Miner signaling for BIP-110 sits at 2.56% against a 55% threshold. Dashjr says a PoW change is the only option if the soft fork fails. Block 961,632 arrives Saturday.

BTCPay v2.4.2 patches a live exploit draining Lightning nodes via stolen LND macaroons. Foundation confirmed funds swept. Patching alone is not enough.

MIT + Commons Clause is not open source. A five-year entropy bug in Coldcard firmware drained 1,596 BTC. The license structure matters for security.

Treasury's quantum task force has a dedicated digital assets track. Bitcoin's BIP-360 process is the only credible PQC migration path in crypto.

Blockstream Research evaluated three lattice signature schemes for Bitcoin. Hawk is dead. Falcon and Dilithium remain, but neither solves the HD wallet problem.

CLN maintainers confirmed critical vulnerabilities Aug. 26. All node runners urged offline now. AI-assisted audit found the bugs. Patch expected within 48 hours.

Blockstream's SHRINCS BIP is the most Bitcoin-native post-quantum proposal yet. But the security proof is unfinished and the stateful signing path changes self-custody permanently.

Core Lightning maintainers confirmed multiple critical vulnerabilities Aug. 26 via AI-generated CVE reports. Patch now or restart with --offline. No confirmed losses yet.

The Wave 3 Coldcard attacker made its first on-chain move, routing ~10% of stolen BTC through THORChain into ETH. Over 90% still sitting.

835 logical qubits. Lowest on record for a Bitcoin ECC attack. Hardware can't execute it today, but the algorithmic target keeps falling without any new hardware being built.