Stephan Livera

Ingested from X: https://x.com/stephanlivera
Followers on X: 194K
⚡ Zaps go to the mirror operator

Bitcoin podcaster. Investor & Advisor@ORANJEBTC,@bringinxyzUAE Media Licence Permit: 8630300

Public Key

npub159p7amvdh2eefqj2wrad3xv59m2c2tlwx5u4ykg6rt3lvxsg7ussu7mhqj

Profile Code

nprofile1qqs2zslwakxm4vu5sf98p7kcnx2za4v99lhr2w2jtydp4clkrgy0wggpp4mhxue69uhkummn9ekx7mqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdujfek77

Publishing to

nos.lol

relay.damus.io

offchain.pub

Author Public Key

npub159p7amvdh2eefqj2wrad3xv59m2c2tlwx5u4ykg6rt3lvxsg7ussu7mhqj

Show more details

Last Notes

2026-10-17 06:23:00 UTC

Repost @GrainofSaltSF:
At 1:20 mark the Bloomberg host thought he had a tough question and
@saylor
gave a master class response. Well done.
@Strategy
MSTR STRC Digital Credit.
https://pbs.twimg.com/media/HUvl9RObIAA_Zf8.jpg?name=orig
https://video.twimg.com/amplify_video/2111033691128651776/vid/avc1/720x720/7bzJopyd55ZNqTPj.mp4?tag=29

2026-10-17 05:49:00 UTC

"Amid this model-driven acceleration, human attention is a constant bottleneck."
https://www.anthropic.com/research/employment-at-anthropic

2026-10-16 19:21:00 UTC

↪ Replying to @coinjoined
"This is not a cryptographic break, new attack, or weakness in the ECDSA curves. In fact, this makes us more confident the curves were chosen without any backdoors or intentional weaknesses."

2026-10-16 16:21:00 UTC

Repost @damienslash:
European innovation is not a "joke"
https://video.twimg.com/amplify_video/2111130440849391617/vid/avc1/1080x1920/JL4oLz7c4yvzFrIL.mp4?tag=29

2026-10-16 12:39:00 UTC

If Tesla tried to launch the Roadster in the EU...
https://video.twimg.com/amplify_video/2111074456198418432/vid/avc1/720x1280/fTdpMO1lEIrs9PO2.mp4?tag=29

2026-10-16 11:43:00 UTC

Repost @gaborgurbacs:
European bureaucrats already thinking ahead how to regulate
@elonmusk
’s flying Teslas
https://pbs.twimg.com/media/HUv-Am4XMAAJZHT.jpg?name=orig

2026-10-16 09:25:00 UTC

↪ Replying to @MKBHD
Repost @ProgrammerDude:
“How did you keep the development of this secret for so long?”
“I didnt. I simply told everyone and nobody believes us”
Lmao

2026-10-16 07:28:00 UTC

Repost @Stadicus3000:
To be clear: with Tangem, the full security of your wallet depends on your mobile phone. The card is just signing everything blindly.
Shame on them for their dishonest marketing. Don't be fooled.
https://video.twimg.com/amplify_video/2110462165089980417/vid/avc1/1920x1080/3ItVstxMONUZh-aL.mp4?tag=29

2026-10-16 07:14:00 UTC

Repost @stevenroose3:
Extremely bullish on this! Mining decentralization is vital for bitcoin's long-term survival!
https://pbs.twimg.com/media/HUr4WokXAAAxl4b.jpg?name=orig

2026-10-16 02:46:00 UTC

Repost @JoelDeTeves:
Elon haters today
https://pbs.twimg.com/media/HUuDXRjbAAAm9DP.jpg?name=orig

2026-10-15 19:22:00 UTC

Repost @roasbeef:
Announcing LayerTree: a new tree-based scaling solution for Bitcoin that permits O(1), independent of the number of users in the system:
https://nitter.net/lightning/status/2110812651882217677
A single UTXO can hold the balance of millions of users as an off-chain Merkle-sum tree.
Transaction introspection techniques permit batched exit from the system in a single transaction w/o any pre-signing:
http://layertree.tech
https://video.twimg.com/amplify_video/2110813122357325824/vid/avc1/1920x1080/qXxo4McRy2FYOdr8.mp4?tag=29

2026-10-15 16:07:00 UTC

More financial products, more choice. More ways for HODLers to keep HODLing and not have to sell.
Also this cycle we're starting to see more of this "pre buy the bitcoin now" and use debt to get it now before it runs up. We'll see more of that to come.
https://pbs.twimg.com/media/HUrwOv8W4AE8CPM.png?name=orig

2026-10-15 13:20:00 UTC

Repost @Breez_Tech:
Have a coffee on us ☕️
1,000,000 sats. First come, first served.
1. Download Glow
2. Buy a coffee
3. Post a photo with it & tag
@Breez_Tech
4. Add your Glow Lightning address (
http://breez.tips
)
5. We'll send you 5,000 sats
Download Glow. Get a Cup of Joe.
👉
http://getglowgetjoe.coffee
https://video.twimg.com/amplify_video/2110721383823024128/vid/avc1/1920x1080/bfneDgro1lXX0j5j.mp4?tag=29

2026-10-15 12:46:00 UTC

I've been using Grok's voice mode a lot this year, and two things stand out.
First, the speech-to-speech feels like a real conversation. I can interrupt, ask a follow-up, and get a clear answer in a second or two. I use it to research topics quickly before a podcast, so I go in with a better grasp of the concepts, and hopefully that shows in the quality of the interview.
Second, the speech recognition has made a big jump. Four or five years ago I was getting transcripts done on sites like Rev, and the error rate was far higher, especially on technical Bitcoin terms. Now it mostly gets words like Taproot, PSBT and miniscript right.
If voice agents can handle niche technical language, that's surely going to change bitcoin education and support quickly.
https://pbs.twimg.com/media/HUm0LiyW8AAHlzx.jpg?name=orig

