BitLance @bitlancework

Bitcoin adoption grows when people can use it to get real things done. That includes hiring someone to build your website, design your graphics, edit your videos, or help grow your business. Need work done? Post a job on BitLance and pay in Bitcoin. bitlance.work

publishing a page where we are sharing everything we know about the movements of the hacker and their ongoing cascade attack on Bitcoin payments infrastructure

Blink Wallet @blinkbtc

3 days ago

Phase two of our 19 September disclosure: a public page that follows the stolen coins, updated as they move. Follow-up post: blink.sv/blog/phase-two… Tracking page: bounty.blink.sv Bounty terms: blink.sv/bounty-terms On 3 October we published the post-mortem of the

8 31 70 7K 8

Thank you to everyone who has sent analysis, tips and security reports since bounty.blink.sv went live: 65 addresses and transactions have been added since launch. Please keep leads private: [email protected], BOUNTY in the subject. Tracking page: bounty.blink.sv Terms: blink.sv/en/bounty-terms

Blink Wallet @blinkbtc

3 days ago

Phase two of our 19 September disclosure: a public page that follows the stolen coins, updated as they move. Follow-up post: blink.sv/blog/phase-two… Tracking page: bounty.blink.sv Bounty terms: blink.sv/bounty-terms On 3 October we published the post-mortem of the

8 31 70 7K 8

Meanwhile @COLDCARDwallet @Coinkite @Blockstream @Liquid_BTC are leaving it up to the community to clean up their mess.. 👀🧡⚖️

Blink Wallet @blinkbtc

3 days ago

Phase two of our 19 September disclosure: a public page that follows the stolen coins, updated as they move. Follow-up post: blink.sv/blog/phase-two… Tracking page: bounty.blink.sv Bounty terms: blink.sv/bounty-terms On 3 October we published the post-mortem of the

8 31 70 7K 8

Phase two of our 19 September disclosure: a public page that follows the stolen coins, updated as they move. Follow-up post: blink.sv/blog/phase-two… Tracking page: bounty.blink.sv Bounty terms: blink.sv/bounty-terms On 3 October we published the post-mortem of the attack and a 50% bounty on the stolen funds. That was about what happened inside Blink. This is about where the money went. The page lists every address, transaction and Lightning channel we can tie to the attacker. Anyone can check each one on the public blockchain. Why public: We want everyone working on the bounty to have the same data we have, as up to date as ours, so they can be as effective as possible. The page is that data: we update it when the coins move and when we confirm something new. We are unlikely to catch him on our own. He is careful: his main Lightning node is reachable only over Tor, and his activity is spread across all hours of the day. What he cannot hide is the coins. Every time they move, they move in public. He already knows he is being watched, so publishing tells him nothing new. Formal channels matter and we use them, but they take weeks. A public page reaches exchanges, analysts and other teams the same day. He is still active: He prepared for weeks. He set up his Lightning node ten days before the attack, and nine days before it he already controlled about 14 BTC. He has not stopped: in the first week of October his main node opened a new channel, a second node of his showed itself, and he moved coins again. In the same week, on 5 October, he attacked @secondhq, a company that builds its own version of Ark (a new way to make Bitcoin payments), called Bark. He exploited a bug in Second's Ark server and took 0.75 BTC of their own funds; no user funds were affected (their disclosure: x.com/secondhq/statu…). He paid for it from the same wallet that received the coins stolen from Blink, and at least partly with those very coins. We believe he may be preparing a cascading attack: using what he takes from each target to fund the next. If you build on Bitcoin as everyday money, there may be extra reason to be vigilant. If you run a Lightning node, a federation, a swap service or an exchange, check the page against what you see. What the page shows: The theft, how the coins moved after it, the coins he held before the attack, his Lightning nodes, his attack on Second's Ark server, and a Lightning wallet that is probably his. Every item is labelled proven, traced or probable. Transactions by exchanges or swap services are marked third-party: they are not accused of anything. About 0.87 BTC still sits untouched at five of the original addresses, 4.84 BTC at an address that is probably his, and 1.64 BTC at addresses he used in the attack on Second. The whole list downloads as a CSV. What stays off it: Anything partners told us in confidence. Personal data. Open security issues. Addresses whose owner we cannot establish. Other teams' incidents, until those teams agree or make them public. How you can help: Watch the addresses. If coins move, especially toward an exchange or any service that knows its customers, tell us straight away. Freezes depend on reaching the platform within hours. Report privately to [email protected] with BOUNTY in the subject. Please don't post leads publicly: it warns him, and it does not establish your priority. If you run a service and listed coins reach you, contact us before acting. If you control a listed address and are not involved, write to us and we will correct the page. The 50% bounty stands. 25% of what is recovered goes to whoever provides the information that leads to it, and another 25% to Bitcoin Beach, Bitcoin Ekasi, Afribit Kibera and the circular economies they choose. Everything on the page was already known to us, so re-tracing it does not qualify. Where the coins go next can. Live updates: Corrections appear as dated notes; we do not silently rewrite it. Spot an error? Write to [email protected] with CORRECTION in the subject. We timestamp the page's data on the Bitcoin blockchain with @opentimestamps at launch and with every update. One more thing: Blink never charges a fee to recover funds and never asks for keys, seed phrases or payments. Anyone offering "recovery services" in our name is not acting for Blink.

