Socratic Seminar 76
2026-11-05
Housekeeping
- This meetup is generously sponsored by Pubkey and Bitnomial.
- Questions are encouraged, including basic ones!
- Socratic Seminars are held under the Chatham House Rule: share the information you receive, but do not reveal the identity of who said it.
- For the privacy of other attendees, please refrain from taking photographs of other people without their permission.
- Socratic seminars are best when the moderator can let the conversation flow, so try to keep things concrete and focused.
- The reading list covers September 30th to Nov 1st.
Chain Weather Report
Discussion
News, Tweets & Misc
- Binance Hack results in $6.3B theft
- Ledger Nano X Implant
- LayerTree
- Snail: Send bitcoin transactions with zero on-chain fee
Blogs
- localhost research: Notes from a Post-Quantum Workshop
- Claude reveals p256r1 curve origins
- btc-verified October Update: Connecting Map to Territory
- Introducing Zark
- Introducing Lightning in the BitBoxApp
Mining
bitcoin-dev
- Bitcoin Core security policy update
- Getting BIP54 past the finish line
- BIP54: On fixing time-warp and the (unsoundness) of the forward block idea
Delving Bitcoin
- We made the bitcoin-dev mailing list readable: 15 years, 24,699 messages
- Cassis, a new simple scheme for generic multi-layer multi-hop HTLC routing
- Descriptor syntax for hash preimages
- Multiplication in Tapscript today: 371 bytes, no soft fork
- Silent Payments for Multiparty Wallets
BNOC
- Addrman health dashboard
- Compact block reconstruction degradation between September - October 2026
- /Satoshi:31.0.0/ peers with no service flags and protocol 70015 pushed transactions, then stopped together on Oct 18
- Effect of Linux Kernel CVE-2026-99999 (CVSS 9.3, PwnScape) on the Bitcoin network
CVEs and Research
InfoSec
- Core CVE-2026-117349 - Slow unbounded memory growth on paused pre-BIP31 peers
- Core CVE-2026-117350 - Unbounded memory growth through TCP urgent data on non-Linux systems
- Core CVE-2026-117346 - Undo file overflow under extreme conditions
- Disclosure: DoS vulnerabilities fixed in Eclair v0.14.0
- Debian alert DSA-6528-1 (kernel)
- Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution
Research
- Bitcoin Poker
- LN-GAP : Lightning governed by arbitrary programs
- Lichen: L2s In CHannels ENforced on bitcoin
- Compact Shielded CSV: Post-Quantum, Private, Lightweight Client-Side Validation Blockchain
- Garbling Groth16 with Native Group Operations
- Argo is now open source
Improvement Proposals
BIPs
- BIP Proposal: Wallet label synchronization (BIP-329 records over encrypted stores)
- BIP Draft v2: Co-signer Spending Policies
Noteworthy PRs
Bitcoin Core
- fees: fall back to block_policy and minor api change
- log: prevent user input from injecting fake log lines
- net: don't discourage private broadcast peers
- net: always complete all initial private broadcast connections
- sign: skip signing SIGHASH_SINGLE inputs with no corresponding output
- silent payments: Implement bip352 (take 2)
- silent payments: fix P2PKH pubkey extraction from malleated scriptSig
- wallet: Add maxfeerate wallet startup option
- wallet: Prepare for future upgrades by recording versions of last client to open and decrypt
- wallet: make encryption state updates atomic
ldk
- Apply a one-hop blinded path's CLTV expiry delta
- Fix some bugs the LSPS2 JIT flow
- Reject acknowledged commitment rollbacks
lnd
- blindedpath: avoid uint32 overflow in accumulated fee calc
- discovery: rotate failed historical syncers
- lnwallet: reject commitments missing aux HTLC signatures
- multi: stop opening legacy channels
- Local reputation: subsystem core, read only
rust-bitcoin
secp256k1
- silentpayments: perform tweak addition with actual scalars
- refactor: introduce ecmult_const_ge helper (preventing accidential gej leaks)
- Clear secret-dependent variables in _ecmult_const_xonly