2026-10-15 11:28:00 UTC

From this Ledger investigation, looks like it was a localized distribution attack

2026-10-15 09:34:00 UTC

↪ Replying to @coinjoined
Repost @coinjoined:
You're conflating two very different issues here.
The recent examples of users losing funds despite having a screen largely involve Ethereum smart contracts, where the consequences of signing aren't meaningfully verifiable by the average user.
But I'm talking about Bitcoin. A Bitcoin recipient address and transaction amount can be independently verified on a hardware wallet's trusted display. I'm not aware of a documented case where someone verified the full Bitcoin address on their device and was nevertheless tricked into signing a transaction to a different destination.
Address poisoning exists, of course, but that threat is arguably even worse when the device has no trusted display at all.
Your own website raises the possibility of malicious apps appearing in app stores, only to dismiss the concern. Yet we've repeatedly seen fake Ledger, Trezor, BitBox, Wasabi, and Sparrow applications.
Your packaging simply instructs users to visit the official website and download the app. There's no trusted display on the device to independently verify what the app is asking them to authorize.
An attacker could cheaply place a convincing QR-code sticker over those instructions at a retailer like MediaMarkt, directing customers to a malicious app. Not everyone would fall for it, but some inevitably would.
App hardening, certificate pinning, and root detection don't solve the problem of users installing an entirely malicious application in the first place.
That's the threat model I'm asking you to address, not whether screens can magically make every transaction safe.

2026-10-15 08:33:00 UTC

Repost @JosefTetek:
Reminder: if it doesn’t have a screen, it’s not a hardware wallet. It’s a blind signer.

2026-10-15 06:45:00 UTC

Repost @levie:
Moving from chatting back and forth with agents, to having agents that you spin up in the background to do useful work for you is probably on the order of 100X or 1000X more token consumption than what we’re seeing today.
Most work right now is essentially rate limited by our ability to process and work with information. Moving data between systems. Reviewing a document. Looking through code for security issues. Processing log data to look for even patterns. Looking up information about a prospective client. Almost all of knowledge work is constrained by these steps, and AI has become a huge unlock to that.
So our first step was to use AI to do these individual tasks much faster for us. That was the chatbot phenomenon that we have been experiencing for the past 3+ years. But we can still then only augment the work that we remain in the loop for, and we’re highly limited by our ability to parallelize this work by our own bandwidth and context.
But where we’re going is quite different. As AI models continue to improve at incredible rates, we can hand off more and more work to the agent. First it’s letting the agent run with a harder problem. Then it’s giving a few agents multiple parts of a task at once. But we’re not far off from being able to throw an arbitrary number of agents at a problem and just say “come back when you’ve accomplished this goal”.
Now imagine that agent swarm for any problem we can think of. Protecting our codebases, data, and systems. QAing every change we make and make sure all our infrastructure is robust and does what it should. Looking through every document for potential risks. Auditing this company with vastly more data reviewed. And on and on. Most of this isn’t even replacing existing work we do, it’s all net new.
These agents will get deployed as swarms by people, by workflows, by triggers, and by other agents. And none of this would be possible if the models weren’t getting better, and if the cost of AI didn’t make it affordable. Both of those trends though are playing out. Now the next frontier is just having enough compute. But this is where it’s heading.

2026-10-15 03:17:00 UTC

Agree with
@coinjoined
- stop the dunking and let's get more people using secure setups.
Bullish on multi sig.
https://video.twimg.com/amplify_video/2110462165089980417/vid/avc1/1920x1080/3ItVstxMONUZh-aL.mp4?tag=29

2026-10-14 15:56:00 UTC

And for all we know, Satoshi might have lost his keys/coins! Hardly a vindication of single sig.

2026-10-14 15:50:00 UTC

↪ Replying to @stephanlivera
This is a silly gotcha.
Satoshi didn’t need advanced security. He mostly held and didn’t spend. Practical multisig didn’t exist yet.
Early multisig was bare multisig. Clunky and barely used. P2SH (2012) made it usable. P2WSH and Taproot made it much better.
Modern multi-vendor multisig exists because of 15+ years of real losses from single-sig mistakes, not because people ignored what Satoshi did.

2026-10-14 03:39:00 UTC

Good to see the (re-entry) of collab custody options for easy multi sig.
Looks like you can either generate a 3rd key in the Blockstream app, or ideally, generate it independently and import the xpub as 3rd key in a 2 of 3. But that 3rd key is really more like a recovery key and not something you'd use day to day.

2026-10-13 15:47:00 UTC

Repost @coinjoined:
There shouldn't be any cables. First 3 images show the implant, last image a genuine
@Ledger
Nano X.
Allegedly affected resellers so far: MediaMarkt, Saturn 🇩🇪, Cryptobilis 🇲🇾, Ozon 🇷🇺 and Singapore Airport 🇸🇬
https://pbs.twimg.com/media/HUhZRdaWIAEbOMB.jpg?name=orig
https://pbs.twimg.com/media/HUhZSARXUAAnu-O.jpg?name=orig
https://pbs.twimg.com/media/HUhZSjBWYAA_g_R.jpg?name=orig
https://pbs.twimg.com/media/HUhZTHDX0AAT4Ve.jpg?name=orig

