Just a PM working in #Bitcoin. Building @BTCPayServer & @stratumv2 @Spiral_xyz grantee.
Joined September 2017
- Tweets8.4K
- Following1.5K
- Followers11.5K
- Likes16.2K
Pinned Tweet
Our analysis confirms that the attacker used exposed LND .macaroon credentials to access funds. Only LND users are affected, but we recommend everyone update to BTCPay Server 2.4.2.
We found no evidence that on-chain or hot wallets created in BTCPay Server were affected.
Thank you to everyone in the community who sounded the alarm, helped us spread this information quickly, and contacted merchants. Please continue reaching out to BTCPay Server operators you know and ask them to update.
I am deeply sorry to the users who suffered devastating losses. If you were affected or have more questions my DMs are open.
Pavlenex retweeted
OpenSats has received the first donation from @Strive under its recurring monthly commitment to support a stronger and more robust open source ecosystem.
🧡🌐
opensats.org/blog/opensats-r…
BTCPay users already patched, just hit that update button if you use @Core_LN. If you don't use it, you're not affected and no action needed.
Pavlenex retweeted
A lot of security improvement got into this one. But most importantly: API for Reports (Finally!) and invoice creation is now faster!
Pavlenex retweeted
Proud of the BTCPay team. Through all the AI attacks, still going strong and shipping.
Staying focused, resolving issues, releasing updates.
Carrying on the torch of Bitcoin FOSS ✊🗽
BTCPay Server 2.4.5 is out, with security and performance improvements and a leaner Docker deployment. (a bunch of stale integrations were removed).
We’ll keep strengthening the codebase. Thanks to everyone who helped make this release possible. 💚
my modest PS1/PS2 games collection has been slowly growing since last update.
Should I make a video showing off best games? 🎮
Pavlenex retweeted
The PBJ Podcast is LIVE in ~30 minutes with @moneyball, @dksf & @MaxAWebster as they discuss:
- Block bringing bitcoin and Lightning to x402
- Open USD and the race to become money for agents
- Trump renaming AI
Live at 12 Pacific on X and YouTube
Pavlenex retweeted
Every account affected by the September 19 incident has been made whole.
We restored each account to its exact pre-incident balance.
Affected users were notified directly before this post.
Thank you to our mission-aligned shareholders who stepped in.
Pavlenex retweeted
This is a really interesting summary of what the @BtcpayServer team have been up against. In addition to the BTCPayServer exploits the hackers got into their plugin builder website and exploited their mattermost community chat (chat.btcpayserver.org). Worth a listen.
August vulnerability revealed, thoughts about BTCPay Server hacks, thoughts about how AI will affect BTCPay Server development and why vibe coding may be safe.
youtube.com/watch?v=TEJQheze…
Pavlenex retweeted
August vulnerability revealed, thoughts about BTCPay Server hacks, thoughts about how AI will affect BTCPay Server development and why vibe coding may be safe.
youtube.com/watch?v=TEJQheze…
Pavlenex retweeted
"We’re proud to have been early participants in
@ProjectLoupe. Their findings helped shape this release and gave us a head start in adapting how we triage reports, prioritize fixes, and organize development around security. Thank you to the Loupe team for their work and support!"
New SV2 releases are out, bringing security hardening and various other improvements to our libraries and applications!
🧩 SV2 Protocol libs v1.12
🏗️ SV2 Apps v0.8
⛏️ SV2 UI v0.7 (coming soon on @umbrel)
Applications updates improve Job Declaration stability and Bitcoin Core integration, Translator Proxy overhaul, and add automatic discovery of ASIC telemetry endpoints.
Protocol library highlights include a deep hardening pass over channels_sv2, a breaking refactor of the codec and framing layer, BIP323 adaptations across the protocol stack. Noise_sv2 was improved with regards to memory hygiene, nonce reuse, RNG quality, and buffer recovery. Every published crate that changed takes an incompatible version bump, so downstream consumers should expect to adapt.
We’re proud to have been early participants in @ProjectLoupe . Their findings helped shape this release and gave us a head start in adapting how we triage reports, prioritize fixes, and organize development around security. Thank you to the Loupe team for their work and support!
A massive set of Stratum V2 updates is out, with security hardening and improvements across the protocol libraries and applications. Kudos to the entire team for getting this release out. The changelog is wild.
New SV2 releases are out, bringing security hardening and various other improvements to our libraries and applications!
🧩 SV2 Protocol libs v1.12
🏗️ SV2 Apps v0.8
⛏️ SV2 UI v0.7 (coming soon on @umbrel)
Applications updates improve Job Declaration stability and Bitcoin Core integration, Translator Proxy overhaul, and add automatic discovery of ASIC telemetry endpoints.
Protocol library highlights include a deep hardening pass over channels_sv2, a breaking refactor of the codec and framing layer, BIP323 adaptations across the protocol stack. Noise_sv2 was improved with regards to memory hygiene, nonce reuse, RNG quality, and buffer recovery. Every published crate that changed takes an incompatible version bump, so downstream consumers should expect to adapt.
We’re proud to have been early participants in @ProjectLoupe . Their findings helped shape this release and gave us a head start in adapting how we triage reports, prioritize fixes, and organize development around security. Thank you to the Loupe team for their work and support!
