Blink brought the BTC Map merchant directory inside the wallet this week — on a shared open standard other wallets are adopting too, so finding where to spend Bitcoin no longer means leaving the app.

In Nairobi, one settlement reported 3.78M sats circulating locally across 11 projects. BTCPay shipped a Core Lightning update but kept external access disabled while it recovers. And a reported crackdown in Afghanistan was a reminder that where Bitcoin gets banned, it's often needed most.

https://www.blink.sv/blog/weekly-brief-2026-36

This week's biggest payments number comes with an asterisk.

A South African network reported 95% payment growth (rand value up 176%) — but it now blends Bitcoin and stablecoins, so it's not a Bitcoin-only adoption rate. "Crypto payments up" and "Bitcoin adoption up" are no longer the same sentence.

The other theme was reliability. When Spark went down Monday, Blink told its users within the hour and posted an all-clear — no funds at risk. The other wallets on the same Spark SDK stayed silent. Core Lightning's advisory pushed operators offline while a fix is prepared, and BTCPay disabled affected routes to shrink the attack surface.

On the ground: an Onitsha cash-flow playbook that caps Bitcoin at 10% of profit, a rural Kenyan earn–spend–save loop, and a litre of water in Nairobi for 495 sats.

https://www.blink.sv/blog/weekly-brief-2026-35

The Blink Donate Button now works with non-custodial accounts.

Paste one snippet into your site and readers can tip you in Bitcoin over Lightning. Same one-minute setup, same experience for the donor — the only difference is the sats now land in a wallet where you hold the keys.
https://www.blink.sv/blog/blink-donate-button-non-custodial-accounts

Three weeks of security pressure have turned into a working blueprint.

A duty-free shop at Oslo Airport now settles Bitcoin sales straight to a non-custodial wallet via BTCPay. BTCPay's founder is putting feature development on hold to shrink the attack surface. ZEUS's post-mortem confirmed custody held through a real breach — no customer funds lost. And a 600-person South African town runs about 45 Bitcoin-accepting businesses.

The stack isn't just surviving — it's converging on the shape it needs: self-hosted, non-custodial, boring in the best way.

https://www.blink.sv/blog/weekly-brief-2026-34

This was the week the security warnings became confirmed damage.

BTCPay confirmed an exploited bug cost real funds. Cuba's non-custodial lnp2pBot shut down indefinitely under sustained attack. A volunteer red team logged 7,958 findings across 501 projects.

And the payment layer kept shipping anyway: Wallet of Satoshi moved to self-custody, Blink added non-custodial BTCPay receiving, and everyday sats purchases widened across Africa.

The lesson holds — self-host, patch fast, hold your own keys.

https://www.blink.sv/blog/weekly-brief-2026-33

There is exactly one piece of information that can empty your Bitcoin wallet: your backup phrase.

Nobody needs it typed into a website. Not Blink. Not "Blink support." Not any wallet asking you to "verify," "restore," or "sync."

New blog post on backup phrase phishing and the one rule that keeps you safe:
https://www.blink.sv/blog/backup-phrase-seed-phrase-phishing-warning

The Blink plugin for BTCPay Server now supports non-custodial accounts.

No node. No API key. Connect your Blink Lightning address and start accepting Bitcoin, receive-only, on mainnet.

Same battle-tested plugin. Now without handing over any keys.

https://www.blink.sv/blog/blinks-btcpay-server-plugin-with-non-custodial-accounts

AI-assisted attacks forced the swap provider Boltz offline, took Satora down briefly, and had BTCPay shipping an emergency patch for a critical, actively-exploited bug.

The twist: the same AI is now hardening the whole open-source Bitcoin stack. The lesson — self-host, stay patched, build redundancy.

https://www.blink.sv/blog/weekly-brief-2026-32

The Blink Terminal is here: a cash register in a browser. Open a link, take Lightning payments — nothing to install.

BTCPay rebuilds multisig for teams, a Salvadoran town adds tuk-tuk rides in sats, and the hardware-wallet fiasco shows why real open source — not just readable code — wins.

https://www.blink.sv/blog/weekly-brief-2026-31

Your non-custodial Blink wallet is safe.

Blink is not affected by the recently discovered vulnerability of hardware wallet vendor Coldcard.

Your 12 words are created only from your phone's secure hardware randomness — and if that randomness isn't available, the app refuses to create a wallet.

Read more about security at Blink:
https://www.blink.sv/blog/know-your-keys

Accepting Bitcoin just got easier: the new BTCPay plugin turns a Blink Lightning address into a full merchant setup — no node, no API key, your keys.

Lightning Labs ships Wavelength, pooled sats buy a cow, and a town in El Salvador pays for laundry, juice, and coffee in bitcoin — this week's brief.

https://www.blink.sv/blog/weekly-brief-2026-30