UNGOVERNABLE

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q.

AOB

Max: spent a full day and roughly $100 in API credits on a marketing project using lower-end models rather than his normal Claude subscription -- couldn't use it due to privacy concerns around Ungovernable content; a warning that frontier model quality costs real money per token
Q: quiet weekend -- kids party Saturday, christening Sunday; off to Portugal on Friday

NEWS

Revolut hands passports and Bitcoin histories to a spoofed government request: attackers used a real government agency's email domain to extract passport scans, verification selfies, home addresses, and full transaction histories including Bitcoin activity; Revolut refuses to confirm the number of affected customers, the market, or the agency involved; attacker is now leaking customer files daily on Telegram and demanding 10,000 BTC -- CoinDesk, TechCrunch, Decrypt

Liquid exploit recovery: 3,400 BTC returned to block 965950 on September 7 via on-chain OP_RETURN negotiation; ~598.5 BTC (~$47M) remains with the exploiters; Blockstream refused the demanded 10% bounty, called it theft, and says it will work with law enforcement; block production resumed September 10 but peg operations remain suspended -- Bitcoin Magazine, news.bitcoin.com, CoinDesk, The Bitcoin Manual

Final CLARITY Act text drops: ethics deal done, developer protections narrowed; the Blockchain Regulatory Certainty Act now covers civil enforcement only with criminal protections removed -- including the charge brought against the Samourai developers; cloture vote is September 15 at 2:15pm ET, needs 60 votes; prediction markets put passage at ~25% -- The Crypto Times, The Block, The Hill, CoinDesk

Chinese quantum benchmark drops secp256k1 attack to 835 logical qubits, down 60% from the 2020 estimate of 2,124; current best hardware reaches 94 logical qubits; addresses with exposed public keys face the greatest future risk -- TFTC, CoinDesk

Alby Hub authentication bypass lets attackers drain Lightning wallets: critical flaw in v1.7.0 through v1.18.5 allows unauthenticated remote takeover when port 8080 is internet-accessible; at least one user confirmed compromised; update to v1.24.0 and block external access to port 8080 -- The Hacker News

Brevo breach lets attackers send phishing from Trezor, BitBox, and CoinTracking domains: attackers created API keys inside Brevo customer accounts allowing emails from real sending domains that passed SPF, DKIM, and DMARC; the lure was a fake STM32 Entropy Vulnerability alert targeting hardware wallet owners; Trezor and BitBox both confirmed the breach on September 9 -- CryptoTimes, Decrypt

RELEASES

Highlights

Electrs v0.12.0 -- 2026-09-13
Switches to the bindex indexing library. Requires Bitcoin Core 31 or later and a full reindex -- upgrade Core first and plan for downtime, especially on lower-powered hardware.
Fedimint v0.12.1 -- 2026-09-12
Security release fixing a vulnerability in the Lightning gateway's LNv1 payment handling. Gateway operators should upgrade immediately. The fix is consensus-neutral so federation participants and wallet users do not need to coordinate an upgrade.
Radar v1.0.7 -- 2026-09-12
Adds BOLT11 invoice payments alongside lightning addresses, scan-to-pay from the send screen, on-chain receive via bitcoin: URI, full balance hiding across the app, and Signal backup migration on a single device.
Bitcoin Seed Tool v2.4.0 -- 2026-09-11
Adds SeedQR scanning, Seed XOR splitting into 2-8 Coldcard-compatible shares, NIP-06 Nostr key derivation, BIP-44/49/84/86 descriptor export, and blank backup template printing. Also fixes seed leakage bugs -- existing users should update before use.
Phoenix v2.8.2 -- 2026-09-08 (Android), 2026-09-07 (iOS)
Adds Italian, Japanese, Polish, Ukrainian, and Korean language support. Android users can now manually set feerates on outgoing on-chain transactions, matching iOS parity.
BTCPay Server v2.4.4 -- 2026-09-08
Breaking-change release: NFC payments disabled by default at checkout, zero-amount invoices blocked by default, and Boltcard desktop setup removed in favour of the dedicated Boltcard app. Review the breaking changes before upgrading.
Ashigaru Desktop v1.4.5 -- 2026-09-07
Major catch-up release. Fixes broken HTTPS connectivity in earlier builds (missing crypto modules broke all outbound connections). Adds in-app update checking with signature verification, a guided tour, dice-based passphrases, and stronger Dojo node verification. Existing users on older versions must download manually.
Flint v1.1.0 -- 2026-09-07
Updates compatibility to BTCPay Server 2.4.4 and enforces Breez SDK Spark release gating. Upgrade alongside BTCPay 2.4.4. All artifacts signed with Sigstore build provenance.
Everything else

