BitcoinReview
Bitcoin.Review

A Podcast and Newsletter review of Bitcoin Software updates and related topics with NVK and guests.

Public Key

npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt

NIP-05 Address

Profile Code

nprofile1qqsqxuwm0l2yxl8x8esdahp38jkka6930lrfrls9yv0e59qpxn7q6zqppamhxue69uhkummnw3ezumt0d5q3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7ls82da

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt

Show more details

Last Notes

2025-06-07 15:01:13 UTC

Harbor is a new ecash wallet for desktop, designed for privacy from the ground up.
🤖 Rust backend & frontend
🧅 Tor by default
🪙 Supports multiple mints (Fedimint + Cashu)
Devs @nprofile…3xs0 and @nprofile…cudv give @nprofile…wwgx the lowdown in BR097.
https://blossom.primal.net/7746ac874ba9820b6155a7db372daf7d2a601fd98bf3836bda9ddba353f7d260.mp4

2025-06-01 14:44:24 UTC

Dev testing? Choose your chain:
Testnet = chaotic & adversarial
Signet = predictable & controlled
@nprofile…cvv5 walks through mining behavior, forks, and block timing.
[BR096]
https://blossom.primal.net/28cab53378ce84758294f0db1974fc08f9fd49971a937e50ed3c2c75dc958499.mp4

2025-05-30 14:58:23 UTC

Bitcoiners - it’s time to return to #nostr
@nprofile…3cse and Odell dissect why many Bitcoiners bailed on nostr after a disappointing first touch, and how UX improvements can win back users. [BR096]
https://blossom.primal.net/dc42b0f87927515fe1abe898b4ece3fa4491b08cb883af7e0a4739be658d9780.mp4

2025-05-28 12:55:47 UTC

Nostr MLS is here!
A HUGE step forward. 💪
But before you start using #nostr for sensitive Bitcoin actions, take warning from @nprofile…6yw7 - encrypted or not, nostr messages live forever on servers you don’t control.
(Oh, and not to mention future post-quantum threats!)
[BR096]
https://blossom.primal.net/a41cbf2ca2559aa65f1e0d48113e8c86e12057afc7e0eaf6c63e96a2e6997297.mp4

2025-05-18 15:20:52 UTC

What happens if a soft fork (such as CTV) were activated by 50% of the hash rate, but rejected by the rest?
@npub1emd…c9aw explains how this would play out, ultimately resulting in a chain split. [BR096]
https://blossom.primal.net/5d8a00f6313d4f081bc27351ca27c58f77f380ac2530b26d794ee58487362892.mp4

2025-05-16 17:39:45 UTC

The OP_RETURN debate may be distracting from a far more existential threat to #Bitcoin.
The Samourai Wallet case could set precedent on whether node operation is legal in the US. ⚖️
@nprofile…c2j3 urges us to focus on the real fight in BR095.
https://blossom.primal.net/08d454bc4d377801194e586b4cc9fc260b29f5c5cbf84ea0bae88cf54f9ea9cf.mp4

2025-05-10 15:06:42 UTC

Ephemeral anchors recently dropped in Bitcoin Core v29! 🚀
No more fee baking in pre-signed txs.
You can now "delegate" fee payment post-signature.
Better for Lightning, covenants and more.
@nprofile…7ad7 , @nprofile…2g0h & @nprofile…f6jx unpack it in BR095.
https://blossom.primal.net/25d19cf31c9432ad3a8ddf5d1894cd2244184440542b08173c8b8077e94a3aa0.mp4

2025-05-08 01:50:25 UTC

Is Cashu an L2 or an L3?
While this may be debated (and @nprofile…pfx4 might disagree!), @nprofile…dg6s and @nprofile…9l3k argue that #Cashu is the "perfect L3" - generally using lightning for settlement, whilst offering a different trust model and features. [BR095]
https://blossom.primal.net/88f7df8ac38038ccb6138896e0c927a58fbc5ae702d0fef48f0cbc62480586e4.mp4

