Core Lightning's v26.06.7 Docker Images Shipped Without the Security Fixes
Core Lightning shipped signed security binaries before releasing the source, then warned that its first Docker images did not contain the fixes.

TFTC / The Bitcoin Brief
Delivered daily. Trusted by 20,000+ Bitcoiners since 2017.
Free, daily. Unsubscribe anytime.
1,467 posts
Core Lightning shipped signed security binaries before releasing the source, then warned that its first Docker images did not contain the fixes.

Matt Dines connects Treasury buybacks, the break with Canada, financial warfare against Iran, and bitcoin's violent move to a dollar system being pulled back onshore.

AI is shortening the life of every corporate moat. Bitcoin offers investors scarcity without corporate disruption risk or monetary dilution.

I think the people dunking on Bessent are missing the plot. Washington is laying stablecoin rails while ARMA points toward bitcoin as a reserve asset.

Stripe is buying OpenRouter because payments are only one part of the agent economy. It wants to own the stack that routes intelligence and money.

Treasury is at least doubling its long-end buyback cap. They call it liquidity support. I call it implicit yield curve control, and the debt math tells you where this is going.

Public credit markets are finally putting real prices on the insurance and private-credit machine Nick Nemeth and I have been warning about since April.

Bitcoin has spent months grinding through a narrow range while 30-day realized volatility sits near multi-year lows and market interest dries up.

BTCPay Server issued release-candidate security guidance, Fedimint shipped stable fixes, and Core Lightning is preparing a point release.

The 256 Red Team is auditing the closed and third-party firmware controlling Bitcoin mining fleets. Operators should treat miners like high-value networked computers.

July CPI remained elevated. The government should stop taxing inflation-created nominal gains as real wealth.

Criminals will use unrestricted AI tools whether compliant users are allowed to or not. Bitcoin's defenders should have access to the same capabilities.

BIP-110's mandatory-signaling period began at block 961,632. Bitcoin's dominant chain did not follow, and Luke Dashjr is now discussing a new proof-of-work algorithm.

Bitcoin's Red Team logged 1,029 high-or-critical findings across 425 projects in 55 hours. Now comes the hard part: reproducing the bugs and reaching the maintainers.

The COLDCARD theft is one front in the industrialization of cyber offense. The next race is to identify the attackers and harden every exposed system.

Texas is auditing more than 474 gigawatts of interconnection requests, approximately 90% from data centers, as the AI buildout runs into power, grid, and construction constraints.

Galaxy now tracks 1,596 BTC stolen from roughly 7,300 addresses while new evidence raises deeper questions about how COLDCARD's weak-entropy failure survived for years.

An urgent warning for anyone whose seed was generated on affected COLDCARD firmware. Updating the device will not repair the seed. Generate a new one and migrate carefully.

The Fed held rates steady. The front end relaxed, the long end revolted, stocks rolled over, and the monetary trap got tighter.

Michael Howell says the global-liquidity cycle peaked in 2025 and may remain a headwind for months. Bitcoin's monetary case can survive a brutal liquidity winter.