Amethyst v1.15.2 -- 2026-09-12

BasicSwap DEX v0.18.8 -- 2026-09-13

BasicSwap DEX v0.18.7 -- 2026-09-10

BDK FFI v3.1.0 -- 2026-09-12

Citrine v3.1.1 -- 2026-09-10

Core Lightning v26.06.7 -- 2026-09-11

Fedimint v0.11.3 -- 2026-09-12

JoinMarket-NG v0.39.2 -- 2026-09-12

LDK v0.2.6 -- 2026-09-10

LNbits v1.6.1 -- 2026-09-09

ngit-cli v3.0.0 -- 2026-09-08

Ride The Lightning v0.15.12 -- 2026-09-09

RoboSats v0.8.7-alpha -- 2026-09-10

Tor Browser 15.0.22 -- 2026-09-10

Trezor Suite 26.9.1 -- 2026-09-11

TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate

HELP GET SAMOURAI A PARDON
SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonne
DONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T
SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/

VALUE FOR VALUE

Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.

You can support this episode using your time, talent or treasure.

TIME:

- create fountain clips for the show
- create a meetup
- help boost the signal on social media

TALENT:

- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!

TREASURE:

- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ungovernable
- BUY SOME STICKERS @ https://ungovernable.network/shop/

FOUNDATION

https://foundation.xyz/ungovernable

Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.

As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.

Thank you Foundation Devices for sponsoring the show!

Use code: Ungovernable for $10 off of your purchase

CAKE WALLET

https://cakewallet.com

Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.

Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.

Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.

Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.

Thank you Cake Wallet for sponsoring the show!

MYNYMBOX

https://mynymbox.io

Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.

Explore benefits such as No KYC, complete privacy & security, and human support.

(00:00:00) INTRO
(00:00:41) THANK YOU FOUNDATION
(00:01:29) THANK YOU CAKE WALLET
(00:03:50) The Privacy Tax
(00:12:08) Kids Parties and Christenings
(00:15:56) NEWS
(00:16:14) KYC: Kill Your Customer
(00:28:00) MORE NEWS
(00:52:42) BOOSTS
(01:02:36) UPDATES & RELEASES

A weekly live show covering all things Freedom Tech with Max, Q and Seth.

Thanks to Jordan for joining us to walk through Ashigaru Desktop live on air. Jordan built a full graphical desktop wallet on top of Ashigaru Terminal, bringing Whirlpool mixing to a wider audience with a guided tour for newcomers, a dice-based EFF passphrase generator, in-app software verification against his BIP47 payment code, and the ability to mix straight to cold storage using an output descriptor. We watched a full mix go through in real time, explored the Mix To feature for sending post-mix funds directly to a Passport Prime wallet, and talked through bad bank, pool fees, and keeping KYC and privacy stacks separate.

Download Ashigaru Desktop and follow the project on GitHub: https://github.com/linkinparkrulz/ashigaru-desktop/releases

Learn more about Ashigaru Terminal and get the download: https://ashigaru.rs/download/

Check pool activity at https://whirlpoolstats.xyz/ and connect Passport to software wallets: https://docs.foundation.xyz/passport/connect/

HELP GET SAMOURAI A PARDON
SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonne
DONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T
SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/

TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate

VALUE FOR VALUE

Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.

