Three weeks until the Open Source AI Summit! @Rob1Ham from @AnchorWatch, @moneyball & @_tnull from @ProjectLoupe and @spiral_xyz, and @jordanmecom from @blocks are joining us for a panel on securing open source software in an AI future. Apply to attend, or catch the recording after!

Like many open source Bitcoin projects, CLN has received a number of AI-generated CVE reports from multiple sources over the past 10 days. Our small team, together with several invaluable open source contributors, has been working intensively to validate and triage these reports and develop fixes where needed. We’re now working through a broader remediation strategy. The first step is a point release containing many of these fixes, and we will strongly recommend upgrading. We’re aiming to have an initial version of the point release available within the next few days.

When you download Bitcoin Core today, the binary doesn't contain everything your node runs. It still loads the C library (glibc and friends) from your operating system which means there are version requirements, behavior that can vary from machine to machine, and code that your node executes that isn’t covered by reproducible builds. New static test builds pack it all into one deterministic Bitcoin Core binary. @fanquake is asking node runners to test out these new static binaries and report results.

Introducing GLM-5.3: Built to Code. Ready for Cyber Defense. - Top-tier coding and agentic capabilities, achieved through post-training on the 743B base model - A major leap in cybersecurity, setting a new standard among open models Tech Blog:

Today, Bitcoin Policy Institute and a broad coalition from across the digital-asset ecosystem are publishing an open letter calling on the world’s leading AI labs to provide qualified open-source defenders with trusted access to frontier AI models. The past several weeks have made the need for this abundantly clear. The people defending digital-asset infrastructure and open-source software need access to the latest AI capabilities to perform comprehensive security reviews and stay ahead of increasingly sophisticated adversaries. The coalition includes open-source development organizations, major custodians, treasury companies, payment services, security firms, capital allocators, and others whose businesses and customers depend on the integrity of open-source infrastructure and libraries. Open-source defenders often occupy the least privileged position in the AI security landscape. They have limited access to the strongest internal cyber models and are frequently blocked by guardrails when using publicly available frontier systems for legitimate security research. As a result, they often resort to less capable open-weight alternatives. We are urging frontier AI labs to establish a clear, trusted pathway for qualified open-source and digital asset defenders to access their strongest capabilities, with sufficient compute and secure environments to conduct meaningful security reviews. Frontier AI could become one of the most powerful defensive technologies ever developed, but only if defenders get fair access to those systems. It’s time to give defenders the tools they deserve. Read the open letter, add your organization, or sign as an individual on our website at

Excited about the newly released version 2.5.0 of the Ledger Bitcoin app. Upgrade! For many taproot🥕 miniscript policies it brings a long-awaited UX improvement: human-readable policy description, in addition to the descriptor template (which is opaque for most users). 🧵

In his latest stream, Mechanic compared BIP110 to someone threatening to throw a grenade into a wedding unless their demands are met. Since then, many of his followers have embraced the "grenade" analogy. Here's how I think that story actually ends.

Was looking at a work notebook I had during package relay development, saw huge diagrams of failing package evaluation fuzz test cases, and shed a single tear that I would never *EVER* have to debug anything like that again by hand.