Update your BTCPay Server instances again, as soon as you can: https://x.com/r0ckstardev/status/2087963055091011920 (no nostr post)

Anyone know stores selling stuff for Bitcoin with a BIP110 node backing their payment backend? I have some BIP110 LukeCoin to spend 🤑 (yes, aware of replay implications)

I don't think they understand how this works 😆

aaand the knotzis disappeared

though the canary expiry snafu and sudden departure makes me somewhat uneasy.

Thank you for your service and hope y'all are well. Sad to see you go. On the bright side I don't think you'd say Boltz is in safe hands if it wasn't.

p a i n

Zero announcement / advisory notice / blog post or any indication of the vulnerability on BTCPay Server's website other than the post on X. It has been 4 hours. If this is how they operate, I advise you all to just pull the plug and shut your BTCPay instances down.

Would be nice to understand the scope of the BTCPay vuln and if there are any logs to check to confirm if it was exploited or not prior to an upgrade.

Friendly reminder that even in 2013, RNG bugs had a response with much better user UX, often indicating that a new seed is required, and guiding users to migrate funds. https://bitcoin.org/en/alert/2013-08-11-android Yes, with a hardware wallet this is slightly more complicated, but if something like Bitkey can handle seamless seed refreshes and fund migration (ex: the enhanced privacy upgrade) then others can. Every hardware signer should have some form of official companion app that can make these flows possible for the average non-technical user.

* without updated firmware

Any European resellers still have Coldcard Q stock? Looks like it was pulled from those I can find. Need to purchase one for some experiments.