2026-10-13 15:07:00 UTC

Repost @n1ckler:
Post-quantum transactions that require only 96 bytes on-chain:
@will_wjk
(Imperial College) et al. published a very interesting variant of Shielded CSV, called Compact Shielded CSV.
I've always thought the CSV model is attractive in a PQ setting: the blockchain only stores the nullifier, so miners don't have to verify a signature before it gets into a block. Compact Shielded CSV goes a step further: the on-chain nullifier carries no signature at all, only what they call a "degriefer". Pre-quantum that's more than Shielded CSV's 64 bytes, but post-quantum it's much less.
Unlike Shielded CSV, which operates on top of Bitcoin, Compact is its own blockchain. That matters for the degriefer: a Compact miner who includes a nullifier with an invalid degriefer can't claim the block reward. Shielded CSV could adopt the degriefer, but on Bitcoin there is no such penalty. Anyone who sees your nullifier before it's confirmed can front-run it with bogus copies for ~100 bytes of fees each, and your spending proof then has to show for every one of them that it's invalid. This is something we deliberately avoided in the design of Shielded CSV. With PQ signatures as large as they are, it probably is a reasonable trade-off.
Compact also never discusses reorgs, which are a significant part of the Shielded CSV design. Integrating the degriefer into Shielded CSV would require combining it with the existing reorg handling.
https://arxiv.org/pdf/2609.32015
https://pbs.twimg.com/media/HUg0vpcWIAAy8ux.png?name=orig

2026-10-13 14:20:00 UTC

↪ Replying to @stephanlivera
Correction in the case of single sig and passphrase, you might not have been saved if implant captures the passphrase too

2026-10-13 13:39:00 UTC

Ledger implants. Coldcard entropy bugs. Fake wallet apps.
The lesson isn't 'switch brands.' It's that one device shouldn't decide your fate.
Single-sig + passphrase (or 2-of-2) stops a thief but one lost secret locks you out. 2-of-3 or expanding multisig covers both: one stolen key can't spend, one lost key can't lock you out.
Different vendors, keys generated independently.
https://pbs.twimg.com/media/HUg72VpacAACp02.jpg?name=orig

2026-10-13 11:02:00 UTC

Repost @dhh:
This was nearly a perfect one-shot prompt too. Only additional prompt was "Insert sig/text/date where the cursor is". Then just wrapped it up and sent it. What a time to be alive!
https://pbs.twimg.com/media/HUgW6RZasAAsUmD.jpg?name=orig

2026-10-13 08:12:00 UTC

Crazy story, beware out there. Scammers are getting more and more advanced.
Sooner or later people will realize the need for using cryptography to ensure they are talking to the right person.
At a guess, the future looks like more widespread use of yubikeys and similar.

2026-10-13 07:59:00 UTC

Repost @MagicalTux:
Ledger Flex sold at Singapore Airport confirmed to contain a spy implant!
@BenYorke
found suspicious marks on his
@Ledger
and sent it to me rather than using it, that was probably the best decision here.
https://piped.video/watch?v=Nf4FEFlgv3Q
https://pbs.twimg.com/media/HUfscorbEAAWzfa.jpg?name=orig
https://pbs.twimg.com/media/HUfsevTaMAAEd1l.jpg?name=orig
https://pbs.twimg.com/media/HUfshS5bUAAXQS1.jpg?name=orig
https://pbs.twimg.com/media/HUT4AlBaYAA82Mw.jpg?name=orig

2026-10-13 07:43:00 UTC

Repost @lunaticoin:
Ledger ahora tiene una web oficial donde puedes ver cómo es tu dispositivo desmontado para que puedas comparar y ver si tiene implantes no autorizados.
Me pinchas y no cae gota.
Menuda 2ª mitad de 2026
https://pbs.twimg.com/media/HUfqm68WgAAQQ4H.jpg?name=orig

2026-10-13 00:02:00 UTC

Repost @ZubyMusic:
After 22 years on social media, it's clear to me that most people want to be entertained and outraged more than they want to be successful.

2026-10-12 21:18:00 UTC

Repost @minordissent:
Reminder that your desire to "fix society" is almost entirely just personal resentment at the world for not giving you as much power and status as you think you deserve.
Also reminder that the modern Western world is more "fair" than any previous time or place in all of human history, such that by the time people reach their 30s the correlation between what they "deserve" and what they get is very close to 1.
If you fully digest this pill, relinquish trying to fix others and society instead focusing entirely on fixing yourself, you are like five years away from a truly exceptional life.
And now also might for the first time have enough competence and wisdom to be able to tinker with others and society without destroying them.
https://pbs.twimg.com/media/FUjwFscUcAArDcY.jpg?name=orig

2026-10-12 19:42:00 UTC

Repost @forwardsecrecy:
The crazy thing about this ledger implant mess is that it does not appear to be your run of the mill hacker(s).
- at least 3 revisions of the hardware, each one evolving
- going on for quite some time undetected
- not a software bug, long term persistence was goal
- buying of business(es)
- custom antenna fabrication
- vast eSIM provisioning & monitoring logistics
This has the hallmarks of a group that was funded, resourced, and had the ability to produce custom hardware in volume (in conjunction with fabs and board houses). That raises the floor on potential attacker(s) and rhymes with certain places. I'm betting there is a codeword associated with this entire operation.

2026-10-12 19:03:00 UTC

Repost @MagicalTux:
I've been using Ledger devices for many years, and the recent discoveries of hardware implants haven't changed my trust in them.
If anything, they've reinforced something I strongly believe in: you should be able to inspect the hardware you entrust with your Bitcoin.
Bitcoin was built around a simple principle: don't trust, verify.
That principle shouldn't stop at software or cryptography. It should extend to the physical devices holding our keys.
Sealed or tamper-evident designs are perfectly fine, as long as they're transparent and don't prevent independent inspection.
Ledger devices are relatively easy to open and examine. That's one of the reasons these malicious implants could be discovered and investigated.
No hardware wallet is immune to supply-chain attacks. But security shouldn't depend entirely on trusting the manufacturer or distributor.
Physical inspection isn't a guarantee of security, but it's an essential part of being able to verify what you're actually using.
Trust comes from the ability to verify, not from being told something is secure.

