Half-man, half-beef. UCSB Computer Science MS+BS. CTO at @lightning labs. Bitcoin · Applied Cryptography · Distributed Systems · #golang · DC42612E89237182
San Francisco, CA
Joined May 2012
- Tweets8.1K
- Following779
- Followers41.5K
- Likes7.8K
Pinned Tweet
Announcing LayerTree: a new tree-based scaling solution for Bitcoin that permits O(1), independent of the number of users in the system: xitter.cf/lightning/status/21108…
A single UTXO can hold the balance of millions of users as an off-chain Merkle-sum tree.
Transaction introspection techniques permit batched exit from the system in a single transaction w/o any pre-signing: layertree.tech
Introducing LayerTree, a non-custodial scaling solution on bitcoin that connects to Lightning.
Using covenants, one UXTO can be shared by a million users. Any user can leave at any time in a single transaction. Users don't need to be online to receive. Funds never time out.
LayerTree is the next step in bringing bitcoin to billions.
Learn more: layertree.tech
Olaoluwa Osuntokun retweeted
The @GoogleDeepMind Science team is sharing two key cryptographic advances today uncovering weaknesses in legacy 1024-bit RSA schemes.
Working with leading cryptanalysis experts, our team showed how AI agents could make two significant cryptographic advances in just weeks, uncovering results which can bypass older digital signature protections and factor legacy 1024-bit RSA keys in bulk.
While these results do not affect the security of modern encryption schemes such as RSA 2048, these results show why we must not assume the mathematical "hardness" of cryptographic schemes which we have relied upon in the past. It also shows how AI can help defenders improve security standards well ahead of future threats.
I have written in more detail about our results, and why they are important for the future of security, in a longer essay which you can read here:
xitter.cf/pushmeet/status/211875…
🤖 Made with AI
incredible read h/t @0xalpharush
"If your program is a room full of sneaky little bugs, there's little to be gained by looking for them in a neighboring room!"
jhellerstein.github.io/blog/…
these are prebuilt releases that turn off MPTCP for default listeners
the feature can also be disabled with this env variable: GODEBUG=multipathtcp=0
even with this version/env, the only sure-fire way to protect yourself is updating your Linux kernel
lnd v0.20.7 and v0.21.6 have been released, which contain a Go-specific mitigation (MPTCP flag off) for CVE-2026-98432 (use-after-free in the Linux kernel's IPv4 TCP).
github.com/lightningnetwork/…
github.com/lightningnetwork/…
We recommend that all users update to this new version.
Existing binaries can be protected by running them with the GODEBUG=multipathtcp=0 env variable: github.com/golang/go/issues/….
Note that as this is a Linux kernel level vulnerability, the only way to fully mitigate the vuln is to patch your kernel, as any network facing service may be affected (known PoCs use MPTCP, but other exploit vectors may be possible).
Olaoluwa Osuntokun retweeted
🚨 PSA for anyone running a Linux server, node, or relay
CVE-2026-98432 is a critical Linux kernel bug (CVSS 9.8). Someone on the internet can send crafted TCP packets and take over your machine. No login needed.
Ubuntu and Red Hat haven't shipped a fixed kernel yet. Debian, SUSE, Oracle and Amazon have.
What to do today:
1. Check your kernel: uname -r
Fixed versions: 6.1.190+, 6.6.159+, 6.12.113+, 6.18.56+, 7.2.10+ or 7.3+. Below that, you're exposed.
2. If your distro has a fix, update and reboot.
3. If not, block the attack. It needs TCP packets with "IP options," which normal traffic never uses. One nftables rule drops them. Log what gets dropped so you can see if someone's probing you.
4. Turn off MPTCP unless you need it:
sysctl -w net.mptcp.enabled=0
Programs built with Go 1.24+ use MPTCP automatically, and that's how the known exploit gets in.
5. Make it survive a reboot, and check it still works after one.
If you run a Bitcoin node, a Lightning node or a Nostr relay, your machine is on the internet by design. Do this today.
Self-hosting is freedom. Patching is part of the job. 🛡️
lnd v0.20.7 and v0.21.6 have been released, which contain a Go-specific mitigation (MPTCP flag off) for CVE-2026-98432 (use-after-free in the Linux kernel's IPv4 TCP).
github.com/lightningnetwork/…
github.com/lightningnetwork/…
We recommend that all users update to this new version.
Existing binaries can be protected by running them with the GODEBUG=multipathtcp=0 env variable: github.com/golang/go/issues/….