You can support this episode using your time, talent or treasure.

TIME:

- create fountain clips for the show
- create a meetup
- help boost the signal on social media

TALENT:

- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!

TREASURE:

- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ungovernable
- BUY SOME STICKERS @ https://ungovernable.network/shop/

FOUNDATION

https://foundation.xyz/ungovernable

Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.

As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.

Thank you Foundation Devices for sponsoring the show!

Use code: Ungovernable for $10 off of your purchase

CAKE WALLET

https://cakewallet.com

Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.

Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.

Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.

Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.

Thank you Cake Wallet for sponsoring the show!

MYNYMBOX

https://mynymbox.io

Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.

Explore benefits such as No KYC, complete privacy & security, and human support.

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q.

AOB

First live show!
Ungovernable.network updates
KeyOS 1.4 is out

NEWS

Liquid exploit: roughly 4,000 BTC withdrawn; return discussions ongoing-- TFTC, CoinDesk, Stacker News | Updates: OrangeSurf, Samson Mow

Orionx Exchange Collapses in Chile: $7M Missing, 100K Users Affected -- TFTC

Coinbase/Better Bitcoin-Backed Mortgages Can Reuse Borrowers' Collateral -- CoinDesk

House Cancels Late-September Votes, Squeezing CLARITY Act Window -- Roll Call, CoinDesk

Trezor Breach Worse Than Reported: 67,000 More US Customers Exposed -- Bitcoin Magazine

Pocket Bitcoin Breach Links 291 Users' Identities to Bitcoin Addresses -- Pocket Bitcoin Blog

Coldcard Wave 3 Attacker Moves Stolen BTC Through THORChain -- TFTC

Tether Froze $42.4M USDT on a Verbal Homeland Security Request, No Warrant -- CoinDesk

RELEASES

Highlights

KeyOS v1.4.0 -- 2026-09-04
Major release for Passport Prime with a redesigned launcher, app sideloading with granular permissions, multisig exports for Unchained and Casa, new wallet connections (Bitcoin Safe, Coconut Wallet), authenticator imports from Aegis and Proton, and PIN-before-seed-reveal. Includes security fixes: P2WSH/P2SH-P2WSH change output validation, enhanced ATECC608 entropy, and a PSBT trust_witness_utxo toggle addressing CVE-2020-14199.
Cake Wallet 6.4.4 -- 2026-09-04
Adds native Trezor hardware wallet support for Bitcoin cold storage and offline signing. Fixes a security vulnerability (GHSA-695v-fhpj-fv8x) where a malicious deep-link could cause EVM assets to be sent on an incorrect network. Also includes improved Monero sync visibility.
Nunchuk Android 2.8.5 -- 2026-09-03
Adds BitBox02 connectivity over Bluetooth and USB, integrates Krux hardware wallet support, and introduces emergency push notifications with home-screen alerts.
RoboSats v0.8.7-alpha -- 2026-08-31
Major update adding three new coordinators (Eleuteria, Freeport, Ammanaya), a federation consensus mechanism, and end-to-end encrypted image uploads in order chat via Blossom. Coordinators are now ranked live by DevFund donation value. Multiple security fixes including PGP verification.
Everything else

