
🟠 #Bitcoin & #LightningNetwork⚡️ Community in BCN 💬Telegram: https://xitter.cf/t.co/ryeFQmLj7O 🤝 Founding Member: https://xitter.cf/t.co/XIBDgzWiSj 📺 https://xitter.cf/t.co/Pn1Cg5f9d7
Barcelona, Spain
Joined March 2022
- Tweets989
- Following406
- Followers2.2K
- Likes864
Barcelona Bitcoin Only retweeted
1/8 🚨 There's a fundamental problem with how we distribute security updates today.
The moment a software patch is released, it can also become a roadmap for attackers.
We need to rethink how security updates are delivered. 🧵
Barcelona Bitcoin Only retweeted
Acabo de recibir una llamada brutal de PHISING desde un número de teléfono español, de alguien con acento de España.
El tío controlaba. Le he seguido el rollo todo lo que podía aunque me hervía la sangre: 4 o 5 minutos.
Se hacía pasar por Trezor.
- Tenían mi número de teléfono, mi nombre y mi email.
- Desde este numero: 622 748 592
- Al final me hacía ir a trezormanage (punto) io. Supongo q esto acababa con el pidiéndome alguna frase semilla.
- Me escribía emails durante la llamada con links desde support@trezor via inbox-management (punto) com - Vamos, q no era desde trezor. Tenía todos mis datos.
Me jode pero en algún momento he metido la pata con mis datos, está claro. No tengo ninguna trezor, además.
La conversación ha acabado diciéndole que ya paraba la broma y q como podía vivir con la vergüenza de robar a la gente y si puede dormir por las noches. Es increíble que haya escoria de este calibre por el mundo, pero es así.
Cuidado si recibís alguna llamada.
Barcelona Bitcoin Only retweeted
𝗕𝗶𝘁𝗰𝗼𝗶𝗻 𝗦𝗲𝗶𝗻𝗳𝗲𝗹𝗱: 𝗧𝗵𝗲 𝗗𝗼𝘂𝗯𝗹𝗲 𝗦𝗽𝗲𝗻𝗱
George likes his Bitcoin friends but he also likes his non bitcoiner friends, can he manage them both?
Barcelona Bitcoin Only retweeted
I'm working on this exclusive badge for Bitcoin Amsterdam @bitcoinconfams
A complete multifunction badge!
- Proof of peer
- Zap indicator
- Seed generator
- NerdMiner
Works with battery and has a perfect badge case
What do you think?
Book here 👇 share.google/galtSkEFoTXtuot…
En remoto funciona y es cuando más importa la conexión TLS. Necesitarás crear un certificado para tu servicio de Electrs (o el que sea), y configurar el puerto 50002.
Un ejemplo es el maravilloso servicio del nodo de @bcnbitcoinonly
ssl://electrum.bitcoinbarcelona.xyz:50002
Barcelona Bitcoin Only retweeted
Tenim un altre BitDevs el dia 27 d'octubre!!
bitdevsbarcelona.org/socrati…
Recordeu que podeu proposar temes obrint una issue al github del BitDevs: github.com/Bit-Devs-Barcelon…
¿Qué falló exactamente con Coldcard? 22/10/2026
Nos reuniremos para hacer un post-mortem de uno de los incidentes más críticos en la historia de Bitcoin. Ven a analizar el caso y a compartir tu visión⚡️
+ información:
meetup.com/bitcoin-barcelona…
#Bitcoin #Coldcard #BitcoinBarcelona
Barcelona Bitcoin Only retweeted
Convert an old x86 laptop into a hardware wallet.
I've been working on my vision of how this should be done for some time now.
It's called THUNDER DEN.
- 100% stateless: inspired by @SeedSigner. Boots from a pen drive.
- Airgapped by design, with wallet data exchanged through QR codes.
- Descriptor-based, including (tap)miniscript.
- You can easily audit it before use: it's tiny and only does one thing. Only around 3,800 lines of code, so AI can reasonably help check it. The Bitcoin logic comes from pinned Bitcoin Core, which is widely scrutinized.