2025-05-02 01:48:44 UTC

🔐 COLDCARD just got a HUGE upgrade!
COLDCARD Co-sign lets you do 2-of-3 multisig with yourself - while enforcing spending limits, whitelisted outputs, and time-based constraints, all locked behind a policy key.
@nprofile…v5r0 , @nprofile…j47m , and @nprofile…85rl break it down in BR095.
https://blossom.primal.net/c4ef69e1735029d720ec40d19d9ac86a61f5d96caf85b9dbf7182670d12f83c2.mp4

2025-04-20 15:34:46 UTC

Want to share a seed or SSH key securely across borders?
Meet Key Teleport: a new protocol by @nprofile…dhr3 to transfer secrets without trusting phones, computers, or comms.
All via QR, NFC, and BBQr.
@nprofile…tlm7 & @nprofile…vc8x discuss the new protocol and its applications in BR094.
https://m.primal.net/QXOS.mp4

2025-04-11 16:19:15 UTC

🚫 SaaS bloat
✅ Vibe-coded precision
@nprofile…zgfj and @nprofile…d5uv make the case for ditching multi-tenant SaaS complexity in favor of simple, self-hosted tools tailored to real needs - which can now be quickly built with the help of AI. [BR094]
https://m.primal.net/QMBH.mp4

2025-04-11 05:25:14 UTC

From building Lightning interfaces to coding backend agents, LLMs are evolving fast.
The challenge is no longer compute—it’s control.
@nprofile…d5uv , @nprofile…3jrs & @nprofile…zgfj unpack vibe coding, prompting limits, and where AI tools are ready in BR094.
https://m.primal.net/QLaJ.mp4

2025-04-10 05:39:51 UTC

Mining decentralization is gaining momentum. 🧱
With Stratum .work showing live template timing and Stratum V2 adoption on the rise, a shift toward hasher-led block building could arrive within the next few years.
@nprofile…d5uv shares his take in BR094.
https://m.primal.net/QKWI.mp4

2025-04-09 06:02:12 UTC

@nprofile…5u7u now flags address poisoning attempts.
These attacks spoof wallet addresses to fool users into sending to the wrong address.
@nprofile…3jrs outlines the importance of Mempool space’s update in BR094.
https://m.primal.net/QJJG.mp4

2025-04-08 15:19:04 UTC

🚨 Trezor Safe 3 vulnerability
Ledger Donjon demonstrated they could bypass firmware checks and run malicious code — enabling remote recovery of user funds.
Why? Critical ops still run on the MCU, not the Secure Element.
@nprofile…d5uv & @nprofile…3jrs break it down in BR094.
https://m.primal.net/QIgN.mp4

2025-03-28 17:42:24 UTC

Change verification is a must for wallet security.
If you send 1 BTC from a 100 BTC UTXO, that 99 BTC needs to come back to you. Many wallets ignore this.
@nprofile…5uvg & @nprofile…2swf highlight this critical security oversight in BR093.
https://m.primal.net/PwSb.mov

2025-03-25 17:25:16 UTC

🛡️COLDCARD v5.4.1:
✍️ Message signing from secure notes
🛡️ Delta Mode: Hide/wipe seed vault, notes & p'words
👓 Enhanced address display
🔐 Verify BBQr Signed RFC messages
+ more!
@nprofile…2swf gives a rundown of the latest COLDCARD updates in BR093.
https://m.primal.net/PsmJ.mov

2025-03-20 02:44:07 UTC

BDK abstracts wallet dev complexity, making it accessible for all.
@nprofile…p3hp : "It'll be the default in a few years."
@nprofile…46n5 : "Even a left curve like me can build safely."
With v1.1.0, the future of wallet development is more promising than ever. 🦾
https://m.primal.net/PmCm.mov

