Looking at ways to add more anonymity to bitcoin

Frog put the keys in the HSM. "There" he said "now we cannot leak the private key". "But our servers can ask the box to sign with the key" said Toad. "that is true" said Frog

Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified. The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far. Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete. As an immediate precaution, Binance has: - temporarily suspended deposits and withdrawals while security checks are completed; - revoked the affected address authorisation; - engaged law enforcement and blockchain intelligence partners to trace and recover funds. Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice. Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions. binance.com/en/support/annou…

Bitcoin Core v32.1 was released! It is available from: bitcoincore.org/en/download/ Release notes: bitcoincore.org/en/releases/…

INVESTIGATION UPDATE 2 In our last update, we said we would share how many people had personal information exposed once we could confirm it. We can now share those numbers. Across our old WooCommerce store and our current Shopify store, records containing approximately 5,600 mailing addresses and 5,200 phone numbers, along with names and email addresses, were held in systems the attackers were able to reach. We cannot say for certain whether the attackers accessed all of these records, so we are treating all of them as potentially exposed. These records are a subset of our total customers. Why the data was still there: In our last update, we explained that copies of orders remained in old database tables after past migrations. We have since found that the 60-day redaction also did not cover every type of order, and that some customer details were stored in other parts of the store, such as abandoned carts and contact forms, that redaction never reached. Addresses not in our records: More than 5,000 of the email addresses that received phishing emails do not appear in our WooCommerce or Shopify customer records. Some match our support and hiring inboxes. Together with reports of details that were never shared with us, this makes us confident the attackers also used data from outside Foundation. We are still tracing where these addresses came from. What we are doing: Out of an abundance of caution, we are rotating all keys and secrets across our systems, including those we have no evidence were accessed.We are keeping a single copy of the legacy WooCommerce data offline as evidence for the investigation. Once the investigation is complete, that data will be permanently deleted. We have found no evidence that this incident compromised Passport devices or the private keys they hold. Never enter your recovery phrase into a website or share it with anyone, including someone claiming to be Foundation. We will continue sharing confirmed findings and publish our full report when the investigation is complete.

We’re hiring a Consumer Marketing Lead for a new kind of Bitcoin app on mobile. You’ll lead launch marketing and help us reach our first customers. We’re looking for consumer app experience, ideally in fintech.

Excited to open-source Argo! The most practical trust-minimized Bitcoin bridging: • Setup time: ~100ms • Offchain cost: ~10MB • Onchain cost: ~$8 🤖 Throw your clankers at it and help us harden it github.com/idealgroup/argo?_

Kraken (@krakenfx) offers APY on your Bitcoin and they call it their "Vault" It's actually less safe than just using their regular account: "Kraken's Vault actually uses wrapped Bitcoin, decentralized lending protocols, borrowed stablecoins, and leverage to generate yield." 🧐

I had to testify in a trial I wasn't involved in. Here's my story:

Back in 2013, this car was purchased for 1000 BTC. Maybe the most expensive car in history

To the resellers who helped build Trezor: thank you, and I’m sorry 💔

Introducing Zark