2026-10-12 17:55:00 UTC

Repost @alistairmilne:
Having been the only country to dox all known crypto holders to organised crime groups, France now wants a list of everyone holding €100k+ of Bitcoin in self-custody
If you don't declare it: €10,000 fine
If you do declare it: Wrench attack / kidnapping
Can't make it up

2026-10-12 13:17:00 UTC

Repost @0xJohannes_:
UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well.
@Ledger
should initiate an immediate product recall to protect users.
I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet).
The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).
My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.
Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.
I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
https://pbs.twimg.com/media/HUbrFdJXUAARwOS.jpg?name=orig
https://pbs.twimg.com/media/HUbs_CzWgAAtA-7.png?name=orig

2026-10-12 02:44:00 UTC

Repost @pythcoiner:
Everyone looking at the ledger supply chain attack and dunking on it, reminder: any device that has a bluetooth/wifi chip carry the exact same risk BY DESIGN. The only way to prevent such attack is geo-distributed multi-vendor multisig. No feature will save your ass.

2026-10-11 13:38:00 UTC

Repost @ORIGINseoulBTC:
엇갈리는 지표, 하나의 시장을 읽는 법
How Do You Read Conflicting Market Signals?
🎤 STEPHAN LIVERA l Podcaster, SLP
🎤 JAMES CHECK l Co-Founder, CEO & Lead Analyst, checkonchain
🎤 ALEC DEJANOVIC l Co-Founder & CPO, checkonchain
온체인·ETF·파생상품 데이터가 엇갈릴 때 Checkonchain이 이를 하나의 시장 관점으로 해석하는 방식.
How Checkonchain combines conflicting on-chain, ETF and derivatives signals into a coherent market view.
https://video.twimg.com/amplify_video/2109275577702313984/vid/avc1/3840x2160/A3QKhrrnZ8szlO9O.mp4?tag=29

2026-10-11 12:32:00 UTC

↪ Replying to @moo9000
Repost @nunchuk_io:
A few words given the recent exploits on hardware signing devices:
• The Ledger supply chain attack represents one of the most sophisticated attacks thus far on the wallet ecosystem. In many ways it’s a lot more sophisticated than the Coldcard RNG exploit, because that one was software only. This one took a cross-border company buyout, tampering with the devices (implanting an eSIM, an LTE module and a CPU) and manufacturing the implants at scale.
• These sorts of attacks have been predicted by early Bitcoiners, but in Bitcoin they remained theoretical or crude until this year. It shows that the level of sophistication of attacks has risen quickly, and what was previously “good enough” advice on wallets and self-custody is no longer sufficient.
• When we started Nunchuk a few years ago, our premise was that multisig, and multi-vendor multisig, needs to become the standard for self-custody in the future. But even we didn’t expect how fast it would materialize. This is likely due to 2 factors: Bitcoin getting more mainstream, and the rise of AI-assisted attacks. This is a Sputnik moment for Bitcoin self-custody. The defenses need to level up.
• Passphrases wouldn’t have helped in the Ledger case, since you are required to enter the passphrase into the device for it to sign any transactions. A compromised device that phones home the seed phrase can also easily phone home the passphrase the moment you enter it.
• Similarly, generating the private key somewhere else (even by rolling dice) and subsequently importing it onto a tampered device wouldn’t save you here. The device can phone home the seed phrase the moment it’s imported.
• Anti-tampering techniques might help, such as transparent casing or bricking the device if it’s tampered with. Or forever displaying a message once the seal is broken. Or using on-device encryption between the internal hardware components. But a dedicated and resourceful enough attacker can still find ways to get around these layers. Tampering and anti-tampering have long been a cat-and-mouse game. In 2008, card readers doctored right off a Chinese production line sent card data and PINs over mobile networks to Pakistan. The Ledger attack is the same playbook, 18 years later. The bigger the target, the more attackers spend on overcoming the defenses.
• You should order directly from the vendors as much as possible, using a PO box for privacy.
• Any setup that relies on a single hardware/software stack or a single vendor should be considered at risk.
• Building your own hardware signers from generic parts is a good option for technical users.
• Multi-vendor multisig should become the standard. Each signer should have a completely independent hardware/software stack from the other signers. The point is that there shouldn’t be any single-point-of-failure anywhere in your setup.
• Many advanced protocols rely on timelocks and the recovery path being a simple singlesig. The recent attacks and exploits should highlight how dangerous this could be. Timelocks simply delay a risk. If a seed is compromised and there’s a timelock involved, the attacker just needs to wait out the timelock. (For Miniscript wallets, there’s the wallet descriptor too, but presumably it also gets sent to the device at some point.) Vault-like protocols face a similar problem: any withdrawal or recovery path that relies on a single key is a potential single point of failure.
• For our on-chain timelock-assisted wallets, in a few weeks we are adding the option to customize the recovery path to be an M-of-N, so that, if you want, spending would require multiple keys at all points during the wallet’s lifetime.
https://pbs.twimg.com/media/HUMx320aAAIgSCD.jpg?name=orig

2026-10-11 00:04:00 UTC

Repost @TheBTCGame:
@Excellion
The concept
@mflaxman
expressed on
@stephanlivera
over 7 years ago.
https://www.stephanlivera.com/215
https://nitter.net/t.co/soovHlh
…

2026-10-10 22:10:00 UTC

Repost @cljack:
Talked to a finance guy today who said his firm has not only totally stopped buying software in favor of building it all in-house, they've actually hired multiple SWEs to do the buildouts, even though their salaries cost more than the subscription fees they were paying. Having tools custom-built for their specific business is just that valuable. So they're not spending less money or saving time, versus the pre-AI world, but they're getting a much higher return on the money and time they are spending. Much to ponder

2026-10-10 17:21:00 UTC

Unauthorized hardware implant confirmed by Ledger

2026-10-10 16:08:00 UTC

Repost @w_s_bitcoin:
New to contributing to open source on GitHub? Start with these terms:
Repo: The project's files and history.
Issue: A place to report a bug, suggest an idea, or discuss work.
Fork: Your own copy of a repo on GitHub.
Branch: A place to work on changes separately.
Commit: A saved set of changes.
PR (pull request): A proposal to merge your changes into the project.
Review: Feedback on proposed changes.
Merge: Bringing approved changes into a branch.
The easiest way to start contributing to software projects is to spot bugs or unexpected behavior, then work with your clanker to write a clear report explaining what you expected, what happened, and how to reproduce it.
Don’t have a GitHub account yet? Ask your clanker to walk you through setting one up.