Aqua Wallet v0.5.3 -- 2026-09-01

BasicSwap DEX v0.18.6 -- 2026-09-06

BitBox02 Firmware v9.27.1 -- 2026-09-04

Bitcoin Knots v29.4.1 -- 2026-09-02

Blockstream Green Desktop 3.5.4 -- 2026-09-04

Bull Bitcoin Mobile 6.13.4 -- 2026-09-04

Cashu CDK v0.18.0 -- 2026-09-02

Cashu TS v5.0.0-rc.9 -- 2026-09-04

Coldcard Firmware v5.6.2 and v1.5.2Q -- 2026-09-03

Flint v1.0.4 -- 2026-09-02

JoinMarket-NG v0.39.1 -- 2026-09-06

LDK v0.3-rc1 -- 2026-09-04

Lightning Terminal v0.17.4-alpha -- 2026-09-03

LND v0.21.3-beta -- 2026-09-02

Mostro v0.18.7 -- 2026-09-05

Specter-DIY v1.10.5 -- 2026-09-06

Tails 7.12 -- 2026-09-05

Zeus v13.2.1 -- 2026-09-02

EDUCATION

Liquid explainer: cached validation versus key compromise
Use OrangeSurf's technical notes alongside the DeFi Prime explainer. Treat early reporting as provisional, not a completed postmortem.
The reported flaw lets an invalid proof receive a cached pass; confidential amounts do not make validity unknowable. OrangeSurf reports one explorer rejected the transaction, with the cause of divergence unresolved.
Do not describe this as cryptographically bypassing federation signatures, or assert that Confidential Transactions hid issuance from every observer.
Liquid trust model: validation, custody and recovery
The SpendNode discussion can frame key compromise versus invalid issuance, but its incident details need the qualifications above.
Holding an L-BTC wallet key still leaves the underlying BTC dependent on the federation and the system's validation rules. Mainchain self-custody avoids that particular peg exposure; it does not eliminate all software or consensus risk.
Pair with Mow's on-chain message chronology: an offer to return most funds is not completed recovery, and an acknowledgement is not proof of a complete patch.
Bitcoin Optech #421: Silent Payments for Mining Pool Coinbase Payouts -- Bitcoin Optech
Published: 2026-09-04
Explains how mining pools could use BIP352 silent payment addresses to pay miners directly in coinbase transactions, replacing xpub-based payouts and improving miner privacy. The newsletter also covers the full CLN ping-flood DoS disclosure and post-quantum signature proposals.
A concrete, actionable application of silent payments moving from theory to real infrastructure. Shows how the protocol can improve miner privacy without new consensus changes. The CLN disclosure detail is also worth mentioning as follow-up to last episode's CLN coverage.

TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate

HELP GET SAMOURAI A PARDONSIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonne
DONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T
SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/

VALUE FOR VALUE

Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.

You can support this episode using your time, talent or treasure.

TIME:

- create fountain clips for the show
- create a meetup
- help boost the signal on social media

TALENT:

- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!

TREASURE:

- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ungovernable
- BUY SOME STICKERS @ https://ungovernable.network/shop/

FOUNDATION

https://foundation.xyz/ungovernable

Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.

As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.

Thank you Foundation Devices for sponsoring the show!

Use code: Ungovernable for $10 off of your purchase

CAKE WALLET

https://cakewallet.com

Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.

Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.

Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.

Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.

Thank you Cake Wallet for sponsoring the show!

MYNYMBOX

https://mynymbox.io

Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.

Explore benefits such as No KYC, complete privacy & security, and human support.

(00:00:00) INTRO
(00:00:58) THANK YOU FOUNDATION
(00:01:38) THANK YOU CAKE WALLET
(00:02:44) Not Just Weekly, Live Weekly!
(00:07:44) KeyOS 1.4.0
(00:14:59) NEWS
(00:15:07) The Liquid Exploit
(00:40:02) MORE NEWS
(00:55:05) BOOSTS
(01:05:44) UPDATES & RELEASES
(01:07:29) EDUCATION
(01:09:10) THANK YOU MYNYMBOX

A weekly live show covering all things Freedom Tech with Max, Q and Seth.

Thanks to xTx for coming up with DojoBay! Follow him here: https://x.com/91xTx93x3

Go and check out https://dojobay.org for more information and be sure to follow Max on twitter at https://x.com/maxtannahill

Get the tor browser and visit the reference client: http://dojobayeryasshgghz537de5ckgd5hhi4z5sdeil3roeh65fwhdnu2yd.onion/

HELP GET SAMOURAI A PARDONSIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonne
DONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T
SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/

TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate

VALUE FOR VALUE

Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.

