v1.0 · Co-published with Custody Agents on August 31st 2026. Reference PDF here. Section 1 · The conflation problem Picture a custody setup done properly. Three keys on three hardware devices, descriptors backed up, a modern vault construction with time-locked recovery paths, every best practice observed. Now watch what happens when the owner actually spends….
BitVault is now officially live on iOS, combining multisig, hardware-wallet signing and time-delayed Bitcoin transactions with limited launch packages that include hardware-wallet vouchers.
If your Coldcard was integrated with BitVault, reconstructing its defective private key would not, by itself, have given the attacker immediate control over your bitcoin. More importantly, this remains true even in the stronger failure scenario: suppose the user created both BitVault user keys using two affected Coldcards, and the same randomness defect allowed an…
The recent hardware-wallet RNG failures exposed a serious weakness in traditional self-custody: You can protect your seed perfectly, follow every instruction and still be exposed if the device generated a predictable private key. With a standard single-signature wallet, defective randomness can mean immediate loss. With an ordinary multisig setup, generating multiple keys on hardware affected…
The Coldcard incident shows how weak key generation can defeat an air-gapped wallet. We examine what multisig and time-delayed BitVault security mitigate — and what they do not.
By Riccardo How a low-fee parent and a fee-paying child can travel through the network together TL;DRPackage relay lets Bitcoin nodes evaluate a low-fee parent and a fee-paying child together. P2A gives the child a compact, keyless output to spend, while ephemeral dust permits that anchor to carry zero value when it is created and…
How do you prove control of a UTXO without revealing the secret that protects it? By mordom It is one of the most fascinating questions of the entire Bitcoin protocol. Every time you send a transaction, thousands of nodes must verify that you truly have the right to spend those UTXOs. Yet, no one knows your…
Over the past two months, the BitVault team has spent more time on trains, planes, conference stages, and event halls than behind our desks. From Bitcare Forum in Brescia to Bitcoin Ireland in Dublin, from BTC Prague to Swiss Bitcoin Conference, and even through smaller but highly valuable gatherings such as BCC8333, this year’s Summer…
How your wallet builds your financial history every time you spend bitcoin By mordom Introduction You want to send 0.01 BTC.You open your wallet, enter the recipient’s address, check the fee, and press Send.At that point, you might think the wallet simply deducted 0.01 BTC from your balance.In reality, that’s not what happened. Before the transaction…
By mordom A Bitcoin address is not a public key. For most users, an address looks like a random string. Something you copy, paste, and use to receive funds. But behind those characters lies a very precise chain of cryptographic transformations. Nothing is arbitrary. Each step exists for a specific reason: security, compactness, resilience, and long-term…