- Reduced attack surface: the image is only around 14 MB + padding. In those tiny bytes I packed a super stripped-down Linux system and only the Bitcoin Core libraries it needs. No desktop, no GUI. No network stack, block-storage or USB-storage drivers or disk filesystems. The runtime uses RAM-backed filesystems. Check the repo to learn about the other protections included.
- Super easy to build your own image. You can also download my prebuilt images, if you trust me (don't).
- A laptop gives you a decent camera, a full keyboard and a large screen, making policies and keys comfortable to read and menus easy to navigate.
- Go hardcore: get an old laptop and remove its disks and disable radio chips for even better security.
- Wallet integrations so far: @lianabitcoin through a current fork, and @SparrowWallet. More are coming.
The nice thing is that all the code is Open Source. So if you find a bug or a compromise you don't like, you can submit a PR or fork it.
Still in beta. Some pics below.
PS: It doesn't generate recovery words for now, so you'll need to import your existing mnemonic. It's coming, though. It's just that I really want to make sure this is properly done before releasing that part :-P
Barcelona Bitcoin Only retweeted
Nou article! El meu veí ha comprat bitcoin, i no s'entera de res. El problema no és ell, sinó la cultura de la immediatesa en la qual vivim. Trobar temps per entendre les coses tranquil·lament s'ha convertit en un acte gairebé revolucionari
senyrauxasats.substack.com/p…
Barcelona Bitcoin Only retweeted
Seinfeld Bitcoin Highlights 🎬₿
A montage of all the Seinfeld Bitcoin clips so far!
If you’ve been enjoying them, please retweet and follow. More on the way.
Barcelona Bitcoin Only retweeted
Tornem de vacances!
Com sempre tenim Bitdevs l'últim dimarts de cada mes!
29 de setembre :)
bitdevsbarcelona.org/socrati…
Per obrir la temporada arrenquem amb una trobada que sempre ens fa il·lusió recuperar: Bitcoin per a principiants.
Què és això de Bitcoin? Per parlar del tema i respondre les vostres preguntes, comptarem amb en Jan Martínez, expert en la matèria.
+ info:
meetup.com/bitcoin-barcelona…
Barcelona Bitcoin Only retweeted
Habemus post!
🇬🇧 (ENG) How to use Bitcoin Core in an air-gapped setup to build, sign, and broadcast transactions.
pesvi.xyz/posts/bitcoincore_…
|Català| Com utilitzar Bitcoin Core com a dispositiu "air-gapped" per construir, firmar i transmetre transaccions.
pesvi.xyz/catal%C3%A0/posts/…
I am seeing a lot of people talking about Bitcoin Core only setups. I am writing a blog post, soon to be published, with a guide on how to build that step-by-step.
Credits to @402PaymentReq as the guide is a slight modification of his guide in YouTube.
gained a ton of new insights working in bitcoin red team 🟥 that i wish i could share without vague posting. but this is what i got anon.
- we’re experiencing a massive collision between decades of human open source slop against 2 weeks of kimi k3 (not good)
- everything is broken, bitcoin is burning
- bitcoin is becoming stronger through this
- bitcoin is the obvious first target but the rest of the world will follow shortly
- sometimes old things need to burn so new things can grow on healthy soil
- humans should never code in c (just stop)
- lightning is complicated and is more broken than the average (sorry)
- verification is free. we used to complain about slop PRs. then about slop security audits. if you can’t handle the information overload, stop complaining and use AI to sort through it.
- those projects that started AI audits months ago are in a completely different position than those who didn’t
- projects need their own AI audit pipeline going into the future
- the burden for a developer to keep software safe and secure is pretty stressful and not for everyone. it has become a lot more stressful now.
- unmaintained projects are most probably broken, don’t rely on them. i’d rather one-shot it myself with a modern AI
- multiple concurrent, diverse human approaches have proven to be the best vulnerability search method
- external red teaming will probably have to continue forever
- we’ve basically completed a basic scan of virtually the entirety of bitcoin open source. the low hanging fruit is done.
- we’ve reported a ton of real critical and high vulnerabilities. project maintainers across the board have validated our findings.