2025-03-19 15:14:24 UTC

Bitcoin Safe v1.1.0 is here:
✅ Jade wallet support
✅ Deb build
✅ Xpub import
@nprofile…p3hp and @nprofile…46n5 discuss the project's progress, whilst also highlighting privacy concerns over using #nostr for multisig coordination. [BR093]
https://m.primal.net/PlZJ.mov

2025-03-18 13:36:16 UTC

Is ESP32 really safe for securing #Bitcoin?
Undocumented commands in ESP32 Bluetooth chip have recently raised security concerns, adding to existing risks. 🚨
@nprofile…ye4r , @nprofile…59ze , and @nprofile…488l sound the alarm in BR093.
https://m.primal.net/PkMG.mov

2025-03-13 19:54:08 UTC

🚀 BR093 - ECDSA Key Extraction, ESP32 Security Concerns, COLDCARD, Cove Wallet, Krux, Nunchuk, Invalid Mining Jobs, Javascript Injection Attack, CTV Back on the table? + MORE ft. @nprofile…ly4p , @nprofile…488l & @nprofile…0ycy
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/as8n9iw9VbKhMCyrjjjv
➡️ Spotify: https://open.spotify.com/episode/3B5SqlPBrYjyam3IzEEERr
➡️ Amazon: https://music.amazon.co.uk/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/43ff551d-68de-489e-b3de-b249310189dd/bitcoin-review-podcast-with-nvk-guests-br093---ecdsa-key-extraction-esp32-security-concerns-coldcard-cove-wallet-krux-nunchuk-invalid-mining-jobs-javascript-injection-attack-ctv-back-on-the-table-more-ft-rob-vivek
➡️ Apple: https://podcasts.apple.com/gb/podcast/br093-ecdsa-key-extraction-esp32-security-concerns/id1632017958?i=1000699078823
➡️ YouTube: https://youtu.be/vweXlKOYi_A
Shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-93/
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/br093-ecdsa-key-extraction-esp32
🚨 ESP32 and Bluetooth security concerns. Is there a place for these technologies when it comes to #Bitcoin? NVK and Rob tackle this question. 👇
https://m.primal.net/PemG.mov

2025-03-12 16:03:07 UTC

"Hardware wallets are the best thing since sliced bread" 🍞
Although some try to trivialise hardware wallets, they offer asymmetric power for #Bitcoin security.
@nprofile…ly4p and @nprofile…0ycy discuss the risks of underestimating these tools in BR076.
https://m.primal.net/PdLu.mov

2025-03-08 18:04:16 UTC

Zaps on nostr have yet to reach their final form.
@nprofile…zth5 sees Zaps as just the start—unlocking new use cases and infinite possibilities. Cashu-based Zaps? More speed, more verification, more potential. ⚡
[BR083]
https://m.primal.net/PYaX.mov

2025-03-07 02:24:59 UTC

Should every #nostr idea start as a NIP? 🤔
@nprofile…c3cq of @nprofile…lm0v argues that trying to make every new idea a NIP before testing it slows progress. Instead, experiment, get real adoption, and let standards emerge naturally. [BR078]
https://m.primal.net/PWXc.mov

2025-03-06 03:15:49 UTC

👉 Own Your Distribution 👈
Platforms like Substack & Medium learned the hard way—your traffic isn’t yours if it relies on centralized platforms.
On #nostr, your identity & content are truly yours.
@nprofile…kd9p on the shift to uncensorable publishing. [BR084]
https://m.primal.net/PVPC.mov

2025-02-25 17:53:47 UTC

Losing Electrum in Tails OS means fewer secure recovery options for #Bitcoin users. The fix?
🛠️ Get Sparrow added to Debian
🚧 Overcome resistance from maintainers
@nprofile…32sk & @nprofile…e44g brainstorm solutions in BR092.
https://m.primal.net/PLBG.mov