2026-10-10 07:13:00 UTC

Repost @rodarmor:
5/ Progress on insane galaxy brain math that nobody cares about, much less understands, does not indicate that one of the most studied, most widely deployed, and most important mathematical objects in the history of humanity is at risk.

2026-10-10 02:36:00 UTC

The cost saving for business is going to be pretty clear. Customers get faster, more consistent and 24/7 service.
Eventually it'll go more agentic, user's personal agent talks to company MCP.
https://pbs.twimg.com/media/HUN6B-HbcAAdAoQ.jpg?name=orig

2026-10-10 02:00:00 UTC

Repost @Excellion:
Multi-vendor multisig.

2026-10-09 17:25:00 UTC

Repost @bot:
Grok Bot now has its own email.
Bot can use it to sign up for services, contact businesses for you, or schedule time with someone.
https://pbs.twimg.com/media/HUNJGCXWsAA1hfT.jpg?name=orig

2026-10-09 15:55:00 UTC

↪ Replying to @moo9000
https://pbs.twimg.com/media/HUMx320aAAIgSCD.jpg?name=orig

2026-10-09 14:27:00 UTC

Unconfirmed so far, but one theory is that some of the devices may have been tampered with a spy implant?
https://pbs.twimg.com/media/HUMY0AJbkAAtabm.jpg?name=orig
https://pbs.twimg.com/media/HUMY1HhbEAAuVgT.jpg?name=orig

2026-10-09 14:27:00 UTC

↪ Replying to @MagicalTux
https://pbs.twimg.com/media/HUH7HMIboAACTx3.jpg?name=orig

2026-10-09 14:02:00 UTC

Keep an eye on this story and beware if you got your Ledger from this reseller.

2026-10-09 13:38:00 UTC

$5.75T in a quarter is roughly $62B a day of final settlement.
No bank holidays, no business hours, no permission needed.
Just blocks every ~10 minutes, for anyone on earth.
https://pbs.twimg.com/media/HUMRuCOXIAAaDia.jpg?name=orig

2026-10-09 08:20:00 UTC

Repost @LindellYehuda:
In case people think I am advocating for not being cautious, or thinking that AI won't be an issue for any cryptography, that's not the case. Let me word what I think would be a balanced approach regarding AI and crypto. 1/n

2026-10-09 05:40:00 UTC

I was a small account tweeting through the block size wars. It felt existential back then, and Bitcoin came out stronger.
The AI and encryption fear will likely follow the same arc: real engineering work, noisy headlines, then people forget they were scared.

2026-10-09 01:23:00 UTC

Repost @ProofOfKeags:
Alright I’ll bite here.
I don’t think it follows from AI solving old problems (read: proving conjectures) that computational problems of decidability and computational complexity suddenly go from hard to trivial.
Many problems that are assumed to be hard are backed by the assumption that P ≠ NP, which is a sensible intuition that we haven’t been able to prove.
I’m not deeply familiar with attempts to prove P =? NP but I suspect everyone’s trying to prove inequality not equality.
The hardness of cryptographic problems does not depend on the provability of inequality, merely the truth of it. And nothing about the latest generation of models getting cracked at frontier math suggests to me that there is something fundamentally easy about NP hard problems in general.
Proving theorems is a mostly mechanical process with some creative insight. Algorithmic design wherein you compute a value is a categorically different problem space that bears no resemblance to proving stuff.
We should expect these models to be good at and get better at proving stuff. That doesn’t mean hard problems become easy.

2026-10-08 21:04:00 UTC

Repost @AnthropicAI:
To secure open-source software, we’re launching OSS Scanner.
We’ll use our frontier models to periodically scan opted-in open-source projects for vulnerabilities, at no cost. Our reports will provide a proof-of-concept, explanation, and suggested fix.
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source

2026-10-08 17:23:00 UTC

No bunker mode.
Shouldn't be re-using addresses anyway.

2026-10-08 16:54:00 UTC

Catch the show here:
Spotify:
https://open.spotify.com/episode/1QtZVNIriEkmlFiMdeaqpz?si=b_NVVpJMQymkbkWxeEepzg
Site:
https://stephanlivera.com/781
Rumble:
https://rumble.com/v7gkupa-seed-phrases-vs-key-sharding-multisigs-ux-trade-offs-setzeus-slp781.html
YT:
https://piped.video/8CbLf0nDQPk

2026-10-08 16:50:00 UTC

Repost @setzeus:
More multisig ~~~madness~~~ w/ one of the true OG bitcoin podcasters!
(literally every single one of my heroes in the space has sat down w/
@stephanlivera
)
https://video.twimg.com/amplify_video/2108235880356069376/vid/avc1/1920x1080/l_ePL_AdIJefky91.mp4?tag=29

