Pinned Tweet
#Bitcoin competes with central banks and base money
#LiquidNetwork competes with SWIFT
#LightningNetwork competes with Visa
xitter.cf/btc/status/10529730038…
Vortex | BIP448 retweeted
An update to Bitcoin Core's security policy
via @darosior on the Bitcoin-Dev mailing list
Vortex | BIP448 retweeted
This is one of the most frequent conversations I’ve had with Bitcoin Core developers in the past few months.
Announcements of patches to come benefit attackers (see php bug where “find bad bug in php” allowed anyone to spend $3 and get RCE).
Good call by the Core team.
An update to Bitcoin Core's security policy
via @darosior on the Bitcoin-Dev mailing list
Vortex | BIP448 retweeted
Bitcoin Optech newsletter #428 is here:
- describes a design for a single-issuer layer 2 whose users can redeem their bitcoin onchain without the issuer’s cooperation
- summarizes a proposal for including hash preimages in output script descriptors.
- summarizes changes to services/client software
- Optech Newsletter #428 Podcast
bitcoinops.org/en/newsletter…
Vortex | BIP448 retweeted
Yeah there's no going back.
The only way to secure systems is frontier labs out-accelerating open source.
Legislation won't stop black hat hackers.
Acceleration was always asymptotically the only option.
Security through multipartite adversarial non-equilibrium steady state. – at San Francisco, CA
Vortex | BIP448 retweeted
LIVE IN 3 HOURS: Brandon Black (@reardencode) joins Insiders Matthew (@matthewvuk2) and Tuma (@TumaBitcoiner) for our weekly News Hour to talk about rbitcoin (@rbitcoin_org), a new implementation of a Bitcoin full-node written in Rust.
Join us!
privacy is a pisa cake!
PISA is here: Watch the Payjoin + CISA integration demo we built at @LuganoPlanB with the support of @cypher_tank. See the code, spec and more at pisa.payjoin.org. This is a joint effort by @payjoindevkit and @bitcoinbrink.
Vortex | BIP448 retweeted
PISA is here: Watch the Payjoin + CISA integration demo we built at @LuganoPlanB with the support of @cypher_tank. See the code, spec and more at pisa.payjoin.org. This is a joint effort by @payjoindevkit and @bitcoinbrink.
Vortex | BIP448 retweeted
Wavelength is now live on mainnet! 🌊
Humans and agents can now send and receive bitcoin payments with the Wavelength SDK.
A few API calls, self-custodial from the first command, with no node or liquidity to manage.
Read more and start building: lightning.engineering/posts/…
Vortex | BIP448 retweeted
Introducing Bitwater: the water heater element that mines Bitcoin.
It screws into the electric tank you already have.
Physically decentralized mining that runs no matter what 🧵
Heat water. Mine Bitcoin. Same tank.
Vortex | BIP448 retweeted
A fun LN project right now might be one where you clone popular backend APIs like redis as a service and make it A) LN payable and B) encrypted end2end and C) OSS. So people paying for these APIs could switch and pay you instead and the pitch is they’re no longer locked in at all
Vortex | BIP448 retweeted
Seems like no one cares about Bitcoin.
The timeline is entirely AI.
Meanwhile:
>JP Morgan flipped bullish
>BlackRock filed another ETF
>Saylor is still buying
>AI agents prefer Bitcoin
>The dollar is still a shitcoin
…and you’re bearish?
Let the bull market begin.
Vortex | BIP448 retweeted
The case for bitcoin hasn't changed: fixed supply digital money you can hold yourself and move without anyone's permission. Financial censorship and monetary expansion will not stop. We need something by which to resist. Onwards.
Vortex | BIP448 retweeted
we’re well on track to have 25% of all CVEs reported in this year alone
cve.0xosprey.com
In a prior life at @jpmorgan, I was the tech lead building out their digital asset trading infrastructure on Ethereum tech.
The system went to prod and processed literally trillions of dollars in repo trades: tokenized US dollar deposits (the cash leg) vs. tokenized US Treasuries (the collateral leg).
Even though it was a bank blockchain, we still built the whole stack: token contracts, trade contracts, consensus, full nodes, private key management, atomic swaps, administrative controls, point-and-click web apps, role-based permissions, etc.
