Spark presents itself as self-custodial: instant payments, offline receiving, no Lightning channels to open, and keys held by the user.

However, the mainnet configuration published in the SDKs lists three operators - Lightspark, Breez, and Flashnet - and only two of them are needed to produce the aggregate signature controlling each deposit.

Every Spark deposit funds a Taproot output. The key combines two components: one held by the user and one held by the operators. The operators cannot spend on their own. But the user cannot transact without interacting with them.

Spark repeatedly uses the phrase “only one honest operator is needed.” Yet the published configuration is 2-of-3: two old shares being retained are enough to reconstruct the aggregate component and sign a conflicting spend together with a former owner. The third operator can refuse to participate without preventing anything. Bitcoin Layers classifies this as the protocol’s primary finality risk.

A unilateral exit formally exists in the protocol. But many popular wallets still depend on the operators to obtain the data required to construct it.

Meanwhile, Spark is scaling: Wallet of Satoshi, Primal, Blink, Blitz, Cake Wallet. Freedomia, a no-KYC Visa card, also uses it for Lightning deposits following the suspension of Boltz services.
Spark’s self-custody is therefore heavily conditional: the unilateral exit exists on paper, provided the operators cooperate in giving you the data you need.
naddr1qq3x...

The total haul from the Coldcard hack: 1,816 bitcoin, over $116 million, from more than 5,200 addresses.

On July 26, Moonshot AI released Kimi K3, 2.8 trillion parameters, the largest open-weights model ever published. It can run on custom hardware, not just on the manufacturers' servers, without the guardrails of Anthropic and OpenAI.

The bill came due immediately: after Coldcard, Boltz suspended all swaps, taking with it the Lightning Network functionality of many widely-used wallets. Then Blixt halted operations, not to mention the bug in BTCPay Server and the data theft at Trezor's logistics partner.

Calle and Rob Hamilton responded with a sixteen-person Red Team. The time between a latent bug and its exploitation has almost vanished. The only place this logic doesn't touch remains the barest: an on-chain UTXO, a key, a signature.
naddr1qq5k...

Donald Trump and Elizabeth Warren have gone at each other for a decade over tariffs, taxes, the Fed, immigration. There's just one thing they agree on: abolishing America's debt ceiling.

The ceiling was created in 1917 to simplify borrowing. Since 1960, Congress has raised, suspended, or redefined it about 80 times.

Why does it always blow up? Arithmetic. Fiscal year 2025: a $1.775 trillion hole. The last federal budget in surplus was in 2001. On interest on the debt alone, the government paid $1.22 trillion in 2025, nearly a quarter of federal revenue.

To pay it, more debt. Yesterday's creditors repaid with tomorrow's creditors' money.

A pyramid scheme by definition, with two differences: participation is mandatory, and the manager prints the currency it repays with. It never defaults explicitly; it does so gradually, by diluting the purchasing power of the dollars in circulation.

The expansion of the money supply is neither right-wing nor left-wing: it's the one thing the right and the left agree on.
naddr1qqsk...

It's the most talked-about news in Italy.

On July 15, the Court of Cassation upheld a sentence of 14 years and 9 months for Mario Roggero, the jeweler from Grinzane Cavour who in April 2021 killed two of the three robbers who had just cleaned out his shop. His wife and daughter beaten and tied up, the safe emptied.

Under Italian law, the act was over: the robbers had turned their backs.
By the logic of property, the violation was still in progress. As long as the stolen goods remain in the thief's hands, the invasion continues. Flight is the violation carried on by other means.

It wasn't the first time. Roggero had already been robbed in 2015: he, his wife and his daughter tied up, the two women locked in the bathroom, €300,000 in stolen goods. The security monopolist failed the same family twice. It collects taxes to protect you, doesn't show up, and when you protect yourself it punishes you. Then it orders you to compensate the families of the men who attacked you.

In a free market for security, the court would ask only one question: who initiated the use of force? Three men with a gun and a knife. Every consequence falls on whoever made that choice.
naddr1qqsx...

The Binance–ECB case follows a script we've seen played out many times. It even has a name: crony capitalism.

Here's how it works: a new sector is born free, because the state doesn't yet know what it is and hasn't had time to regulate it. Companies compete, innovate, grow.

When the sector gets big enough and rich enough to matter, the regulator shows up to oversee and tax it. And with the regulator come the barriers to entry: licenses, capital requirements, compliance obligations, thresholds. Those already big can usually absorb them; those who'd like to enter are shut out.

MiCA is no exception. To issue a stablecoin in the EU you effectively need a quasi-banking license. Reserves must be held 30% - up to 60% for large issuers - in bank deposits. The banks, which use that liquidity for their own business, cash in. Alternative issuers are shut out.

Not even the much-praised GDPR is an exception. A study of 110,000 websites over 18 months found that after it came into force, market concentration increased. Almost every web-technology vendor lost share. Except one: Google.

Same with the AI Act. The frontier models are built by OpenAI, Anthropic, Google, xAI: all American. The only relevant European lab, Mistral, is worth €20 billion against the $20–30 billion in annualized revenue of the giants across the Atlantic. Europe wrote the rules before it had any players on the field.

We now live immersed in a bureaucratic superstructure we accept passively. Every year one more directive, one more registry, one more obligation, one more threshold. Together, a dense net that smothers innovation in the cradle and fossilizes markets around whoever got there first.

And we accept it because we grew up inside it - inside a latent socialism that takes for granted that it's the state's job to decide who gets to do business, on what terms, with how much capital, under which license.

The regulator raises barriers to shield what exists from what could exist. #Bitcoin bypasses them in the most subversive way possible: freeing people, one at a time, from the very idea that they need permission.
naddr1qqnx...

In the world of shitcoins, it's a bloodbath.

In June, Taylor Hornby, using Claude Opus 4.8, discovered an unconstrained element in Zcash's Orchard circuit that allowed counterfeit ZEC to be minted inside the shielded pool without leaving any on-chain trace. The bug had been there for four years. No one can cryptographically prove that it had not already been exploited. ZEC lost 38% of its value in a single day.

Two months earlier, in March, another researcher had found a separate vulnerability in Zcash's legacy Sprout pool with the help of AI: nodes could completely skip proof verification.

In February, a bug in Nethermind, the client used by roughly 40% of Ethereum validators, could have taken them offline with a single malformed transaction.
In May, AI agents combed through thousands of smart contracts on BNB Chain and found a token-launch service that left fee withdrawals accessible to anyone. Four days later, a human attacker independently discovered and exploited the same vulnerability.

Why is Bitcoin's base layer still standing?

Because Bitcoin, at its foundational layer, is deliberately stupid software. What shitcoiners spent years calling Bitcoin's weakness - a limited, rigid language incapable of handling complexity - is turning out to be the only defense that still holds.
naddr1qq3x...