2026-10-08 16:42:00 UTC

Seed Phrases vs Key Sharding: Multisig's UX Trade-offs | Setzeus SLP781
@setzeus
of
@getcofund
argues most people won't use seed phrases, weighs email-login key splitting against verifiability, and explains policy multisig.
Timestamps
00:00 — Intro
00:37 — From SetDev's L2 Work to Multisig
03:20 — After the Coldcard Hack: Why Self-Custody?
07:56 — Justin Drake's Bunker Mode and ECDSA
10:13 — Are Bitcoiners Bad at Building Products?
15:59 — Seed Phrases vs Privy-Style Key Sharding
20:25 — Trade-offs: Verifiability and Lock-In
25:35 — Recommending Self-Custody After Hacks
30:40 — Families, Fiduciaries, and Founders
34:25 — Spending Policies via Taproot Script Paths
37:24 — Limit: Bitcoin Spend Caps Not On-Chain
39:59 — Key Rotation Means Moving Funds
41:11 — Cofund Pricing and Fees
42:03 — Thesis: Multisig Becomes Joint Accounts
https://video.twimg.com/amplify_video/2108235880356069376/vid/avc1/1920x1080/l_ePL_AdIJefky91.mp4?tag=29

2026-10-08 08:17:00 UTC

True, every good Bitcoin wallet already generates new addresses for each transaction.
The main exceptions are probably exchanges or some of the multi-coin wallets that use a static address.
https://pbs.twimg.com/media/HUF6TgOaoAAqKoY.jpg?name=orig

2026-10-08 05:55:00 UTC

Careful about veering into 'fallacy of composition' here. What is true for part, is not necessarily true for the whole.
Yes it will be disruptive, but there will be new jobs and new industries created out of all this.

2026-10-08 05:22:00 UTC

Repost @secondhq:
1/ On Monday 5 Oct an attacker exploited a bug in our Ark server's boarding flow and took 0.75 BTC of Second's own liquidity. No user funds were affected.

2026-10-08 04:43:00 UTC

↪ Replying to @drakefjustin
Repost @stephanlivera:
Irresponsible FUD. The OpenAI maths papers are UNRELATED to secp256k1 falling 'in months' because of what you 'feel'.
And of course, don't re-use addresses, this has already been a long standing best practice.

2026-10-08 01:11:00 UTC

Repost @wiz:
Everyone contributes to Bitcoin in their own way.
Wiz & Associates has contributed for years as a network operator, providing DNS and other critical infrastructure for the community. We now propose to extend that operational role to the top-level of the Domain Name System 🚀

2026-10-08 01:01:00 UTC

Repost @LindellYehuda:
I wasn’t going to comment since this is a really bad take IMO, but since it’s taken off I feel the need to. To my understanding, there is no evidence whatsoever pointing to a break of decades old hardness assumptions like elliptic curve cryptography. 1/n

2026-10-08 01:01:00 UTC

Repost @LindellYehuda:
Of course, we can’t prove that EC discrete log is hard, since we haven’t been able to prove P neq NP. But just throwing out - AI is doing amazing math so elliptic curve hardness is in danger has no logical basis whatsoever. 3/n

2026-10-08 01:01:00 UTC

Repost @LindellYehuda:
Worse, I can generate malicious banking apps and even operating systems and sign them and push them to people phones and computers and completely take them over. But this is fear mongering since there’s zero evidence to this capability existing. 5/n

2026-10-08 00:52:00 UTC

Repost @wizregistry:
Today, ICANN just published the 2026 new gTLD applications! Wiz & Associates filed a community priority application for the .bitcoin TLD, on behalf of the people and organizations that run, build, and provide the infrastructure, software, and services of the Bitcoin network. 🧵

2026-10-08 00:46:00 UTC

↪ Replying to @matthew_d_green
Repost @LindellYehuda:
What a strange take? So you think all hardness assumptions are not due to inherent hardness but to human weakness in finding algorithms? I couldn’t disagree more. (Of course we can’t know but there’s no evidence whatsoever pointing to this conclusion.)

2026-10-07 20:04:00 UTC

Repost @giacomozucco:
While this "AI" scare is almost as annoying as the "quantum" scare, I have to concede that:
- at least attention-based transformers *did* heavily affect work, life, art, society, security (and Bitcoin security in particular) in the last few years and months, even without the arrival of some mythological "AG(S)I singularity";
- while I don't think an LLM will "find it", especially in months, I consider a classical vulnerability in the discrete log hypothesis waaay more likely than the existence of a QC with more than 1000 qubits (ever), let alone of a practical one in my lifetime.
Conclusion: while I'll continue keeping all my sats in pubkey-exposed Taproot addresses, with more privacy and flexibility, I'll still occasionally share this doom-porn, hoping to scare some user away from address reuse, which is terrible for privacy.
Call your exchange, tell them that, if they are making you reuse an address, they are not only basically quntum-raping you, but now even AG(S)I-raping you!
(Just joking, don't even use "exchanges", always buy and sell sats p2p, KYC is the real danger for you and your loved ones, much more real than scifi-doomerism).

2026-10-07 18:02:00 UTC

Repost @elonmusk:
However, most
@Bot
requests are pretty simple and will be handled by a lightning-fast version of Grok 4.8 when that comes out.
Operating principle is to give Grok Bot users the best possible combination of speed & intelligence.

2026-10-07 15:18:00 UTC

Repost @csuwildcat:
I've never heard a dumber question to a construction worker than "But aren't you worried this <one type of building> job will end when the building is finished?". Besides the Winchester House, I can't think of another crew that had a ~permanent, single-site gig in modern history.
https://video.twimg.com/amplify_video/2107543922281000960/vid/avc1/1280x720/Boo8Oy3Xb2cJAD3f.mp4?tag=29

2026-10-07 14:58:00 UTC

Repost @BitcoinForCorps:
Bitcoin trades more than Google, Apple and Amazon combined.
@PunterJeff
of
@Strive
on what that depth actually buys an allocator sizing a $100M position — and
@DavidFBailey
of
@nakamoto
on whether a company holding bitcoin is allowed to have an opinion on the protocol.
Moderated by
@stephanlivera
. BFC Symposium, Hong Kong.
https://video.twimg.com/amplify_video/2107847359795216384/vid/avc1/1920x1080/pDOahQH2x8B0fp2q.mp4?tag=29

