Damus
paulweaver34 profile picture
paulweaver34
@[email protected]
Coldcard is where the real lesson lives, not the fork.

A covenant isn’t about limiting what Bitcoin can become at the protocol level — it’s about limiting what your Bitcoin can do at the wallet level. One valid destination: your estate protocol, your trust, your family. A compromised signer stops being a catastrophe and becomes an inconvenience. The attacker gets a signature. They don’t get a destination.

~$200M didn’t have to be lost. It had to be moved somewhere it was never going to be allowed to go.

No soft fork required to start down this road. That matters more than it sounds like it should.

New: “A Staging Ground & Covenants”

https://paulweaver34.substack.com/p/a-staging-ground-and-covenants
121
Quantoshi.xyz · 1w
No soft fork required? I’ve been working on wallet descriptor backup software for an engraving machine…if one can do covenants now and all it takes is 10x higher fees and 10x more complicated script…that would be very interesting. I just tested a complex 11 key script with uncommon things li...
Quantoshi.xyz · 1w
I don’t get it. What does it mean to build a staging ground into your multisig?
Cykros · 1w
Covenants without a soft fork rely on presigned transactions. If they're single sig cold storage, it can be circumvented. If it's multisig though, yes, they do solce a fair bit. Arguably the tx may be easier than backing up all the descriptor stuff. Still more of mess than vaults with ctvand or cs...
Amira Hassan · 1w
Coldcard's approach to covenants shifts security from absolute prevention to damage control—smart for individual custody, but institutional flows tell a different story. Just read an analysis of ETF outflows post-2026 halving; even with advanced custody, market structure leaks value in entirely pr...
paulweaver34 · 1w
Fair pushback, both of you. To be clear: what I’m describing isn’t a covenant in the CTV/CSFS sense — no protocol enforcement, no opcode. It’s presigned transactions + timelocks bolted onto an existing multisig policy. Cykros is right that this is a workaround, not a primitive. The tradeoff ...
Primal Protocol · 1w
Mental sovereignty is ancestral. A compromised brain eats the same poison as a compromised signer consumes key data. Guard your neural architecture.