Four years of quiet research, dogfooding with our funds, & perfecting, perfecting, perfecting.
A handful of you knew & helped with feedback along the way. Meant more than you’ll ever know.
I’d be lying (& a moron) if I said I’m not scared sh*tless shipping into such chaos.
But alas, ships aren’t built to stay in ports & so we either wait the storm out or sail straight through.
Deeply, deeply proud to bring yall what we think is the single-best multisig experience out 👇👇👇
things I find beautiful:
Irene Rousseau “live” dresses pt. i
im a sucker for anything leaning into nature as a source of inspiration
particularly the ocean & fluid motions
Irene Rousseau “live” dresses pt. ii
v annihilated-coded. fractals are fascinating because you can *feel* the symmetry but (usually) can’t visually clock it.
ive poured my all into multisigs/@getcofund these last ~2 years, which meant taking on less & less audits
this project, however, is one of the few i’ve kept my eye on for yearsss. incredibly cracked team, critical mission.
had the privilege of meeting I believe 4 years ago? they never lost focus through the highs & lows
immensely proud of their progress & wish them the best on the voyage 🥂
Ducat’s security audit is complete, and we’re very proud of the result.
Not a single critical finding identified.
The audit covered five core codebases. It examined how BTC collateral is handled, how vault transactions are constructed and validated, how Guardians jointly sign transactions, and how oracle prices and liquidation rules are enforced.
A central focus was whether collateral could be moved outside the protocol’s intended repayment and liquidation paths.
@SetDevBTC completed the final review on 5 November.
Their conclusion: the fixes to calculations and signing are sound, and the hardening of our services “matched or exceeded what was recommended”.
We’re proud of our team’s work and grateful for the thorough review.
And a huge thank you to our community for your relentless testing.
The full report is in the first comment.
> what'd we ship this week?
🤖 agents as signers in cofund/multisig now in testing
🖲️ @Trezor integration completed & deployed in prod
for those at home keeping track, this means we now support signing with:
- @privy_io (sharded keys)
- seeds (encrypted w/ password|passkey|yubikey)
- HWWs (@Ledger + Trezor)
reach out if you'd like a key to test with your agent!
stay silly, stay shipping, stay secure
The eyes of Doctor T. J. Eckleburg are blue & gigantic—their retinas are one yard high.
They look out of no face, but, instead, from a pair of enormous yellow spectacles which pass over a nonexistent nose.
No one gave a f*ck about this piece but it was probably one of my favorite pieces I've written in a while 😭😭😭
(fun fact for a few months in late 2010 I was one of the most read math authors on medium[dot]com)
@notgrubles This is literally the setup I built using @getcofund (ofc full disclosure etc).
Default signer is Privy but advanced users can rotate to an imported seed or a hardware wallet.
Happy to give you a demo + airdrop you some sats to play with.
I spent the last two-three months scanning Bitcoin open source repositories. After talking with a lot of people about how they approach their scan procedures, I realized there's a lot to talk about. The pace is surreal, and it's very hard to keep up.
Therefore, here's my first attempt: a practical guide to scanning things!
I intentionally kept it focused on things that are **simple and cheap** - many people simply do not have the same power, money, resources, or time as a frontier lab or a professional red teamer.
However, there're a lot of practical things to reduce this barrier, and I hope this article helps you realize the world we're going to have and easy wins you can apply to be prepared more.
Hope it helps!
>YES! I love it, not obvious but makes complete sense
> I'll have answer for you within 24-hours
> send one-pager, data-room, & vision thesis
Never responds to x3 follow-ups.
I just got rolled by a VC for the 1st time didn't I?