2026-10-07 11:14:00 UTC

Repost @JohannKerbrat:
I'm excited to share we're adding $25 million of Bitcoin to our balance sheet.
We believe firmly in the future of crypto and view this as a strategic move for our overall asset diversification.
https://pbs.twimg.com/media/HT_5HD4boAAn7uS.jpg?name=orig
https://pbs.twimg.com/media/HT_5HcRbkAAxLH4.jpg?name=orig

2026-10-07 10:27:00 UTC

Repost @AntoineMinoux:
Half our churn reasons at Fernand lately are a version of "I love you guys, but I'm rolling my own."
It's a weird feeling when people like what you built but still decide to rebuild it themselves. This was not a remotely okay possibility even 6 months ago, but new coding models made it so easy that you can just one-shot a SaaS you can self-host in about 3 hours, and for less than $20 worth of tokens.
We are building for small teams and solopreneurs, so we are impacted first, but I'm also hearing stories from friends working at publicly traded tech companies replacing things like Salesforce, Mixpanel, HubSpot, Datadog...
My prediction:
- Enterprise contracts get negotiated down. "We could build this ourselves" is becoming a credible option, and buyers know it. Huge leverage for buyers atm to threaten churning and get a better rate.
- Infrastructure products hold on longer (email, hosting, VMs, compute, and anything remotely needing 100% availability and uptime)
- Selling to tech-friendly crowds, devs, solopreneurs is 100x harder than before. If you can't prove value all day everyday, you are out. One papercut, you are out. One too many outage? Out. Didn't ship the last coolest thing in 3 days? Likely out

2026-10-07 07:45:00 UTC

This greatly improves the case for using Grok Bot!

2026-10-07 07:44:00 UTC

AI is a bicycle for the mind, as Steve Jobs said about the computer itself.

2026-10-07 04:02:00 UTC

Feels good to HODL

2026-10-07 02:13:00 UTC

↪ Replying to @4moonsettler
momentum on BIP448 covenants for bitcoin?

2026-10-07 01:57:00 UTC

I wonder if this is economically similar to what anti-IP predicts for software.
Adobe's subscription rent depends on the legal inability of others to offer a close substitute.

2026-10-06 07:00:00 UTC

Repost @bringinxyz:
Buying Bitcoin is not the hard part. Running a European company on it is.
Introducing Bringin Business.
A Business account built for Bitcoin, designed for self-custody →
https://video.twimg.com/amplify_video/2107365249083191296/vid/avc1/1920x1080/WPllvomYuaiGWyv6.mp4?tag=16

2026-10-06 02:38:00 UTC

↪ Replying to @dotkrueger
Repost @PunterJeff:
"Credit gold" created synthetic paper gold claims.
Digital Credit is the opposite. It's a USD fiat claim, not a BTC claim.
We take the proceeds, buy Bitcoin, and take the REAL BTC into custody. Our balance sheet absorbs the BTC volatility, and we pay the distribution with our balance sheet.
- Publicly traded, Nasdaq listed
- Balance sheet reserves in Bitcoin, cash, and marketable securities
- Transparent filings (weekly)
- Credit priced in real time, without quarterly financial lag
- Orders of magnitude more liquid than traditional bank preferreds
This is a $15 Billion market, growing rapidly.
Let's talk about it, on air.

2026-10-06 02:02:00 UTC

Interesting sign of the times
https://pbs.twimg.com/media/HT5CKifa8AAEFzb.jpg?name=orig

2026-10-05 15:55:00 UTC

Repost @andysmith_asap:
Smarter Web's Capital Structure and MORE Preferred | Andrew Webley SLP780
@stephanlivera
with
@asjwebley
https://piped.video/watch?v=C5iGQ0kp_Lo

2026-10-05 15:51:00 UTC

Repost @asjwebley:
I really enjoyed chatting with
@stephanlivera
about Smarter Web's capital structure and why we designed MORE as an additional source of long-term capital.
Although we have met in person at a few events, this was the first time we have recorded a podcast together. You can watch it below.
LSE:
#SWC
| OTCQB:
$TSWCF
| FRA: $3M8
https://video.twimg.com/amplify_video/2107129334142296064/vid/avc1/1920x1080/2Th0ra6O3D8VDR_R.mp4?tag=29

2026-10-05 15:38:00 UTC

Catch the show here:
Spotify:
https://open.spotify.com/episode/4iD9zuQRzAldI9eMWKmNMO?si=Q6X3I_x_RHyuGLYU2Cimag
Site:
https://stephanlivera.com/780
Rumble:
https://rumble.com/v7gfaq4-smarter-webs-capital-structure-and-more-preferred-andrew-webley-slp780.html
YT:
https://piped.video/C5iGQ0kp_Lo

2026-10-05 15:31:00 UTC

Smarter Web's Capital Structure and MORE Preferred | Andrew Webley SLP780
@asjwebley
of
@smarterwebuk
walks through Smarter Web's capital stack—ordinary shares, Coinbase credit, and the MORE preferred as income equity.
Timestamps
00:00 — Intro
00:25 — Hargreaves Lansdown to Smarter Web
02:09 — Saylor Pivot Was His Bitcoin Moment
04:00 — Listing the UK Treasury Play
08:44 — Clean Balance Sheet Structure
11:25 — Coinbase Credit at the Bottom
14:32 — Debt vs NAV Reporting
19:45 — Bitcoin-per-Share vs Total Return
21:32 — How Institutions Actually Buy
25:02 — Treasury Co vs ETF vs Bitcoin
28:12 — MORE Preferred Equity Explained
30:17 — Amplification Cap at 35%
33:11 — Sterling Preferred Advantage
37:49 — Downside Risks: Volatility and Execution
40:27 — Drawdowns and Uncertain Capital Access
https://video.twimg.com/amplify_video/2107129334142296064/vid/avc1/1920x1080/2Th0ra6O3D8VDR_R.mp4?tag=29

2026-10-05 13:20:00 UTC

Repost @NeerajKA:
The "unhosted wallet" rule is dead.
https://coincenter.org/treasury-just-withdrew-crypto-surveillance-rule-proposals-long-opposed-by-coin-center/

2026-10-05 08:19:00 UTC

Repost @nwoodfine:
Cracks me up how small, niche, humble, and generally unheard of the bitcoin developer community + events are, given that they're writing code for the best performing asset in history valued at almost $2T.