- response speed is very different across projects and shows how healthy each project is. i recommend acting fast these days.
- red team etiquette matters. if you don’t disclose responsibly, boast on twitter about your findings on a particular project, or make indications about the nature of particular findings, you’ve disqualified yourself as a serious security researcher. trust is the most important factor in this game. if you lose it, it’s very hard to win it back.
- did i mention that humans should not code in c?
love you all.
Barcelona Bitcoin Only retweeted
There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds.
Please update your BTCPayServer to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer.
If you are unable to update right away, turn off your BTCPay Server to prevent unauthorized access until you can update.
Barcelona Bitcoin Only retweeted
I did my own investigation because I obviously don't trust them.
What I found is that the external dependency of the firmware with the critical vulnerability hidden in it was written by CoinKite's CTO @DocHex pretending to be someone else.
All of the following can be verified:
unavailable
Barcelona Bitcoin Only retweeted
"Bitcoin wallet industry is so petty and dramatic."
This is a real quote from today and I've seen similar sentiment over the last week. It's wrong.
The Bitcoin wallet industry is not filled with infighting. Only one CEO of one company is responsible for all of the vitriol: NVK.
My company, @FoundationHQ, is friendly, collaborative – and yes, competitive – with others in the wallet space. We interact with or have previously interacted with @Blockstream, @BitBoxSwiss, @Trezor, @Bitkey, @SeedSigner and others over the years. I have respect for them all.
I fiercely criticized Bitkey, for example, and have amended my critiques as they have addressed them. Bitkey now has privacy guarantees and a screen – a big win for the ecosystem.
I'll even occasionally interact here on X with @P3b7_ of @Ledger. While I don't agree with Ledger's approach most of the time, Charles respectfully engages in good faith. Ledger maintains one of the best security research teams in the industry and participates in responsible disclosures that have helped secure many companies.
There is no industry infighting. There is no toxic culture amongst wallet vendors. There is just NVK.
NVK had a unique style and strategy that was difficult to defend against. It wen't something like this:
(1) NVK aggressively attacks competitor or security researcher with wild defamatory claims and name calling. "Cloner" "Leach" "Commie" "Maoist" "Terrorist"
(2) Competitor tries to defend himself. "That's not true, we are not cloners, we used some of your open source code but made substantial contributions of our own"
(3) NVK continues to repeat claims across twitter, podcasts, live audiences, etc. Repeats the exact same defamatory statements and name calling dozens of times. More repetition makes it common knowledge.
(4) Competitor points out NVK's poor character or criticizes Coinkite's products or business practices – and is immediately swarmed by others publicly and privately to "keep things civil" "don't cause drama" "stop the infighting" "take the moral high ground"
(5) NVK continues relentlessly but is not called out by the same people for his bad behavior – they only call out anyone who pushes back against NVK. They do not dare call out NVK.
This is a complex strategy that worked for several years. Numerous folks in the wallet industry were targeted, not just Foundation/me.
NVK is relentless and is consumed by targeting others. At one point he had Twitter alerts set up for any mention of "Foundation" or "Passport" and would swarm our mentions with bot accounts. And there's much more.
Most people don't know, for example, that NVK maintains dozens of domain names that point Foundation and Seedsigner to various poor reputation Bitcoin projects like Knots.
I just tried a few domain names in my browser for SeedSigner. seedsigner.org currently forwards to Bitcoin Knots website. NVK registers and controls these domain names.
Most people also don't know, for example, that NVK sneaks around and gossips to investors and conference organizers – attempting to get funding commits pulled, conference sponsorships canceled, and even sometimes conference attendance canceled – from companies or projects that are on his hit list.
My experience aside, it's no secret that @OpenSats never gave SeedSigner a grant. The reason is obvious.
But now all that is over. For 7 days now the wallet industry has been free of vitriol.
This has been a horrible week for Bitcoin and Bitcoiners. I look forward to collaborating with our fellow industry peers to ensure something like it never happens again.
Thank you.
👉 Reserva tu plaza aquí: btcpay.kilombino.com/apps/ba…



















