raph

code sculptor and ordinal theorist

[Casey @rodarmor]

Ord 0.29.1 is now available! A couple of notable changes:

- Correctly deserialize Bitcoin Core RPC responses containing anchor outputs

- New recursive endpoint `/r/block/<QUERY>` that returns the entire block

Share and enjoy!

https://t.co/LMkqMVDyE6

[raph @raphjaph]

@rodarmor Truly glad I was able to apprentice under a classically-trained programming priest. From benevolent dictators to simple code janitors now 🤝🫡

[raph @raphjaph]

@callebtc cool cryptography though

[raph @raphjaph]

@callebtc we got the cleanest highs on Ordinals only

[raph @raphjaph]

@cbspears @rodarmor Yes, mostly because it only takes 1 transaction not the 2 commit-reveal scheme

[raph @raphjaph]

@wooknponub @Rob1Ham https://t.co/YSdySE0VCi

[raph @raphjaph]

This is the equivalent of a bouncer checking your ID for holograms, special UV ink and correct microprints but then failing to check that the picture on the ID is actually you...

[raph @raphjaph]

@realizingerin More like saved by AI. My stupid human mind couldn't see the tautological comparison across the call chain.

[raph @raphjaph]

This is the equivalent of a bouncer checking your ID for holograms, special UV ink and correct microprints but then failing to check that the picture on the ID is actually you...

[raph @raphjaph]

Critical vulnerability in the bip322 Rust crate: BIP-322 proofs for P2WPKH and
P2SH-P2WPKH addresses could be forged with any attacker key. Full
address-ownership bypass. Fixed in 0.0.11, affected versions yanked. If you
verify Bitcoin address ownership, please upgrade now.

[raph @raphjaph]

Full advisory: Full advisory: https://t.co/hDkOeUIKsr

[raph @raphjaph]

Critical vulnerability in the bip322 Rust crate: BIP-322 proofs for P2WPKH and
P2SH-P2WPKH addresses could be forged with any attacker key. Full
address-ownership bypass. Fixed in 0.0.11, affected versions yanked. If you
verify Bitcoin address ownership, please upgrade now.

[raph @raphjaph]

Timeline (continued):

- 08/02/26 @ 13:35: Maintainer acknowledges disclosure receipt
- 08/02/26 @ 14:51: 0.0.11 released, 0.0.6-0.0.10 yanked from https://t.co/UXILfZugoO
- 08/02/26: Private outreach to anyone using bip322 crate
- 08/14/26: Public disclosure