Bitcoin · Security

Eleven Signers Read the Same Bad Line, and Four Thousand Bitcoin Left Liquid

A federation built to survive a compromised key had no answer for a bug every signer trusted equally — and the thief who took the money then argued terms with Blockstream in public, on chain.

From Ungovernable's Bitcoin Brief, with Stacker News and the network's own commentary

On the surface, an eleven-of-fifteen multisignature federation guarding Bitcoin pegged onto the Liquid sidechain looks unbreakable: compromise eleven geographically separate companies, or don't bother. Whoever moved four thousand bitcoin off Liquid this week did not touch a single key. The federation's signing keys were never compromised at all — the withdrawal went through the normal service, with perfectly valid authorisation. The failure happened earlier, when the network accepted liquid Bitcoin that should never have existed.

The reason eleven independent signatures didn't help is the reason independent signatures rarely help against a shared software bug: Every signer was reading the same faulty software, so every signer agreed. The number of keys does not fix a shared code failure.

What followed was stranger than the theft. The attacker put a message directly into the transaction that moved the funds — an OP_RETURN, public and permanent — describing themselves as a white hat and inviting Blockstream to get in touch on chain. Blockstream answered inside the hour with a support address; six hours later the two sides were trading PGP-encrypted messages, with the attacker's terms plain enough to report: patch the bug everywhere first, and the money comes back once the fix is confirmed. Blockstream's reply, three minutes on, was simply thank you.

Not everyone was moved. Reading the exchange with the network's usual suspicion of anything that isn't bitcoin itself, "unit" waved the whole story off as an altcoin story wearing a bitcoin sticker: a altcoin network that pegged their token to bitcoin got hacked — nothing new in the altcoin world. Others took the lesson somewhere quieter. Posting in German, Dennis said he was uneasy that nearly every new Lightning wallet now routes through Spark, another operator consortium, and that the Liquid incident had just shown how fast one of those can fail. Stacker News ran its own incident report through the day, drawing 1,448 sats and a dozen comments; Bitcoin Pretoria's meetup, already on the calendar for tomorrow evening, added the affected services to its agenda before the dust had settled.

Ideas · Op-Ed

Alex Gladstein, Writing in the Journal, Says the Freedom Was the Point All Along

Wall Street Journal, cross-posted by the author

Alex Gladstein's essay in the Wall Street Journal was the most rewarded item to cross the reader's feed today — 5,319 sats across 10 zaps, more than five times its nearest competitor — and for once the number and the argument point the same way. Under the headline "Bitcoin's Overlooked Promise: Freedom," the Human Rights Foundation's chief strategy officer argues that treating bitcoin purely as an investment, good or bad, misses what it has actually done: in Nigeria, Egypt, Pakistan and Argentina, where currencies have lost anywhere from a fifth to nearly all of their value since 2020, and in Russia, China and Belarus, where the bank accounts of rights defenders are routinely frozen for "suspicious activity." Groups like Russia's Anti-Corruption Foundation and Nigeria's Feminist Coalition, he writes, kept paying their people through bitcoin when the alternative was nothing at all. His closing line, requoted across the day: Maybe bitcoin isn't for you, but it is for them.

Bitcoin · From the Floor

Two Milestones, One Week — a Dispatch From Prague

While delegates at BTC Prague traded notes on how much of their bitcoin habit to admit to out loud — one panelist detailed exactly what he'd changed at home before stopping short of naming the rest — the conference's own account was tracking a stranger story unfolding alongside it. Two quantum milestones, one week. On 26 August, StarkWare mined the first quantum-safe Bitcoin transaction on mainnet without changing a line of protocol code, sending it through as a nonstandard transaction via MARA Slipstream; it does nothing for keys already exposed elsewhere on chain. A day later, Jonas Nick published the SHRINCS BIP, compressing a post-quantum signature into 324 bytes against Schnorr's 64, with the security proof still marked TODO. Over a third of all bitcoin already has a public key sitting on chain. Escape hatch or soft fork? the post asked, and left open.

Technology · AI

The Machines Had Themselves a Week

An OpenAI announcement moved fast enough down the timeline today that waxwing described real whiplash: having just fielded an AI phone call from his own home security system, one that adjusted its speech mid-call for a bad connection, he opened Twitter to find they had solved Navier Stokes. It's all a bit much. Stacker News carried its own thread on the claim, and a separate one on Nvidia's Jensen Huang telling the room AGI has arrived. OpenAI's own language, highlighted today by Derek Ross, was more careful: We are focusing on understanding this model, and using what we learn to help us guide and pace how we pursue further advances in capability.

Gigi spent part of the day marking up warnings rather than announcements. From an essay on mike.tech arguing that software development is ceasing to be a craft, she pulled: Now anyone can be a software developer. and, more pointedly, a team of good enough developers with the right process can build great software. From a research paper on technology dependence she highlighted a starker line: once a critical threshold is crossed, small increases in adoption can trigger rapid population-level shifts toward persistent dependence, with abrupt losses in cognitive competence. Not every use of the tools was so fraught — Moss spent the day getting GPT-6 Astra to draw a galloping horse, reporting that the model only got the motion right once told to study equine mechanics before touching any code, proof, in Moss's words, that programming is just one facet of GPT-6's capabilities.

Around the Network

While the Chain Argued, the Harvest Came In

Not everyone spent the day on federations or Millennium Prize problems. Chip finished putting up five kilograms of dry-fried chanterelles and hedgehog mushrooms into two-hundred-gram freezer bags — twenty-five meals for two, after gifting two kilos and eating mushrooms most of the month — and reported plainly: we are going to be well fed this winter. Printer's potato bed gave up another small batch, bringing the season's total to forty kilograms, and Little Spoon was elsewhere admiring the colour on a fresh basket of black trumpets. In Norway, Gunnar Stødle spent part of the day cutting birch bark for a roof — purely decorative now, he noted, where the whole roof once went under turf the same way. Dennis wrapped up chili season with a final harvest bound for the smoker. And Permanerd came back from several days off the grid with a blown trailer tyre and no regrets: Very little deer sign, but tons of elk. I think the elk are pushing out the deer. Rifle season opens in a couple of days.