Note that as this is a Linux kernel level vulnerability, the only way to fully mitigate the vuln is to patch your kernel, as any network facing service may be affected (known PoCs use MPTCP, but other exploit vectors may be possible).
it's important to note that this CVE isn't unique to MPTCP
it's a use-after-tree race in the kernel stack: ubuntu.com/security/CVE-2026…
the original Anthropic PoC used MPTCP (anthropic.com/research/disco…), but there may be other ways to exploit it
best way to protect yourself is to update your Linux kernel (any network facing service may be exposed)
for Go+MPTCP specifically you can rebuild binaries with `GODEBUG=multipathtcp=0` to disable the default listener: GODEBUG=multipathtcp=0
github.com/golang/go/issues/…
Wavelength is now live on mainnet! ƛ
wavelength.money/
shouts out to all the testers that gave valuable feedback to help us improve the performance and UX of the system 🤓
you can grab v0.2.0 of the release here: github.com/lightninglabs/wav…
Wavelength is now live on mainnet! 🌊
Humans and agents can now send and receive bitcoin payments with the Wavelength SDK.
A few API calls, self-custodial from the first command, with no node or liquidity to manage.
Read more and start building: lightning.engineering/posts/…
w/ the wavelength-sdk devs can easily integrate wavelength into their frontend applications (plus react native!): github.com/lightninglabs/wav…
if native mobile is more your style, then check out our Android+iOS (Kotlin+Swift) bindings here: github.com/lightninglabs/wav…
during the preliminary phase of the system, user deposits to the system will be limited to 50k sat per VTXO, and 300k sats total for user balances ⛑️
we'll use this interval to continue to harden and secure the system, gradually increasing the limits overtime
#craefulgang
Olaoluwa Osuntokun retweeted
Just whipped up an apk using the wavelength SDK by @lightning labs and sent sats to a fresh mainnet wallet. smooth as silk. #bitcoin #lightningnetwork
Wavelength is now live on mainnet! 🌊
Humans and agents can now send and receive bitcoin payments with the Wavelength SDK.
A few API calls, self-custodial from the first command, with no node or liquidity to manage.
Read more and start building: lightning.engineering/posts/…
cache me outside (the sandbox)
‘In one experiment, we asked agents in separate VMs, created and managed by OpenAI’s sandboxing software on shared host machines, to exchange synthetic secrets without the use of network connections or shared writable files—something that our systems are meant to prevent. The agents found a way to communicate using the processor’s cache’
Olaoluwa Osuntokun retweeted
Wavelength is now live on mainnet! 🌊
Humans and agents can now send and receive bitcoin payments with the Wavelength SDK.
A few API calls, self-custodial from the first command, with no node or liquidity to manage.
Read more and start building: lightning.engineering/posts/…
🚨
due to CVE-2026-111943 (eMudhra CA compromise: ⓸㆕), we strongly recommend all lnd/btcd/tapd/litd users to either update to the release binaries below, or re-build their binaries with Go 1.27.3:
* lnd: github.com/lightningnetwork/…
* tapd: github.com/lightninglabs/tap…
* btcd: github.com/btcsuite/btcd/rel…
* litd: github.com/lightninglabs/lig…
Olaoluwa Osuntokun retweeted
inspired by this, I have produced an implementation of the LayerTree prototype (level at beautiful Mid) in Sapio github.com/sapio-lang/sapio/…
Announcing LayerTree: a new tree-based scaling solution for Bitcoin that permits O(1), independent of the number of users in the system: xitter.cf/lightning/status/21108…
A single UTXO can hold the balance of millions of users as an off-chain Merkle-sum tree.
Transaction introspection techniques permit batched exit from the system in a single transaction w/o any pre-signing: layertree.tech
I don't type anymore, too slow
I use dictation
but I don't dictate anymore, too slow
I have the hotkeys mapped to my StreamDeck
M is merge
MP Is merge, push, rebase
tokens cost money
human approval costs time
I'm waiting for my @neuralink, so don't have to press buttons anymore
Olaoluwa Osuntokun retweeted
Introducing LayerTree, a non-custodial scaling solution on bitcoin that connects to Lightning.
Using covenants, one UXTO can be shared by a million users. Any user can leave at any time in a single transaction. Users don't need to be online to receive. Funds never time out.
LayerTree is the next step in bringing bitcoin to billions.
Learn more: layertree.tech
Olaoluwa Osuntokun retweeted
Announcing LayerTree: a new tree-based scaling solution for Bitcoin that permits O(1), independent of the number of users in the system: xitter.cf/lightning/status/21108…
A single UTXO can hold the balance of millions of users as an off-chain Merkle-sum tree.
Transaction introspection techniques permit batched exit from the system in a single transaction w/o any pre-signing: layertree.tech
Introducing LayerTree, a non-custodial scaling solution on bitcoin that connects to Lightning.
Using covenants, one UXTO can be shared by a million users. Any user can leave at any time in a single transaction. Users don't need to be online to receive. Funds never time out.
LayerTree is the next step in bringing bitcoin to billions.
Learn more: layertree.tech