KasSigner v1.0.7: A signer nobody can check... is just a promise. The security-critical half of the firmware is now a crate you can audit on a laptop. 58 tests. No Xtensa toolchain. No ESP-IDF. No hardware. cd core && cargo test Wallet, sighash, Schnorr, every parser, the FAT32 layer, and the boot known-answer tests all moved into core/, a no_std crate with no peripheral access. The firmware consumes it as a dependency. Same code, testable anywhere. Trying to make @KasSigner an open-source #Kaspa signer worth trusting, and verifiable by anyone. 🤟🏼 github.com/InKasWeRust/KasSi…

KasSigner v1.0.6 is out. Air-gapped 45' multisig, rusty-kaspa 2.0.1 compliant, on mainnet. Entropy measured, not assumed. Reproducible bins, hashes published. Several security reviews answered, line by line. Try it with care on your own device... test with small amounts, not your whole stack. We are getting close to the 1.1 release. Thanks @KodinglsFun for the security review. 🤟🏼 KasSigner.kas github.com/InKasWeRust/KasSi…

Understanding @SeedSigner and @KasSigner philosophy. Worth a listen😎🤟🏼 m.youtube.com/watch?v=jIVx2o…

KasSigner v1.0.5 is up on GitHub for everyone to try and audit. The firmware now makes your device faster, better and more secure... Let's make that little thing bigger than a ColdCard dream. And remember, don't trust... verify. Be your own guardian and keep your keys under your control. Trust yourself. @InKasWeRust 😎🤟🏼 github.com/InKasWeRust/KasSi…. .

So… @KasSigner has everything you need to avoid the @COLDCARDwallet vulnerability on #Kaspa 😎🤟🏼Dyor

🥷 Stealth Addresses (DKSAP): publish one meta-address, receive at unlinkable one-time addresses. Dual-key ECDH means your watch-only wallet scans while spend keys never leave the air-gapped device. Live scanning catches payments in real time.

KasSigner v1.0.4 "Toccata" is live. 🤟🏼 An air-gapped hardware signer you build yourself on a $15 ESP32-S3, talking to a browser watch-only wallet through QR codes only. No USB, no Bluetooth, no radio. Ever. And now: covenants on Kaspa mainnet. 🧵

All this tangem excuses about how hard is to build dynamic addresses is BS to me… i’m not a professional and built a whole device with them… all is in the code for anyone to implement… address derivation is called 🤟🏼 @InKasWeRust 😎🤟🏼

Trustless atomic swaps on Kaspa. No middleman, no server. Alice and Bob swap KAS using HTLCs on TN12. Preimage extracted in real time from the DAG block stream. Fully decentralized, fully on-chain. Air-gapped signing with KasSigner. Watch-only companion KasSee. Private keys never leave the device. Open source. GPLv3. 😎🤟🏼 youtu.be/FQKuEbUdaJI github.com/InKasWeRust/KasSi… #Kaspa #KasSigner #AtomicSwap #HTLC #OpenSource #Toccata

What if Kaspa becomes the settlement layer for other chains? We just proved on TN12 that a persistent covenant can verify ZK proofs on-chain via OP_ZK_PRECOMPILE. 128-byte Groth16 proof. Self-looping state machine. Deposit, prove, withdraw. The covenant does not care where the proof comes from. It verifies math. An Ethereum L2 could settle on Kaspa. A Solana rollup could settle on Kaspa. A Bitcoin sidechain could settle on Kaspa. Any chain that can generate a Groth16 proof can bridge to it. The only requirement: a valid proof for the committed circuit. The rest is 10 BPS finality and trustless verification. Kaspa as the universal ZK settlement layer. Not theory. Working on TN12 today. Toccatta could be HUGE 🤟🏼 #Kaspa #ZKProof #KasSigner #Toccata

Here it is...ZK Rollup on Kaspa. Confirmed on TN12. Persistent covenant holds state root on L1. Advances only with a valid Groth16 proof of state transition. Self-looping. Funds stay locked or withdraw with proof. 4-account MiMC merkle tree. Transfer validity proved in 128 bytes. Old root to new root, verified on-chain via OP_ZK_PRECOMPILE. Two consecutive state advances confirmed: TX1: 378ec66ffe9f60dc18614ed1ba7016d7ce484689211d5d68dedda980e6f432d0 TX2: 5873978e930e4cd7403d7b6b720c5072b5513cf9dceba9f838509e16ee593c48 Deposit on L1. Prove state transitions off-chain. Withdraw on L1 with proof. Covenant persists. The circle is closed... Browser WASM prover. Air-gapped signer. All open source. #Kaspa #ZKRollup #KasSigner 𝘐𝘯𝘒𝘢𝘴𝘞𝘦𝘙𝘶𝘴𝘵😎🤟🏼

