Damn vulnerable Simplicity covenants #4#. Timelocks are ambiguous. Nodes interpret them differently depending on the tx value passed. If v < 500_000_000, it's a block height; otherwise, it's a timestamp. Be careful designing locking covenants. Unexpected unlocks may occur.

Damn vulnerable Simplicity covenants #3#. Use `jet::sig_all_hash()` to construct transaction topology messages properly. Otherwise, it's fairly easy to allow signature replay attacks.

Damn vulnerable Simplicity covenants #2#. Make sure that an attacker can't alter the transaction topology to bypass the assertions. In this example, checking that the Vault always sits in the "zero input" is critical.

Toccata hard fork brings programmable UTXOs to @kaspaunchained and native covenants and ZK verification to its Proof-of-Work BlockDAG. Our article covers what changed, what Argent adds for builders and how ChangeNOW supports $KAS. See what Toccata adds to Kaspa 👇

Another weird narrative post-ColdCard is that if we'd just had covenants (CTV, I guess?) it wouldn't have happened. This is nonsense. The many people who wanted the simplicity of generating one set of keys on one device couldn't use vaults - vaults require generating multiple sets of keys in different ways in order to get security from these kinds of attacks. The people who were willing to do that already did - they used multisig across different wallet vendors and ended up safe. Vaults are cool and may be used by some, but the kinds of folks who used ColdCard were definitely not going to use them, sorry. I, too, wish there were something simple we could "just do" to prevent this kind of thing.

What Kaspa's Toccata fork actually unlocks The kaspa:native upgrade adds covenants, programmable rules attached directly to transactions, enabling vaults, escrow, and smart wallets without giving up proof-of-work or BlockDAG speed. KRC-20 tokens now live natively in consensus rules instead of inscription workarounds. New ZK opcodes let rollups and bridges anchor to Kaspa, with two EVM-compatible Layer 2s already building on top.

Kaspa’s (@kaspaunchained) Toccata hard fork is pushing the network beyond simple payments. The upgrade adds native Layer-1 covenants, ZK proof verification, transaction introspection, and KRC-20 support. So, what does Toccata actually change for Kaspa? Read the full breakdown 👇

We wasted years of focus on the stupid BIP110 spam nonsense instead of making Bitcoin self custody safer with on chain covenants. It’s time to finally refocus the energy on bringing a covenants soft fork.