You can support this episode using your time, talent or treasure.

TIME:

- create fountain clips for the show
- create a meetup
- help boost the signal on social media

TALENT:

- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!

TREASURE:

- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ungovernable
- BUY SOME STICKERS @ https://ungovernable.network/shop/

FOUNDATION

https://foundation.xyz/ungovernable

Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.

As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.

Thank you Foundation Devices for sponsoring the show!

Use code: Ungovernable for $10 off of your purchase

CAKE WALLET

https://cakewallet.com

Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.

Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.

Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.

Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.

Thank you Cake Wallet for sponsoring the show!

MYNYMBOX

https://mynymbox.io

Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.

Explore benefits such as No KYC, complete privacy & security, and human support.

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q.

AOB
We are now a weekly show
Topics
Full screen video
Admin tools
Envoy 2.3.3
KeyOS 1.4.0 beta3 (public release this week)

NEWS
Core Lightning: A Critical Vulnerability, a Binary-Only Patch, and a Docker Pipeline That Broke Because of It -- Stacker News / Blockstream Blog / GitHub Release

Bitcoin's First Quantum-Safe Mainnet Transaction (No Fork Required) -- Bitcoin Magazine

Stacker News Ships Embedded Spark Wallet and Receive Proxy Toggle -- Stacker News

SeedSigner Fork Adds Miniscript Support with Liana Bridge -- X/@UnruggableGG

Roman Storm Retrial Pushed to April 2027 -- X/@rstormsf

Coinbase and Better Mortgage Launch Bitcoin-Backed Mortgages -- Bitcoin Magazine

HRF Awards 500 Million Sats to 16 Freedom Tech Projects Worldwide -- Bitcoin Magazine

Kraken Users Locked Out After 12,000 Dust Transfers From Sanctioned HTX Wallets -- Bitcoin Magazine

Bitcoin Knots BLAKE2b Hardfork Goes Live as a "Mainnet Trial" -- CryptoSlate / GitHub PR #359 / The Bitcoin Manual explainer

Peach Bitcoin Pauses Escrow Model After Swiss Regulator Reversal -- Peach Blog

RELEASES

Flint v1.0.3 -- 2026-08-28
Security audit follow-up for Seth's BTCPay Server plugin. Strips macOS payloads from the build, pins the release path, and restores file permissions after dylib stripping. All artifacts are Sigstore-attested with no maintainer key required.
Also in window: Flint v1.0.2 (2026-08-27) -- 23% smaller package, shared reconciliation scans reducing SDK calls for idle stores, cached Spark network status reads. Follows the v1.0.0 milestone which fixed a payment-hash association security issue.

Envoy 2.3.3 -- 2026-08-27Point release improving Passport Prime pairing reliability with automatic retry and clock-drift tolerance. Also fixes a visual bug where seed verification puzzle words could overflow at high zoom, and removes a hardcoded Stripe test key.

Sparrow Wallet 2.5.4 -- 2026-08-27Significant hardware wallet security hardening: mandatory anti-klepto on BitBox02, Ledger wallet policy re-registration on rejection, and serialised USB device access to prevent enumeration interrupting operations. Also improves BIP129/descriptor import validation and SLIP39 passphrase handling.

Eclair v0.14.2 -- 2026-08-26ACINQ released Eclair v0.14.2 with fixes for bugs that "can be exploited by malicious nodes." The release also documents that bitcoind should run on the same machine as eclair or use a secure tunnel. Upgrade is "highly recommended."

BTCPay Server v2.4.3 -- 2026-08-24Security release recommended for servers shared with many users. Release notes are minimal, stating only that updating is recommended. Published by NicolasDorier with a GPG-verified commit.

BitBox02 Firmware 9.27.0 -- 2026-08-24Displays long transaction and swap amounts in full instead of truncating. Adds message signing for keys in the m/45' namespace and supports timestamp-based absolute locktimes. Stepped upgrade path required from older firmware versions.