2025-02-05 12:28:58 UTC

Tails remains the best read-only OS for security, but is it hostile to #Bitcoin?
Electrum’s hardware wallet support is gone, and adding alternatives isn’t easy.
@npub1hea…g9v2 & @npub1az9…m8y8 discuss the hurdles, Debian’s red tape, and possible solutions in BR091.
https://m.primal.net/ORTg.mov

2025-01-27 15:28:32 UTC

BlueWallet v7.0.7 improves xpub handling, avoiding mismatches with Sparrow Wallet & reducing fund losses. ✅
@npub1az9…m8y8 and @npub1hea…g9v2 discuss how this critical update benefits users in BR091.
https://m.primal.net/OCsY.mov

2025-01-24 19:45:22 UTC

🚀 BR091 - AnchorWatch Trident Vault, Ledger Co-founder Kidnapped, Blue Wallet, M17, The Case for Multi-vendor Setups, Tails removes HWW Support + MORE ft. @npub1hea…g9v2 , @npub1emd…c9aw & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/qfhj3otn3dd2BUmYceYw
➡️ Spotify: https://open.spotify.com/episode/2gzIQarWvd395rGGucWS0O
➡️ Amazon: https://music.amazon.ca/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/00a40283-5cd7-4d4e-88c9-fde8ef4088ec/bitcoin-review-podcast-with-nvk-guests-br091---anchorwatch-trident-vault-ledger-co-founder-kidnapped-blue-wallet-m17-the-case-for-multi-vendor-setups-tails-removes-hww-support-more-ft-craig-rob
➡️ Apple: https://podcasts.apple.com/us/podcast/br091-anchorwatch-trident-vault-ledger-co-founder-kidnapped/id1632017958?i=1000685337699
➡️ YouTube: https://youtu.be/yykepvzKwj0
Shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-91/
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/br091-anchorwatch-trident-vault-ledger
Craig, Rob and NVK discuss #Bitcoin wallet standards and the features they must have to ensure compatibility, user independence, and long-term usability. 👇
https://m.primal.net/NySe.mov

2025-01-10 13:23:16 UTC

.@npub1ree…9ty4 ‘s @npub13dk…gnvc based app delivers address verification over NFC with COLDCARD Q! 🚀
@npub1az9…m8y8 & @npub1emd…c9aw share insights in BR090.
Demo:
https://njump.me/nevent1qqs8qjzkcdtzp93tkckekezeevvlnh6rjugc5a6wk4urdncn4080sjcpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3qreezn2ctrrg736uqj7mva9lsuwv0kr5asj4vvkwxnrwlhvxf98tscetek9
https://m.primal.net/NaWZ.mov

2024-12-26 21:17:03 UTC

Sadly, not everyone will choose to self custody their #bitcoin, and instead are choosing to gain exposure through owning ETFs, and stocks like #MSTR.
How bad is this for Bitcoin?
@npub1az9…m8y8 & @npub1emd…c9aw weigh in on this question in BR089.
https://m.primal.net/NHdS.mov

2024-12-23 02:41:09 UTC

Consolidating UTXOs into a single tx during wallet migration? 🚫
Staggered broadcasts and privacy-preserving wallet migration. ✅
@npub1az9…m8y8 , @npub1emd…c9aw & @npub1hea…g9v2 advocate for "Broadcast Pool" in Bitcoin Core , enabling future-dated txs for greater privacy & control. [BR089]
https://m.primal.net/NDtd.mov

2024-12-21 01:01:44 UTC

Is base chain privacy possible without compromising #Bitcoin's supply?
The fixed supply remains auditable because every UTXO is public. Avoiding privacy trade-offs like inflation risks ensure Bitcoin's limited supply .
@npub1az9…m8y8 , @npub1emd…c9aw & @npub1hea…g9v2 explore the dynamics in BR089.
https://m.primal.net/NCCH.mov