Second @secondhq

3 days ago

1/ On Monday 5 Oct an attacker exploited a bug in our Ark server's boarding flow and took 0.75 BTC of Second's own liquidity. No user funds were affected.

12 51 172 22K 20

What’s the most underrated Bitcoin use case?

The comment deadline on South Africa's cross-border crypto rules passed on 30 September. Nothing is law yet. The draft still says what it said: an individual can send Bitcoin to their own wallet, but can't send it back. Companies can't move crypto across the border at all. Buying and selling in rand stays untouched. None of it takes effect until the broader capital-flow regulations are promulgated, which hasn't happened. What's new is the pushback. The CATASTROPHE coalition says 203 organisations and 5,677 individuals backed it, and a bank, GoTyme, has now joined. Luno filed separately, arguing the draft would clash with South Africa's IMF commitments. It's a draft, it's contested, and it's the template other African regulators are watching. Full story in the comments 👇

Your profile is the pitch. 🗣️ 400+ freelancers have joined BitLance to get paid in Bitcoin. The talent is real. Now we want clients to see it. Here's what's changing. Instead of applying to every job and hoping, clients will browse profiles and reach out directly. That means your profile does the selling for you, before you've said a word. Think about it from the client's side. They're about to send sats to someone they've never met. A face, three lines about what you do and three pieces of real work is someone they can pay with confidence. Ten minutes: photo, bio, three portfolio items. That's it. And if you're a Bitcoin business, a founder or anyone with a task and some sats: the talent is here. Post a job at bitlance.work, set a fair price, pay when the work is delivered. Freelancers, get your profile ready. Clients, come and hire.

Check out my new post on Substack! bitlance.substack.com/p/clients-are-…

#Bitcoin really rewires your brain. 😂

Blaise Peter (@BlaisePeter6) took up running a few months ago. His first race is a 21.1 km half marathon, in Bitcoin kit, among 20,000 people. On 18 October he lines up for the Slave Route Challenge inside Cape Town's first Nelson Mandela Marathon, every runner wearing bib 466/64, Mandela's prison number. @BlaisePeter6 will be in Bitcoin kit the whole way. He runs @BitFitness21M, a community tying Bitcoin to sport and fitness. When we spoke, he put it simply: "It has always been about adoption. You never can tell who I'm going to meet on race day." Full story in the comments 👇

Bitcoin commerce out in the wild 🟧 @bitlancework - Freelance platform for the Bitcoin @josebitcoiner - Colombian specialty coffee (340g) @BitcoinArtMag - The world's first Bitcoin Art Magazine galaxymind.space

Most Bitcoin programs teach people what Bitcoin is. This one teaches people how to teach it. @AmityAge just ran its first African edition of Bitcoin Educators Academy in Lusaka with @BitcoinZambia, and Lagos is next, 8 to 10 October, with @DigiOats. Three days on public speaking, analogies, handling objections, and debunking myths. Not what to think, how to explain. The logic: every trained educator goes home and trains more. One academy becomes many. Both African editions are free for selected participants through a @HRF grant. Full story in the comments 👇

The best Bitcoin demo is using it.

BitLance @bitlancework

3 weeks ago

The best Bitcoin demo is using it.

0 0 3 120 0

Every Bitcoin tracker shows you the dollar price. None of them show what Bitcoin actually costs in Lagos, where the official naira rate and the street rate are two different numbers. @citrusrate fixes that. Live Bitcoin prices in 41 African currencies, official and black market side by side, built by @malkrite a Nigerian engineer who knows the parallel market isn't a footnote, it's the real rate. It also tracks inflation, money supply, and FX reserves priced in Bitcoin, and ranks currencies by how fast they're losing ground to it. Developers can pull any rate over an API, or pay per lookup with Lightning, from 50 sats. Full story in the comments 👇

What’s stopping you from spending Bitcoin more often? A) Not enough places accept it B) Payment experience C) I prefer to save it D) I simply don’t have enough opportunities

Government: "Trust us." Government: "We won't inflate the money supply too much." Government: "We won't monitor every transaction." Government: "We won't restrict how you spend it." Government: "We won't make digital money programmable." Bitcoin: "You could just verify it yourself."

What's one Bitcoin use case you think is massively underrated?

@bitlancework @Destinysmart_ Love seeing what you’re building at BitLance. Helping freelancers find work and get paid in Bitcoin opens up real possibilities. Wishing you lots of success! ⚡️

Me watching fiat do FIAT-things. 😂🤣