Blockstream Ships Jade 1.0.41 and Reflects on the Coldcard Fallout -- Blockstream BlogPublished: 2026-08-25
Blockstream released Jade firmware 1.0.41 alongside a blog post responding to the Coldcard RNG vulnerability. Jade is not affected (no degraded RNG fallback path, mixes multiple entropy sources through SHA512). Release is security hardening: runtime bumped to latest stable, increased stack protection, updated dependencies, audited sensitive-memory clearing. Not urgent but recommended. 1.0.42 on an expedited timeline for less serious reports. The post reveals dozens of AI-automated scans landed on Jade within days of the Coldcard disclosure, plus multiple human reviews. Credit to Spiral's Loupe tool and the Kvazar agentic harness.

Everything Else
Arkade v0.9.16 -- Aug 2026Major security hardening and admin web console for the Ark protocol server.

BasicSwap DEX v0.18.5 -- Aug 2026Breaking protocol change. All nodes must upgrade.
Also in window: v0.18.4 (Aug 2026) -- critical swap security fixes. v0.18.3 (Aug 2026) -- earlier security patch in the same chain.

Bisq 1.10.7 -- Aug 2026Hotfix for corrupted DAO datastores. Continues the rapid Bisq 1 patch cycle from last episode (1.10.5 security update, 1.10.6 hotfix).

Cashu CDK 0.18.0-rc.1 -- Aug 2026Release candidate with explicit payment confirmation, batch minting, and BOLT12 fix.

Cashu TS v5.0.0-rc.8 -- Aug 2026Release candidate with crash-safe swap previews.

Fedimint v0.12.0 "Second Nature" -- Aug 2026Named release of the federated ecash protocol.

JoinMarket-NG 0.38.0 -- Aug 2026Quantized fees, zero-fee makers, and security hardening. Continues the rapid development from last episode's 0.37.0/0.37.1 releases.

LND v0.21.3-beta.rc1 -- Aug 2026Release candidate. Also ships v0.20.4 RC for the older branch.

Nunchuk Android 2.8.4 -- Aug 2026Bug fixes for the multisig wallet.

Vexl 26.8.0 -- Aug 2026Update to the P2P no-KYC trading app.

Wasabi Wallet v2.8.2 -- Aug 2026Coinjoin security patches and reorg sync fixes.

EDUCATION
Deep Dive: Bitcoin's Quantum-Resistant Transaction Explained -- Sylvain Saurel / In Bitcoin We TrustPublished: 2026-08-27
Detailed technical explainer breaking down StarkWare's first quantum-resistant Bitcoin mainnet transaction (block 964,199). Covers how hash-based cryptography replaces ECDSA exposure, explains Shor's and Grover's algorithms, the mempool attack surface (public keys are exposed between broadcast and confirmation), and why the broader network remains vulnerable despite this milestone.

TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate

HELP GET SAMOURAI A PARDONSIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonne
DONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T
SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/

VALUE FOR VALUE

Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.

You can support this episode using your time, talent or treasure.

TIME:

- create fountain clips for the show
- create a meetup
- help boost the signal on social media

TALENT:

- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!

TREASURE:

- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ungovernable
- BUY SOME STICKERS @ https://ungovernable.network/shop/

FOUNDATION

https://foundation.xyz/ungovernable

Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.

As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.

Thank you Foundation Devices for sponsoring the show!

Use code: Ungovernable for $10 off of your purchase

CAKE WALLET

https://cakewallet.com

Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.

Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.

Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.

Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.

Thank you Cake Wallet for sponsoring the show!

MYNYMBOX

https://mynymbox.io

Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.

Explore benefits such as No KYC, complete privacy & security, and human support.

(00:00:00) INTRO
(00:00:58) THANK YOU FOUNDATION
(00:01:45) THANK YOU CAKE WALLET
(00:02:48) Going Weekly & Four Chainsaws
(00:05:13) The New Website & Topic Archive
(00:15:24) Envoy &…