The Lonely Bit | In Solitude, We Find Our Strength

Independent Bitcoin builder & security researcher. Shipping tools, infrastructure, fintech BTC/FB native products . Building in public. TG :

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

👀

[小白 @xiaobai950131]

fb是年轻人的比特币，1fb等于1000u的 #btc #ordi

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@Boltzhq Can I contribute in fixing ?

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@callebtc @vikrantnyc @cakewallet @OpenRouter you guys get money for it ? @lorenzonical @unisat_wallet

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@Rob1Ham lol do we have to "join" ? or how does it work ?

i've already been contributing and still contributing to fixing some bugs/vulns

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@callebtc oo there is a lot more wherre that came from ahahahaahah, i thought my AI was yapping about a vuln while forking BTCPayserver. LOL

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@callebtc 10k a day Calle ? Cmon bro. Where is this red team? Can I contribute ?

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@BitcoinArchive @Rob1Ham There is a "Bitcoin Red Team" and im not a part of it ? 👎 👀

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

I’m not an official UniSat developer.

I was the external contributor who wrote and detailed those specific security fixes (the PBKDF2 upgrade, sandbox tightening, externally_connectable removal, etc.) and submitted them as PRs in good faith.

In an open-source wallet the commits become public once merged.

that’s how the model works. The detailed messages exist for auditability and maintainability, not as an “attack playbook.” The coordinated part happened earlier (private contribution + review with the team).

The remaining gap you’re pointing at is the time between merge and the patched version reaching all users. that’s a release/distribution issue, not the existence of clear commit history.

Security 101 also includes transparent, reviewable hardening. Happy to clarify further if useful.

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@0xShar3 You didn't understand the explanation 😅

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

Its an OS wallet. So the code is there for everyone. That the goal of being Open source.

Meanwhile non of the attacks bro mentioned can be done as easily as claimable. Not to mention that its so exaggerating as the only way for now anyone could lose their unisat wallet funds is if their device is compromised which isnt a wallet problem.

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@UTXO_Punk Happy to see my work going to places 🤣

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@laz1m0v @BitcoinArchive it might sound stupid but lets try and fix it is what im sayin

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@laz1m0v @BitcoinArchive we do what we do bro. there is no point in trying to change them. let the change come from us and it will flourish.
Bitcoin started with few honest people working together.

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@laz1m0v @BitcoinArchive dude whats wrong, you're mad at anycase wether i come on your side or against it. proving each time.

im sharing knowledge the same way you are

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@Ryversss @laz1m0v @lorenzonical make sure to learn and understand how to use multisigs , it can also be problematic if misimplemented. feel free to reach out anytime if you need any help or would like to talk it out.

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@Ryversss @laz1m0v @lorenzonical i wouldn't honestly recommend a certain specific hardware wallet and say this is the best/secure as its relative. i have been using @Tangem though and it has been great never had an issue with it.

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@Ryversss @laz1m0v @lorenzonical the only way to know is to be able to check the wallet code and ensure there is no mistakes/vulnerabilities to that effect. the actual vulnerability is a misimplementation. which led to bad entropy

[The Lonely Bit | In Solitude, We Find Our Strength @The_LonelyBit]

@Ryversss @laz1m0v @lorenzonical logically compromise = fund stolen unless the attacker didnt get to it.

and yes there is technically no issue, idk why you think there is one ? maybe because of the main post ? which is the reason i debated ?