Bitcoin Optech newsletter #333 is here: - describes a vulnerability that allowed stealing from old versions of various LN implementations - announces a deanonymization vulnerability affecting Wasabi and related software - summarizes a post and discussion about LN channel depletion - links to a poll for opinions about selected covenant proposals - describes two types of incentive-based pseudo-covenants - references summaries of the periodic in-person Bitcoin Core developer meeting - recaps the "Track and use all potential peers for orphan resolution" PR Review Meeting - summarizes changes to services/client software - summarizes popular Q&A from Stack Exchange - Optech Newsletter #333 Recap on Riverside David Harding announced to Delving Bitcoin a vulnerability he had responsibly disclosed earlier in the year. Old versions of Eclair, LDK, and LND with default settings allowed the party who opened a channel to steal up to 98% of channel value... A developer of GingerWallet disclosed a method a coinjoin coordinator could use to prevent users from gaining any privacy during a coinjoin... René Pickhardt posted to Delving Bitcoin and participated, along with Christian Decker, in an Optech Deep Dive about his research into the mathematical foundations of payment channel networks... /dev/fd0 posted to the Bitcoin-Dev mailing list a link to a public poll of developer opinions about selected covenant proposals... Jeremy Rubin posted to the Bitcoin-Dev mailing list a link to a paper he authored about oracle-assisted covenants. The model involves two oracles: a covenant oracle and an integrity oracle... Many Bitcoin Core developers met in person in October, and several notes from the meeting have now been published... 'Track and use all potential peers for orphan resolution' is a PR by glozow that improves the reliability of orphan resolution by letting the node request missing ancestors from all peers instead of just the one that announced the orphan... Changes to services and client software: - Java-based HWI released - Saving Satoshi Bitcoin development education game announced - Neovim Bitcoin Script plugin - Proton Wallet adds RBF Selected Q&A from Bitcoin Stack Exchange: - How long does Bitcoin Core store forked chains? - What is the point of solo mining pools? - Is there a point to using P2TR over P2WSH if I only want to use the script path? Bitcoin Optech will host an audio recap discussion of this newsletter with special guests Dave Harding and /dev/fd0 on Riverside.fm Tuesday at 15:30 UTC. Join us to discuss or ask questions!