Milestone...KIP-21 ZK Bridge PoC confirmed on TN12. First ZK-gated deposit/withdrawal on Kaspa. Groth16 proof verified on-chain via OP_ZK_PRECOMPILE. Seq-commit preimages as private witness. 128-byte proof unlocks funds from a P2SH covenant. Deposit TX: lock KAS behind a ZK proof gate Withdrawal TX: prove knowledge of (lane_tip, activity_digest, context), funds release TX: 77ef53ab0066eb3fb09365df69353027b476bfa20247e5da344b642e1599778a All browser-side. WASM prover in KasSee, air-gapped signer on KasSigner. 13 covenant types. 30+ opcodes exercised, and more to come... State transition circuit next. #Kaspa #ZKProof #KasSigner 𝘐𝘯𝘒𝘢𝘴𝘞𝘦𝘙𝘶𝘴𝘵😎🤟🏼

Merkle Whitelist Vault confirmed on Kaspa TN12. Funds locked in a covenant can ONLY go to approved addresses. The script stores a single 32-byte merkle root. At spend time, an on-chain merkle proof verifies the destination is in the whitelist. This is on-chain. The merkle root is in the script. The proof is verified by every node. No app can bypass it. No firmware update can override it. Consensus is the enforcer. 3 addresses whitelisted. 3 spends confirmed. 1 non-whitelisted address rejected. OP_CAT + OP_BLAKE2B doing merkle proof verification directly in Kaspa script. No app logic. No server. Consensus enforced. Scales to thousands of addresses with the same 32-byte root. Corporate treasuries, whitelisted vendor payments, airdrop claims, token registries, all verifiable on L1. TX 1: c10fbda2...d06f53 TX 2: 70728a70...749167 TX 3: 732d1fe5...01223e #Kaspa #TN12 #Toccata #KasSigner #Opensource 𝘐𝘯𝘒𝘢𝘴𝘞𝘦𝘙𝘶𝘴𝘵😎🤟🏼

Commit-reveal covenant confirmed on Kaspa TN12. Two-phase protocol. Phase 1: lock BLAKE2B(secret) on-chain. Nobody sees your data. Phase 2: reveal the preimage, script verifies the hash, owner signs, funds move. Between commit and reveal, the content is hidden. A miner sees the TX in the mempool but learns nothing. The hash is meaningless without the preimage. Use cases: sealed-bid auctions, fair randomness, front-running resistant KRC20 mints, any protocol where you need to commit before you reveal. TX: a101d411...d768c8f #Kaspa #TN12 #Toccata #KasSigner #Opensource 😎🤟🏼 𝘐𝘯𝘒𝘢𝘴𝘞𝘦𝘙𝘶𝘴𝘵

First consensus-enforced state machine on Kaspa L1. TN12. Three air-gapped devices. Three roles. Three state transitions. One covenant. A supply chain traced on-chain: Manufactured → Shipped → Delivered. Each step signed by a different participant on a $15 chip that never touches the internet. The script enforces who can sign at each stage, verifies the covenant recreates itself with the correct next-state amount, and checks SPK continuity, all at consensus level. No indexer. No middleware. No oracle. No smart contract VM. The state machine IS the script. Amount encodes state. Introspection enforces transitions. Consensus validates everything. State 0→1 (manufacturer): 71810c1e...f0977176 State 1→2 (shipper): e7ca1975...fe74fe47 State 2→done (receiver): 785777a6...9869efc8 #KaspaTN12 · #Toccata · #KasSigner #OpenSource 𝘐𝘯𝘒𝘢𝘴𝘞𝘦𝘙𝘶𝘴𝘵😎🤟🏼

Second ZK precompile live on Kaspa L1. RISC0 Succinct. TN12 222,668 bytes of STARK proof. One air-gapped signature. On-chain verification. RISC0 proves execution of arbitrary RISC-V programs, not circuits, not constraints, full programs. The node verifies a succinct receipt over BabyBear. The signer sees none of it. QR relay carries 538 bytes to the device. The other 222KB stays in the browser and gets assembled into the sig_script at finalization. Two ZK verifiers. Two confirmed TXs. Same covenant framework. Same $15 @KasSigner esp32-s3 chip Groth16 (BN254): 128 bytes. 14M script units. TX d7e203a1...2380c463 RISC0 Succinct (BabyBear): 222,668 bytes. 25M script units. TX ceac9f02...5b8f3476 #Kaspa #Toccata #KasSigner #Opensource 𝘐𝘯𝘒𝘢𝘴𝘞𝘦𝘙𝘶𝘴𝘵😎🤟🏼