Announcements

Please join us for our next Socratic Seminar! A special thanks to Strike for the event space.

Doors open at 6pm with discussion starting shortly after!

Follow ChiBitDevs on twitter

CBC/F&C events

October 2026 events from Chicago Bitcoin Collective

October 2026 CBC and Fork & Coin events

  • Oct 6th 8 AM Bitcoin and Coffee @ Fork & Coin (3938 N Central Ave)
  • Oct 8th 6 PM BitDevs at Strike (200 N LaSalle St) — this meetup
  • Oct 11th 2 PM Joe Carlasare — talk & book signing @ CBC
  • Oct 15th 6 PM B.O.B. Social · Dave Shestokas — Illinois corruption & the AG @ Fork & Coin
  • Oct 22nd 6 PM BitDevs · Rev.Hodl — earning in Bitcoin & circular economies (Jade giveaway) @ CBC
  • Oct 23rd 6 PM Supper Club — tastings @ Fork & Coin (Chef Elexis Ruiz, Caribbean bites)

https://www.chicagobitcoincollective.com/

Disclosure of two DoS vulnerabilities in Eclair

UPGRADE TO ECLAIR v0.14.0 OR LATER!!!

https://delvingbitcoin.org/t/disclosure-dos-vulnerabilities-fixed-in-eclair-v0-14-0/2914

https://bitcoinops.org/en/newsletters/2026/10/02/#disclosure-of-two-dos-vulnerabilities-in-eclair

Depots for probabilistic Lightning channels

https://delvingbitcoin.org/t/depots-theft-proof-self-custodial-bitcoin-for-billions-of-users/2892

https://bitcoinops.org/en/newsletters/2026/10/02/#depots-for-probabilistic-lightning-channels

https://gist.github.com/xstoicunicornx/0aec62bb0d918b710c72d654b3bce7b6

Improvements in Utreexo initial block download

https://delvingbitcoin.org/t/implicit-deletions-and-improvements-in-utreexo-ibd/2881

https://bitcoinops.org/en/newsletters/2026/09/18/#improvements-in-utreexo-initial-block-download

Swiss Bitcoin Pay Exploit

A malicious user has likely gained access to Swiss Bitcoin Pay’s internal systems.

https://x.com/SwissBitcoinPay/status/2099473448162488618
https://github.com/SwissBitcoinPay/app/commit/1a23cb2e811f584639bdfe01d78765705bdc2398

An attacker accessed a limited number of custodial accounts and withdrew funds.

https://x.com/blinkbtc/status/2101290680584695956
https://x.com/blinkbtc/status/2106429174931939487

Second Ark server Exploit

On Monday 5 Oct an attacker exploited a bug in Second’s Ark server boarding flow and took 0.75 BTC of Second’s own liquidity. No user funds were affected.

https://x.com/secondhq/status/2108065406665805992

BIP54 proved sufficient to thwart Time Warp Attack

Sips showed the two rules introduced by BIP54 are enough. With both in place, there’s a hard ceiling on how many blocks a chain can have, given how much time has passed and how much mining work went into it

https://delvingbitcoin.org/t/bounds-on-chain-length-with-bip-54-timewarp-fixes/2899
https://gist.github.com/xstoicunicornx/d73805c930a1c71f5f766a3c6d525b5b

Bitcoin Lightning support merged into x402 Specification

The x402 Foundation has officially merged the specification for Lightning payments into its open internet payments standard. Specification update was submitted by @benthecarman.

https://x.com/BitcoinNewsCom/status/2102842285495078923
https://github.com/x402-foundation/x402/pull/2861

Shielded Bitcoin: Private Transfers on Bitcoin L1

Shielded Bitcoin, a proposal from [[alloc] init], would enable Bitcoin transactions with strong privacy.

https://x.com/allocinitxyz/status/2103124026214568209
https://bitcoinmagazine.com/technical/alloc-init-releases-shielded-bitcoin-proposal-for-private-bitcoin-transactions
https://x.com/btcinsider__/status/2105308818930274533

PRAWNS

A novel thresholdization scheme for one-time hash-based signatures

https://x.com/lclhostresearch/status/2104619822059585951

BIP138 Compact Encryption Scheme for Non-seed Wallet Data

This BIP defines a compact encryption scheme for output script descriptors (BIP-0380), wallet policies (BIP-0388), and other wallet metadata.

https://github.com/bitcoin/bips/blob/master/bip-0138.md

Landfall

Showcase of more streamlined OCEAN mining lightning payouts.

https://x.com/PalazzoVincenzo/status/2107915680465219605
https://github.com/vincenzopalazzo/landfall

Digital Panopticon News

Republican bill would order ISPs, DNS providers, and VPNs to block piracy sites

https://arstechnica.com/tech-policy/2026/09/republican-bill-would-order-isps-dns-providers-and-vpns-to-block-piracy-sites/

Spain Orders Blocks On Archive Today And Its Mirrors

https://reclaimthenet.org/spain-blocks-archive-today-and-mirrors

The Internet goes on high alert after discovery of 8 compromised TLS certs

https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/

Ledger hardware wallet supply chain attack

Galaxy Research estimates roughly $91 million stolen from 474 victim addresses through tampered Ledger devices sold via a reseller.

https://www.galaxy.com/insights/research/ledger-cryptobilis-wallet-implant-theft

Class action lawsuit filed against Coinkite

A class action lawsuit has been filed against Coinkite in an Ontario court.

https://x.com/AtlasPhoenixBTC/status/2113013307577889270
https://courts.ontario.ca/portal/court/68f021c4-6a44-4735-9a76-5360b2e8af13/case/69d7faae-6bfd-4056-95be-f2c5cf5e5fe3