The hardest part was the integration with the legacy systems: (1) the dollar clearing on JPMC's general ledger and (2) the Treasury movements over SWIFT messages.
I got to see firsthand where the blockchain rubber meets the banking road. It ain't pretty. Operationally we did double the work, so at times it felt pointless.
Still, there is money to be made by making capital markets faster and more accessible, so tokenization will definitely happen, in some form or another.
A lot of banks like being slow and cumbersome: that's their moat n' float! The challenge, as @malekanoms notes, is that these banks are very competitive with each other, and they care about who owns the rails.
One funny thing about doing this in the early 2020s was that interest rates were so low that even the interest on a billion-dollar repo trade was laughably small. Times have certainly changed.
I also came away with another grim conclusion: banks are effectively a fourth branch of the US government. They exist at the mercy of the state; expect a Chokepoint v3.0, 4.0, 5.2.1.
The work was fascinating, but I wanted to work on bitcoin, the future of money. I pitched JP Morgan on building a bitcoin custody service. I asked them to give me a team to build it.
"This will make you a billion dollars," I told them. But of course they weren't interested ... come on Jamie! 😅
So I left to work on bitcoin and build @stablechannels, and I haven't looked back.
It is true that tokenized deposits will only flow between whitelisted wallets that are already customers of the relevant bank. However they will be very useful as the cash leg of atomic swaps for tokenized assets (for instance Treasuries and equities to facilitate repos and stock loans). To say that tokenized deposits are purely performative is intellectually dishonest.
Yes, a stablecoin that holds only treasury repo and short duration bills or even central bank money with everything held on-chain would be a more useful and robust cash leg (other than the fact that it doesn’t pay interest!). Of course that doesn’t exist. JPMD and other money center bank deposits will be viewed as lower risk than stablecoins in their current state by institutions and will likely be the go-to solution for repo and stock loan. It’s possible an orchestration layer will be built to facilitate the preferences of different institutions for different deposits and a stablecoin could be part of that. Will be interesting to see how it evolves.
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Vortex | BIP448 retweeted
🚨 CYBERSECURITY ALERT - OCT 21, 2026
Multiple security issues confirmed:
🔴 eMudhra: 8 intermediate CA private keys compromised.
🔴 PHP: Two critical unauthenticated RCE vulnerabilities disclosed.
🔴 Node.js: Multiple security fixes released, including a high-severity Brotli RCE.
🔴 LiteLLM: PyPI v1.107.0 compromised with credential-stealing malware.
⚠️ Action: Patch affected systems, investigate potential exposure, and rotate secrets if compromise is suspected.
Verify. Patch. Protect. 🔐
🚨 THE INTERNET BROKE TODAY 🚨
Oct 21, 2026 will go down in history
1. eMudhra : Private key was literally "4". 8 keys forged ANY website for 17 months. 60M+ certs at risk.
2. SBI CONFIRMED. 3,897 customers' mobile, DOB, address + loan data found on dark web.
3. Rajasthan Police 🇮🇳ALLEGED hack. Group claims 70,000 identity records + 59,460 numbers for sale. Unverified.
4. php2shell [9.2] Unauth RCE in PHP. 70% of the web. WordPress, Drupal, Laravel. CISA: Patch or GO OFFLINE.
5. GitLab [10.0/10] PERFECT SCORE. Unauth RCE, no login needed.
6. Node.js [CVE-2026-111497] Brotli decoder RCE + TLS bypass. 10 CVEs patched today. Also blocked eMudhra.
7. Railway BREACHED TODAY. Env variables decrypted. Your API keys & DB passwords exposed. Rotate all.
8. OpenCode BREACHED. OpenAI, Anthropic, Google API keys exposed for Console users. Distillation attack. Bills run up in $$$$.
9. LiteLLM PyPI v1.107.0 was MALWARE today morning. Steals credentials + backdoor.
10. Plex2Shell ACTIVELY EXPLOITED. Hackers installing cryptominers LIVE. CISA KEV, deadline Oct 23.
AI found the bugs. AI is exploiting them. Humans can't patch fast enough.
Patch. Rotate. Revoke. Update.
RT to save someone's server ♻️
#CyberSecurity #DataBreach #India #php2shell
the rest of the internet is having a bitcoin moment righ tnow
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…


