2026-10-05 07:59:00 UTC

Repost @BitcoinAnja:
In the latest episode of
@honestmoneyshow
, I sat down with OG podcaster
@stephanlivera
to unpack what 8 years behind the mic have taught him, including:
🟠 The highs and lows of his journey
🟠 Why only Bitcoin can become true money
🟠 Tether's 400 million users vs. Bitcoin's 100 million
🟠 Why online attacks come with the territory
Thank you, Stephan, for 8 years of service and education to the Bitcoin community.
YouTube:
https://piped.video/_YTbSQlKWO8
Fountain:
https://fountain.fm/episode/rNwRJLeykfrZis0FTC1B
Spotify:
https://open.spotify.com/episode/5wqPs97cMOD1R17vShrYLL
https://video.twimg.com/amplify_video/2107014551766224897/vid/avc1/2160x3840/oYpyM5LJNj04Hjar.mp4?tag=29

2026-10-04 17:18:00 UTC

Repost @paolino:
Spotifast 0.12 is out!
Spotify, fast, in 200MB of RAM, for all OSs.
It now consumes 0% CPU when idle.
https://spotifast.rocks/
https://video.twimg.com/amplify_video/2106795731918917632/vid/avc1/1920x1080/Z0gn3jgU0p_nsyxz.mp4?tag=29

2026-10-04 12:09:00 UTC

Repost @denismajus:
Best intro into agentic payments.
https://video.twimg.com/amplify_video/2106382309314416640/vid/avc1/1920x1080/F5WPnY_s6KIRiGcd.mp4?tag=29

2026-10-04 03:52:00 UTC

How AI killed
@benthecarman
's side projects... and why you need to think big with your AI-projects now
https://video.twimg.com/amplify_video/2106593090597482497/vid/avc1/1080x1920/g27WhFebRfSEFHJy.mp4?tag=29

2026-10-04 03:46:00 UTC

What is HTTP 402 and how are bitcoin payments now built in to work with x402?
@benthecarman
explains
https://video.twimg.com/amplify_video/2106591657617731584/vid/avc1/1920x1080/-Jns8NefXdYSoVBp.mp4?tag=29

2026-10-03 17:19:00 UTC

Where are the new jobs going to come from?
https://pbs.twimg.com/media/HTuOk68awAAShdl.jpg?name=orig

2026-10-03 15:55:00 UTC

Catch the show here:
Spotify:
https://open.spotify.com/episode/5aQHQz2HGv0ac1cAq2Nfws?si=htMMsYGkQquIWHp6b9bNxA
Site:
https://stephanlivera.com/779
Rumble:
https://rumble.com/v7gbwy4-lightning-in-x402-and-agent-payments-ben-carman-slp779.html
YT:
https://piped.video/EuRGSf4mItU

2026-10-03 15:18:00 UTC

Whatever happens, at least we were entertained along the way
https://video.twimg.com/amplify_video/2106027045578842112/vid/avc1/1920x1080/7IonZ5HOd1Q1tP4C.mp4?tag=29

2026-10-03 13:56:00 UTC

Lightning Into x402 | Ben Carman SLP779
@benthecarman
of
@spiral_xyz
on L402 vs x402, agent wallets that already know Bitcoin, open weights, and Mesh LLM.
Timestamps
00:00 — Intro
00:50 — L402, x402, and MPP
01:09 — What HTTP 402 Actually Is
02:41 — Meet x402 in the Middle
03:44 — Facilitators and Coinbase Default
06:06 — x402 Standard vs Coinbase Commerce
07:26 — Stables Dominate Early Volume
08:03 — Agentic Payments Still Near Zero
08:55 — Agents Already Know Bitcoin
12:05 — Personal Agents vs B2B Agents
13:03 — Pay-Per-Query Agent Wallets
16:14 — Businesses on Bitcoin Are Easier
16:39 — AI Climb and Builder Craft
22:29 — Won't Fund OpenAI — Still Uses Them
25:38 — Cost Deflation = Human Freedom
28:57 — Best AI tools as of Oct 2
31:16 — Terminal Bench and Real Evals
32:25 — Bench Maxing vs Real Feel
34:59 — Four Years From ChatGPT
36:56 — Quantization Without the LARPs
39:51 — Mesh Alliance and Mesh LLM
42:37 — Goose, LDK, Think Big
https://video.twimg.com/amplify_video/2106382309314416640/vid/avc1/1920x1080/F5WPnY_s6KIRiGcd.mp4?tag=29

2026-10-03 05:30:00 UTC

Repost @AdamBLiv:
Want some Bitcoin bull fuel?
Whenever Bitcoin has been 94 days after the cycle low in premium to the realized price... Bitcoin has gone 16 for 16.
Yep. Every prior time BTC sat this far past its cycle low in premium to realized price, it was higher 6, 12, 18 and 24 months later.
Every single time.
Median forward returns, and what they'd imply from today's $84.5K:
6 mo: +38% → ~$117K
1 yr: +106% → ~$174K
18 mo: +180% → ~$237K
2 yr: +884% → ~$832K
The WORST outcome 2 years out was +346%.
That alone would put BTC at ~$377K.
This cycle never even broke below realized price.
Low was +10% on June 30. Today we're 94 days out.
The clock is ticking:
https://pbs.twimg.com/media/HTrriSeXUAAnIqm.jpg?name=orig