bits of entropy It is one of 1024 possible numbers Luckily, your bitcoin key has a lot more entropy than that

Most bitcoin are locked with 128 bits of entropy Which means your key is one of 2^128 numbers ie. more grains of sand than are on all Earth's beaches... AND all the beaches on a trillion copies of Earth

Back to the puzzles: In 2015, someone spread ~32BTC across a series of 160 addresses locked by varying levels of entropy. The first key only had 1 bit The second key had 2 bits The third key had 3... You get the idea

All the easy keys have been swept Over the years, people sent additional BTC to the more difficult to crack addresses Kind of like a bounty for brute forcing varying levels of entropy Whoever cracks the key, gets the BTC

The 66-bit key was cracked in September 2024, nabbing 6.6BTC But because these keys have intentionally low entropy Someone sniped the bitcoin out from under the people who cracked the key maybe... Get the low-down here: https://stacker.news/items/683489

In Febuary of this year, the 67-bit key was found, earning the folks who brute forced it a whopping 6.7BTC They seem to be on a roll...

https://x.com/Kowala24731/status/1892831634921082991

On 7 April the 6.8BTC in the 68-bit puzzle showed up in a transaction in mempools.

It turns out that the same folks who cracked the 67-bit puzzle announced that they had cracked the 68-bit puzzle as well.

https://x.com/Kowala24731/status/1909320999235096764

These puzzles teach us the importance of using key with high entropy. But they also let us know that brute force attacks are a long way from being able to crack 128 bit randomness Your 12-word seed phrase is still safe

Who created the puzzles is a mystery. This BitcoinTalk thread is the first mention of them:

https://bitcointalk.org/index.php?topic=1306983.msg13381244#msg13381244

Bitcoin is so cool!

🌱 Liana Wallet v10 is out! 🌱

👉 Snazzy new whole wallet backup feature 👉 More wallet import/export features 👉 Dependency upgrades for better security

👇 Give it a try today!

https://wizardsardine.com/liana/

GM. The team that won track 1 of the MITBitcoin Expo 2025 was working on integrating payjoin devkit into Liana Wallet timelock refresh transactions! So cool! https://m.primal.net/QHOG.jpg

GM. Self custody is a lifestyle. https://m.primal.net/PsCs.jpg

Have you been wondering how you're going to include your #Bitcoin in your estate plan?

We're doing a free inheritance planning webinar for bitcoiners!

Come ask Kevin Loaec and

your questions on tech and taxes!

🗓️April 8
🕣9:00 AM UTC-4

Sign up below!👇

https://us05web.zoom.us/meeting/register/ir6n9QqORW20wxH3Qv12Mg

🎉️ Congratulations to theonlyonepaulo! 🎉️

You are the winner of our Free Liana Box drawing!

We had more than 150 entrants (30% from nostr!). So, maybe we'll have to do it again sometime!

🎂️ Happy Satoshi Birthday! 🎂️

The Liana Box has everything you need to go from zero to self-custody hero:

• 2 signing devices
• 2 @cryptosteel capsules
• instruction manual
• inheritance letter
• 2 USB flash drives
• 3 tamper evident bags

Check it out: https://cryptosteel.com/product/liana-box-starter-pack/

🚨️ LAST CHANCE to enter our Satoshi Birthday free Liana Box drawing!🚨️

🌙 Liana Wallet is dark-mode only...just like the Batman.

👉️ Follow us 👉️ Repost this post 👉️ Comment below your favorite thing that is dark-mode only

Drawing is tomorrow!

https://cryptosteel.com/product/liana-box-starter-pack/

Self custody is a lifestyle. https://m.primal.net/QDbP.jpg

Things that don't have light mode:

• Batman
• Black holes
• Vampires
• Darkwing Duck
• Liana Wallet

Do you know what will happen to your #Bitcoin when you die?

We're doing a webinar with

about Bitcoin inheritance planning. Come ask your burning questions about how you can set up your wallet and your taxes to make it easy for your heirs to recover your bitcoin.

🗓️ April 8 🕣 9:00 AM UTC-4 👉 Sign up today: https://us05web.zoom.us/meeting/register/ir6n9QqORW20wxH3Qv12Mg

New release: Liana v10 is out!

This one is all about the backups

• Easy backup for your whole wallet
• Easy restore from backup on fresh install

We also did a lot of work upgrading dependencies, keeping things running smoothly and safe.

Check it out 👇

https://wizardsardine.com/blog/liana-10.0-release/

Self custody is a lifestyle.

We're doing a #Bitcoin estate planning webinar with Satoshi Pacioli Accounting!

Come learn about how you can make sure your heirs safely recover your Bitcoin.

🗓️ April 8 🕣 9:00 AM UTC-4

Sign up here: https://us05web.zoom.us/meeting/register/ir6n9QqORW20wxH3Qv12Mg

GM. Self custody is a lifestlye. https://m.primal.net/PsGJ.jpg

Self custody is a lifestyle.

How can Bitcoin consensus rules help with your estate planning?

Looking forward to hearing from Kevin Loaec and Joe Wood at our Bitcoin Inheritance Webinar!

As co-creator of Liana Wallet, Kevin is at the forefront of development using Bitcoin's native scripting language

Joe Wood is the founder of

a leading accounting firm for Bitcoiners in the US.

Together they will discuss the technical and tax-planning steps Bitcoiners can take to provide a smooth inheritance process for their heirs.

Sign up today! 👇

🗓️ April 8 🕣 9:00 AM UTC-4 📍 https://us05web.zoom.us/meeting/register/ir6n9QqORW20wxH3Qv12Mg

New Liana release candidate:

-Users no longer need to dodge bullets -Removed all spoons

Test it out:

https://github.com/wizardsardine/liana/releases/tag/v10.0rc2-1st_april

GM. Self custody is a lifestyle.

Timelocked recovery key fixes this!

Check it out: https://wizardsardine.com/blog/what-is-liana/

The difficulty adjustment actually targets an average blocktime of 10 minutes and 0.3 seconds.

https://blog.bitmex.com/the-timewarp-attack/

Self custody is a lifestyle.