Far too many people previously dismissed @Bitkey because of group-think We've changed nothing about our approach: engaging diligently, answering all concerns transparently, winning trust in a time of panic And now many people's eyes have been opened that it's a great product

Today, we're taking another big step forward with transparency at @Bitkey. Introducing Bitkey Security Updates. Going forward we'll keep a persistent, public log of every relevant security-related bug we fix in the Bitkey system. For each update, we'll describe the bug, its impact, its fix and any required customer actions. We'll also include information about who found the bug, whether it be our own security teams at Bitkey/Block or by external researchers. We believe this type of visibility is in line with the Bitcoin ethos. It's what customers deserve, particularly with the advancements in the ability of LLMs to find critical security vulnerabilities. We hope this gives our customers clarity and peace of mind. We'll work hard to keep you in the loop as we continue to build.

“Grandpa, I just don’t understand. How was it that given how powerful the United States was, China was able to overtake us and dominate the world?” “Well.. it all started when they examined the whiteness of physics"

Today, Bitcoin Policy Institute and a broad coalition from across the digital-asset ecosystem are publishing an open letter calling on the world’s leading AI labs to provide qualified open-source defenders with trusted access to frontier AI models. The past several weeks have made the need for this abundantly clear. The people defending digital-asset infrastructure and open-source software need access to the latest AI capabilities to perform comprehensive security reviews and stay ahead of increasingly sophisticated adversaries. The coalition includes open-source development organizations, major custodians, treasury companies, payment services, security firms, capital allocators, and others whose businesses and customers depend on the integrity of open-source infrastructure and libraries. Open-source defenders often occupy the least privileged position in the AI security landscape. They have limited access to the strongest internal cyber models and are frequently blocked by guardrails when using publicly available frontier systems for legitimate security research. As a result, they often resort to less capable open-weight alternatives. We are urging frontier AI labs to establish a clear, trusted pathway for qualified open-source and digital asset defenders to access their strongest capabilities, with sufficient compute and secure environments to conduct meaningful security reviews. Frontier AI could become one of the most powerful defensive technologies ever developed, but only if defenders get fair access to those systems. It’s time to give defenders the tools they deserve. Read the open letter, add your organization, or sign as an individual on our website at

It was truly a glimpse into the future watching our @BitcoinatBlock security experts publicly collaborate with their agent teams within Buzz to get to the bottom of the Coldcard incident as it all went down 10 days ago.

After giving away 100+ free @Bitkey devices, at a personal cost of more than $25,000 in bitcoin the last few days, I am discontinuing my offer as the number of scam/spam/fake accounts has reached a ratio where it is now too many to go through per legitimate request. I hope the 100+ people that got a free @Bitkey will review it on their channels, because it’s the most amazing bitcoin product ever!!!

There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds. Please update your BTCPayServer to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer. If you are unable to update right away, turn off your BTCPay Server to prevent unauthorized access until you can update.

If you are pointing frontier models at FOSS code bases - cool. Let's ensure the ecosystem is safe, the more eyes the better. But don't recklessly tweet out to try to spread panic or chase clout. People are on edge from Coldcard. Responsibly disclose with the team that can actually verify your claims, respond the right way, and then most importantly, safely fix the issue (if it's real). We've been getting lots of engagement from people across the ecosystem. That's great. But, like with anything AI, even the cyber models can produce slop. I am not dismissing Floppy's claim here. I acknowledged it and we are looking into it within 30 mins of his posting. Any bug or vulnerability is urgent to us, and we are on it. But this should be done over email, and not in public where unverified claims can lead to false narratives and unnecessary panic.

Vegas was our first time showing up as a single unified brand [@BitcoinatBlock] and ecosystem, across @CashApp, @Square, @Bitkey, and @protomining. And yes I am biased, but I believe it was the best activation and presence of any company in bitcoin history.