2024-12-18 16:35:24 UTC

Multivendor multisig: robust, but complicated.
NVK highlights the challenges non-technical users face, from firmware issues to emergency access. Is single vendor multisig good enough?
@npub1hea…g9v2 & @npub1az9…m8y8 dive into the trade-offs in BR089.
https://m.primal.net/MztF.mov

2024-12-16 18:09:12 UTC

Bad entropy attacks are rare but devastating.🪦
Single sig wallets are low-hanging fruit. Multisig setups and passphrases increase security, making brute-force attacks prohibitively difficult.
@npub1az9…m8y8 , @npub1hea…g9v2 & @npub1emd…c9aw discuss defending against these types of attacks. [BR089]
https://m.primal.net/MyBP.mov

2024-12-14 17:19:24 UTC

COLDCARD and Jade simplify PSPT workflows with full-file transfers. Trezor and Ledger, on the other hand, break it into parts, requiring more steps.
@npub1hea…g9v2 sheds some light on the complexities involved in building the Lark app for interacting with hardware wallets in BR089.
https://m.primal.net/MwBW.mov

2024-11-28 18:50:18 UTC

Reads, explore, advanced search, feed marketplace, premium option... @npub12vk…pugg is doing it all.
@npub1az9…m8y8 and @npub1u8l…turz discuss the rise and rise of Primal in light of their recent v2.0.21 release. (Thanks @npub16c0…6nvr !) [BR088]
https://m.primal.net/Mjgn.mov

2024-11-27 21:24:09 UTC

🚀BR088 - AnchorWatch, Bitkey, Krux, Primal, Proton Wallet, Kagi, Debifi, Namecheap $73M bitcoin revenue + MORE ft. @npub1r8l…x5dk , @npub1mxr…0htc , @npub1u8l…turz & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/43aKaJVRrI6aWaVeFh2v
➡️ Spotify: https://open.spotify.com/episode/6AYSnjHWRZlK0gVRuyk7vi
➡️ Amazon: https://music.amazon.co.uk/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/3cfe2572-9135-403b-8cde-20707baea450/bitcoin-review-podcast-with-nvk-guests-br088---anchorwatch-bitkey-krux-primal-proton-wallet-kagi-debifi-namecheap-73m-bitcoin-revenue-more-ft-livera-rijndael-ben
➡️ Apple: https://podcasts.apple.com/us/podcast/br088-anchorwatch-bitkey-krux-primal-proton-wallet/id1632017958?i=1000678451864
➡️ YouTube: https://youtu.be/e2lWhalrTRQ
Shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-88/
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/bitcoin-review-podcast-br088-anchorwatch
NVK, Stephan and Rijndael share their thoughts on AnchorWatch achieving Lloyd’s of London Coverholder status - a monumental shift for Bitcoin self-custody. 👇
https://m.primal.net/MitO.mov

2024-11-26 14:55:21 UTC

While Elon adds Bitcoin tips to Twitter, #nostr embraces what makes it unique: full interoperability and permissionless innovation.
@npub18lz…ugm3 explains why he thinks nostr is the water cooler fuelling innovation in BR085.
https://m.primal.net/MhvQ.mov

2024-09-25 23:02:45 UTC

🚀 BR076 - Sparrow, AnchorWatch, Exploding Pagers, Bitcoin Core Spam Attack, Ark goes mainnet, NBitcoin Secp256k1 Vulnerability + MORE ft. @npub1hea…g9v2 , @npub1emd…c9aw , @npub1u8l…turz & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/mtliXmqO4RstptPR9ecM
➡️ Spotify: https://tinyurl.com/mw4e5ud5
➡️ Amazon: https://tinyurl.com/bdfujyv7
➡️ Apple: https://tinyurl.com/mva6r4e9
➡️ YouTube: https://youtu.be/24OiD7-BiU8
Shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-76/
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/br076-sparrow-anchorwatch-exploding
Rob explains the paradigm shift in what AnchorWatch is doing by leveraging miniscript. 👇
https://m.primal.net/LCIv.mov