We are partnering with wave.space to make one of the most common Bitcoin saving habits easier to maintain and much safer: buying regularly and moving those savings into a setup designed for long-term self-custody. With the new integration, wave.space users can direct their Bitcoin purchases straight to a vault. Instead of buying Bitcoin first and…
By mordom Two transactions can use addresses that have never been used before and contain no names or personal information. Yet, by looking at them together, it may still be possible to infer that they belong to the same activity. The reason is simple: Bitcoin privacy does not depend only on which address you use, but…
Bitcoin self-custody gives you control. But protecting your keys is only the beginning. You can use a hardware wallet. Back up your seed correctly. Keep your devices offline. And still have things go wrong. What happens if the device you trust is compromised? If your privacy exposes you as a target? If the infrastructure you…
What happens to a Bitcoin vault when one of its keys is compromised? And what if a key becomes unavailable instead? At Noderunners Conference in Arnhem, we turned those questions into an interactive experiment thanks to our lead developer Riccardo. During When Things Go South: The B-SSL Vault Challenge, BitVault Lead Developer Riccardo Biffi walked…
v1.0 · Co-published with Custody Agents on August 31st 2026. Reference PDF here. Section 1 · The conflation problem Picture a custody setup done properly. Three keys on three hardware devices, descriptors backed up, a modern vault construction with time-locked recovery paths, every best practice observed. Now watch what happens when the owner actually spends….
BitVault is now officially live on iOS, combining multisig, hardware-wallet signing and time-delayed Bitcoin transactions with limited launch packages that include hardware-wallet vouchers.
If your Coldcard was integrated with BitVault, reconstructing its defective private key would not, by itself, have given the attacker immediate control over your bitcoin. More importantly, this remains true even in the stronger failure scenario: suppose the user created both BitVault user keys using two affected Coldcards, and the same randomness defect allowed an…
The recent hardware-wallet RNG failures exposed a serious weakness in traditional self-custody: You can protect your seed perfectly, follow every instruction and still be exposed if the device generated a predictable private key. With a standard single-signature wallet, defective randomness can mean immediate loss. With an ordinary multisig setup, generating multiple keys on hardware affected…
The Coldcard incident shows how weak key generation can defeat an air-gapped wallet. We examine what multisig and time-delayed BitVault security mitigate — and what they do not.
By Riccardo How a low-fee parent and a fee-paying child can travel through the network together TL;DRPackage relay lets Bitcoin nodes evaluate a low-fee parent and a fee-paying child together. P2A gives the child a compact, keyless output to spend, while ephemeral dust permits that anchor to carry zero value when it is created and…